This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json) Hash identifier: FTy7nG1gMwO6JGyfKqHzNOrSgx0x9hdIBeXN5+P1v2w= Subject key identifier: E5:FF:05:2D:0C:6A:01:71:E1:48:E4:A1:69:E1:D7:4B:B6:95:0F:55 Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Certificate serial: 019B4324F0C285C12AD220DC8E0E7DFB42B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft Manifest number: 0CE3 Signing time: Sun 21 Dec 2025 23:00:52 +0000 Manifest this update: Sun 21 Dec 2025 23:00:52 +0000 Manifest next update: Mon 22 Dec 2025 23:00:52 +0000 Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: 1DpXMkWhHZWSh/mEv9uugObru9hdqMr18mun2dIkzMQ=) 2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:f0:c2:85:c1:2a:d2:20:dc:8e:0e:7d:fb:42:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Validity Not Before: Dec 21 23:00:52 2025 GMT Not After : Dec 22 23:00:52 2025 GMT Subject: CN=e5ff052d0c6a0171e148e4a169e1d74bb6950f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7f:57:1b:30:ec:2e:09:8f:f4:ae:45:7e:15: 8e:8a:6e:bc:90:d9:ac:10:c0:90:49:b2:3b:84:0d: ef:68:fc:8c:3e:c4:c1:73:8c:9e:90:4f:db:12:96: 7c:23:c8:0c:b9:e7:fe:3f:c6:d2:db:ce:a2:37:9e: 98:9e:46:3e:2d:3a:42:80:50:a1:84:96:e9:49:ac: d8:1b:49:1d:14:36:c3:f9:0c:e2:8c:6e:b9:02:4f: a0:06:22:8b:99:92:88:8e:e9:bb:6e:85:ee:bd:8d: c7:f3:11:f8:e6:94:0f:54:25:e8:24:2b:eb:77:9b: 05:23:14:5c:c5:0f:0b:1b:10:6e:aa:ee:1a:6e:4f: 06:35:80:ac:c4:0c:e9:a1:1e:34:f7:a8:20:a6:00: af:f3:18:2b:21:32:e1:33:10:0b:b0:5e:93:8c:b3: 04:2c:05:b5:80:a7:2c:62:3c:26:a9:d5:f7:90:e1: 93:f4:a1:05:40:30:c9:fe:44:a4:43:31:5f:db:98: d9:63:f0:5d:c1:67:43:6a:bc:3f:6e:57:28:28:84: d7:f2:46:ac:10:4e:6d:9f:f0:64:55:af:be:71:0e: 2b:3b:eb:3e:c9:56:85:81:5e:0f:38:9b:b1:8a:22: 0b:fe:ab:39:06:ad:9b:90:3d:41:26:d5:63:11:b1: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FF:05:2D:0C:6A:01:71:E1:48:E4:A1:69:E1:D7:4B:B6:95:0F:55 X509v3 Authority Key Identifier: keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:67:11:3c:0e:77:35:95:2d:ec:01:44:e6:7e:a3:b2:c5:c7: f8:96:8f:6b:d9:72:3a:39:38:b0:a6:3d:27:1b:a5:62:cb:9c: b8:ca:00:f1:b8:f0:b6:a1:ac:9f:c0:1a:e0:01:0c:1f:f9:07: 60:db:6f:2f:18:eb:5e:1e:76:4b:2c:03:8f:39:96:ec:89:81: 4d:54:42:02:96:9b:46:cc:e2:84:d0:29:63:f3:23:4f:56:5f: 1a:f7:f2:2b:de:6b:22:ab:15:27:1d:24:fc:2c:7a:23:26:d0: a1:1a:19:eb:08:96:41:1a:38:07:f0:dc:ad:57:86:c0:51:5f: a2:cc:ed:ee:79:11:3e:ef:7b:c0:8c:47:65:dc:1c:19:f0:d0: 02:09:51:8f:a5:be:a1:76:ed:20:51:46:ba:ba:ef:f9:6e:8f: 65:bd:90:9c:4d:15:44:f1:57:0c:77:27:61:f7:b9:4b:5a:58: 2d:13:78:13:2e:c6:ce:32:52:85:6b:2b:e7:f1:5f:f9:59:2a: c1:5d:79:58:db:f7:79:ef:77:49:d7:35:1d:d4:d3:69:43:f3: 0c:ab:b5:6f:b7:94:8f:08:6a:af:fe:4c:84:c6:00:6a:c5:17: 14:e9:88:e8:4d:56:14:fe:40:e5:ab:08:bd:a8:b3:92:9d:26: b0:d0:95:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJPDChcEq0iDcjg59+0KxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYmU0NDM1NWUwNmZhYWRiZWIxOTQ1NWFkYzMxNmQ5Yjlm MGYxMGUwHhcNMjUxMjIxMjMwMDUyWhcNMjUxMjIyMjMwMDUyWjAzMTEwLwYDVQQD EyhlNWZmMDUyZDBjNmEwMTcxZTE0OGU0YTE2OWUxZDc0YmI2OTUwZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH9XGzDsLgmP9K5FfhWOim68kNms EMCQSbI7hA3vaPyMPsTBc4yekE/bEpZ8I8gMuef+P8bS286iN56YnkY+LTpCgFCh hJbpSazYG0kdFDbD+QzijG65Ak+gBiKLmZKIjum7boXuvY3H8xH45pQPVCXoJCvr d5sFIxRcxQ8LGxBuqu4abk8GNYCsxAzpoR4096ggpgCv8xgrITLhMxALsF6TjLME LAW1gKcsYjwmqdX3kOGT9KEFQDDJ/kSkQzFf25jZY/BdwWdDarw/blcoKITX8kas EE5tn/BkVa++cQ4rO+s+yVaFgV4POJuxiiIL/qs5Bq2bkD1BJtVjEbH4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX/BS0MagFx4UjkoWnh10u2lQ9VMB8GA1UdIwQY MBaAFDu+RDVeBvqtvrGUVa3DFtm58PEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQt YjA4MTQwMDc1MjhmLzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQtYjA4MTQwMDc1Mjhm LzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2cRPA53 NZUt7AFE5n6jssXH+JaPa9lyOjk4sKY9JxulYsucuMoA8bjwtqGsn8Aa4AEMH/kH YNtvLxjrXh52SywDjzmW7ImBTVRCApabRszihNApY/MjT1ZfGvfyK95rIqsVJx0k /Cx6IybQoRoZ6wiWQRo4B/DcrVeGwFFfoszt7nkRPu97wIxHZdwcGfDQAglRj6W+ oXbtIFFGurrv+W6PZb2QnE0VRPFXDHcnYfe5S1pYLRN4Ey7GzjJShWsr5/Ff+Vkq wV15WNv3ee93Sdc1HdTTaUPzDKu1b7eUjwhqr/5MhMYAasUXFOmI6E1WFP5A5asI vaizkp0msNCVVQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:41 2025 by rpki-client