This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json) Hash identifier: ty/mPTvcWmQcgQdJzwgKxaOZsHBt1x+i0TFDETrzwnY= Subject key identifier: A8:E0:CB:30:98:A4:50:31:B9:C7:49:B8:6C:9F:79:59:C3:25:E9:17 Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66 Certificate serial: 019BE1136EE085DB0404AA6767266736C8C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft Manifest number: 92 Signing time: Wed 21 Jan 2026 15:01:45 +0000 Manifest this update: Wed 21 Jan 2026 15:01:45 +0000 Manifest next update: Thu 22 Jan 2026 15:01:45 +0000 Files and hashes: 1: m1egacFq57B1935BP-sWTqQiT20.asa (hash: tdEyXoFuS7NgT46fIpuYRfyuaEE9sqvQF2itFtvP+rM=) 2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: YXstlGLhqS5+ooMqDeq2l4pzHtApbqyd/nHS1p2reeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:13:6e:e0:85:db:04:04:aa:67:67:26:67:36:c8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66 Validity Not Before: Jan 21 15:01:45 2026 GMT Not After : Jan 22 15:01:45 2026 GMT Subject: CN=a8e0cb3098a45031b9c749b86c9f7959c325e917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:8d:6f:a3:1a:33:c9:83:8d:09:c6:cc:bf: ab:00:d3:bf:a3:14:9d:ee:3b:c5:16:aa:ce:51:27: 5f:dc:a8:0c:74:95:c3:a1:5d:53:66:96:39:75:01: b8:7e:88:e5:74:85:d1:5a:a9:59:fd:f4:d1:03:a8: be:6b:d3:42:8e:26:92:9e:fa:1b:ba:ae:85:49:61: 61:54:63:28:bd:af:b1:07:8e:74:92:ea:2c:63:81: 03:75:2f:15:7f:d9:22:4b:cd:6e:cd:37:70:e8:60: 37:3f:03:7e:d8:a9:a2:8a:ee:df:fe:45:83:35:06: 87:eb:ac:bc:29:a7:2c:f6:fe:b8:2f:cf:0d:96:b5: 95:bb:3e:26:46:36:8d:4b:95:0a:71:b6:79:c2:24: 2c:29:4b:22:b0:b9:d1:de:61:6e:1b:a3:63:44:64: 55:14:13:61:c2:83:53:0c:c6:69:f3:d1:d8:37:20: 5f:3e:fa:a9:ff:a2:da:e8:79:5c:d2:df:ef:8e:aa: 9f:40:5b:19:49:fe:78:92:cd:8f:0e:c5:26:38:06: 78:ad:94:b4:99:bc:44:0b:c8:f8:a1:29:4c:c3:1b: 95:c8:cc:5b:52:97:ad:7d:83:4d:e0:93:dd:0c:fe: 34:4e:eb:8b:a5:7b:ec:48:ff:62:d9:f3:1e:c5:64: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E0:CB:30:98:A4:50:31:B9:C7:49:B8:6C:9F:79:59:C3:25:E9:17 X509v3 Authority Key Identifier: keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:33:19:96:53:52:1c:35:99:eb:10:13:f2:47:fc:41:6a:71: f7:16:97:a5:0d:ca:75:5a:b6:70:f2:f8:7d:78:13:2b:19:49: de:34:b7:ec:48:d7:b5:c9:b7:d1:b4:b5:07:f8:dc:c5:ce:f2: 96:81:9c:49:ff:e6:5c:9e:95:5b:9b:0e:9a:12:08:c1:42:15: e0:fa:94:e2:04:ba:00:ab:2e:be:97:03:be:05:04:23:09:d7: e2:55:2a:ac:cc:1d:07:1b:bb:4a:ed:45:89:ac:d8:6f:2d:f3: 7c:3d:87:5f:e7:6e:de:53:d6:73:ed:fd:5b:f6:8f:0a:64:27: 28:14:93:74:16:11:56:3b:bf:32:98:5f:8f:b7:7b:c1:ac:95: 69:fd:cb:93:23:ad:95:8a:ef:5f:ee:39:44:d1:99:16:f3:2c: 37:fa:ac:0c:35:ff:f8:d0:30:d6:5b:bd:63:f7:49:42:f7:75: d9:bb:a4:3d:1d:15:d9:52:19:ef:1b:7f:b9:8f:86:77:c9:ce: b2:49:2b:f0:25:4c:34:9b:6d:60:c2:a9:62:a3:4e:bb:89:30: 8b:d5:7b:79:d1:87:8c:3b:1d:b0:89:07:6b:89:44:ce:b0:a2: 71:ee:49:d9:55:fc:f4:49:13:d3:d5:af:ad:12:ea:d1:00:3c: 92:e0:f9:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvhE27ghdsEBKpnZyZnNsjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjZiZjBlOGM2ZWZjNGFmZmFmNzI2Mjg4NDY5Y2FmZjQx N2RlNjYwHhcNMjYwMTIxMTUwMTQ1WhcNMjYwMTIyMTUwMTQ1WjAzMTEwLwYDVQQD EyhhOGUwY2IzMDk4YTQ1MDMxYjljNzQ5Yjg2YzlmNzk1OWMzMjVlOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4iNb6MaM8mDjQnGzL+rANO/oxSd 7jvFFqrOUSdf3KgMdJXDoV1TZpY5dQG4fojldIXRWqlZ/fTRA6i+a9NCjiaSnvob uq6FSWFhVGMova+xB450kuosY4EDdS8Vf9kiS81uzTdw6GA3PwN+2Kmiiu7f/kWD NQaH66y8Kacs9v64L88NlrWVuz4mRjaNS5UKcbZ5wiQsKUsisLnR3mFuG6NjRGRV FBNhwoNTDMZp89HYNyBfPvqp/6La6Hlc0t/vjqqfQFsZSf54ks2PDsUmOAZ4rZS0 mbxEC8j4oSlMwxuVyMxbUpetfYNN4JPdDP40TuuLpXvsSP9i2fMexWR0zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjgyzCYpFAxucdJuGyfeVnDJekXMB8GA1UdIwQY MBaAFJn2vw6MbvxK/69yYohGnK/0F95mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEt ZTg4Njk1OTU0NzBkLzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEtZTg4Njk1OTU0NzBk LzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1jMZllNS HDWZ6xAT8kf8QWpx9xaXpQ3KdVq2cPL4fXgTKxlJ3jS37EjXtcm30bS1B/jcxc7y loGcSf/mXJ6VW5sOmhIIwUIV4PqU4gS6AKsuvpcDvgUEIwnX4lUqrMwdBxu7Su1F iazYby3zfD2HX+du3lPWc+39W/aPCmQnKBSTdBYRVju/Mphfj7d7wayVaf3LkyOt lYrvX+45RNGZFvMsN/qsDDX/+NAw1lu9Y/dJQvd12bukPR0V2VIZ7xt/uY+Gd8nO skkr8CVMNJttYMKpYqNOu4kwi9V7edGHjDsdsIkHa4lEzrCice5J2VX89EkT09Wv rRLq0QA8kuD5SA== -----END CERTIFICATE-----Generated at Wed Jan 21 18:48:30 2026 by rpki-client