This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json) Hash identifier: RG+rFXZwcsocc4CRgvgWNFPZ79ykxOGxgepLS96FOu8= Subject key identifier: 4C:C1:6A:D4:D3:9E:E3:2A:70:80:AA:64:78:56:B7:3F:B7:EA:CF:F3 Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Certificate serial: 019B378EA60DC1D4F482C76A8770899074EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft Manifest number: 0CDD Signing time: Fri 19 Dec 2025 17:00:53 +0000 Manifest this update: Fri 19 Dec 2025 17:00:53 +0000 Manifest next update: Sat 20 Dec 2025 17:00:53 +0000 Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: ATTMdnv54Db/ybWJ7J4kmc9zs9ub7FG5rhypZ/EWrxw=) 2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:a6:0d:c1:d4:f4:82:c7:6a:87:70:89:90:74:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Validity Not Before: Dec 19 17:00:53 2025 GMT Not After : Dec 20 17:00:53 2025 GMT Subject: CN=4cc16ad4d39ee32a7080aa647856b73fb7eacff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:c4:dc:d9:74:fe:fd:22:db:89:55:18:a8: 99:48:a3:9e:61:7f:1a:68:d7:1d:cc:d5:4e:82:2c: 97:ac:30:ae:0b:e0:9d:ce:e9:34:84:a4:10:da:3a: 1d:34:f8:18:43:44:a6:0a:59:04:51:1f:57:12:d0: 38:5a:ea:70:d6:d5:08:c0:a0:51:09:d7:6f:b7:8b: ff:8b:c7:3c:0b:29:45:5c:69:4f:9f:d5:93:f2:68: a8:4f:e6:5f:18:db:4c:cc:cd:08:0e:b2:46:b1:29: 5d:fa:e1:82:da:f3:6c:25:d1:35:dc:7d:84:f8:5c: f7:74:9b:d7:84:19:30:7e:64:c0:47:91:ba:c3:07: 8b:35:3a:0a:4b:a0:df:45:41:50:b8:a1:bd:61:0e: 14:ab:4a:ff:1a:b2:f2:32:b4:dd:0f:91:9b:d5:2c: 63:a4:b3:32:91:0b:54:46:30:5f:cb:e3:d0:08:ff: e1:0a:eb:15:bb:ce:66:7d:29:fe:b1:df:c3:b2:3a: 12:10:88:8d:ad:a1:7d:c6:db:3b:99:f6:11:1b:a5: e5:50:51:fa:f0:5d:3c:bd:47:47:1c:6a:1d:04:37: 24:05:de:b0:c8:1d:98:1f:45:ec:ab:08:cd:7b:2d: 13:f7:06:1c:eb:77:07:68:b6:c0:17:fe:4a:25:9e: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C1:6A:D4:D3:9E:E3:2A:70:80:AA:64:78:56:B7:3F:B7:EA:CF:F3 X509v3 Authority Key Identifier: keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ea:77:de:8b:a3:3f:3a:ae:e8:ad:de:52:35:ec:37:da:16: 1e:14:8f:23:e4:d5:5b:71:50:76:5c:c0:47:f0:61:3a:1c:58: e1:3a:39:d3:0a:13:90:fa:3b:fc:f1:13:2a:c2:07:a2:aa:d9: d3:5e:6a:c1:80:87:e9:5b:fd:d3:3f:cd:3c:6b:9d:2d:3a:15: 1e:6a:2c:ff:bf:57:04:b8:2b:17:33:fe:02:1f:d6:d3:2b:4b: 06:cf:bc:2c:39:f8:13:9f:7b:a3:f5:48:ae:ce:d7:8e:bf:15: 3d:1c:52:40:dd:0d:4a:80:2d:48:92:45:cc:c0:eb:61:2f:43: 9c:d2:4a:22:e1:a6:35:eb:ff:1b:50:9c:40:3c:6a:66:df:c9: f1:75:11:cf:a1:f3:49:ad:be:ce:71:b4:53:0b:0b:18:67:16: 28:b6:f8:3e:b0:78:13:b9:06:ee:ee:ba:d2:f9:1f:97:22:8b: 24:e6:17:5a:99:ff:c6:29:3e:ec:bc:d0:c1:99:1d:3e:50:b8: 4c:a3:6d:b0:01:0c:1b:bd:a3:d7:e8:c2:bf:4c:e5:ff:ad:86: 77:5a:48:52:a8:a3:f8:b3:2f:c5:9c:e3:80:28:49:ed:f7:03: 0b:5a:ff:48:9e:5c:2d:b9:20:df:a0:92:b9:09:f0:c0:aa:60: 2b:44:ab:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jqYNwdT0gsdqh3CJkHTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYmU0NDM1NWUwNmZhYWRiZWIxOTQ1NWFkYzMxNmQ5Yjlm MGYxMGUwHhcNMjUxMjE5MTcwMDUzWhcNMjUxMjIwMTcwMDUzWjAzMTEwLwYDVQQD Eyg0Y2MxNmFkNGQzOWVlMzJhNzA4MGFhNjQ3ODU2YjczZmI3ZWFjZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI7E3Nl0/v0i24lVGKiZSKOeYX8a aNcdzNVOgiyXrDCuC+Cdzuk0hKQQ2jodNPgYQ0SmClkEUR9XEtA4Wupw1tUIwKBR Cddvt4v/i8c8CylFXGlPn9WT8mioT+ZfGNtMzM0IDrJGsSld+uGC2vNsJdE13H2E +Fz3dJvXhBkwfmTAR5G6wweLNToKS6DfRUFQuKG9YQ4Uq0r/GrLyMrTdD5Gb1Sxj pLMykQtURjBfy+PQCP/hCusVu85mfSn+sd/DsjoSEIiNraF9xts7mfYRG6XlUFH6 8F08vUdHHGodBDckBd6wyB2YH0XsqwjNey0T9wYc63cHaLbAF/5KJZ6OfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzBatTTnuMqcICqZHhWtz+36s/zMB8GA1UdIwQY MBaAFDu+RDVeBvqtvrGUVa3DFtm58PEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQt YjA4MTQwMDc1MjhmLzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQtYjA4MTQwMDc1Mjhm LzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+p33ouj Pzqu6K3eUjXsN9oWHhSPI+TVW3FQdlzAR/BhOhxY4To50woTkPo7/PETKsIHoqrZ 015qwYCH6Vv90z/NPGudLToVHmos/79XBLgrFzP+Ah/W0ytLBs+8LDn4E597o/VI rs7Xjr8VPRxSQN0NSoAtSJJFzMDrYS9DnNJKIuGmNev/G1CcQDxqZt/J8XURz6Hz Sa2+znG0UwsLGGcWKLb4PrB4E7kG7u660vkflyKLJOYXWpn/xik+7LzQwZkdPlC4 TKNtsAEMG72j1+jCv0zl/62Gd1pIUqij+LMvxZzjgChJ7fcDC1r/SJ5cLbkg36CS uQnwwKpgK0SrZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:06 2025 by rpki-client