This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json) Hash identifier: xooVpS8wRcQTIeQrFnol7YafOJ9+zfx//6gsZWlsd2o= Subject key identifier: 4B:A9:0B:C7:AF:5D:DB:4F:81:23:B9:E2:98:0D:F6:2B:FE:F0:11:18 Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Certificate serial: 019AF20904CBE45276198C8DAFCF9368237E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft Manifest number: 0CB9 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: knAIBXrbv1trVpZ+M63lKmHzmdXvyic3Cmh076JTI38=) 2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:04:cb:e4:52:76:19:8c:8d:af:cf:93:68:23:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=4ba90bc7af5ddb4f8123b9e2980df62bfef01118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:d4:6b:31:37:74:f2:f5:2a:b6:3a:9e:ce: 65:c1:c7:08:c5:47:07:42:84:db:6e:ca:24:a3:9f: 16:3b:b6:72:4b:04:35:9b:82:ce:d7:27:ef:1d:fd: df:6d:1d:2f:db:6f:a0:12:a7:6f:d2:ed:87:2d:3f: 7f:4e:6c:7d:00:6c:ee:bf:0c:c5:04:b1:80:dc:79: 6a:02:b8:99:d5:c4:64:50:8b:72:2a:1f:14:65:c9: fc:5e:86:fe:33:6f:bc:6b:f9:fa:75:40:a3:06:24: 5d:bc:b9:e7:fc:42:26:05:b0:ee:d8:0f:a2:1d:d5: ad:33:bb:d5:b0:fb:9c:c7:9d:66:42:c9:5c:b3:a1: c7:1c:fc:18:bb:91:81:e9:65:87:56:67:fe:7b:77: 41:75:1a:79:72:96:1d:ff:d3:ee:93:35:14:70:87: 89:70:6b:43:59:fa:c3:12:ce:aa:f5:b7:84:33:46: a4:c6:4a:dd:b6:75:1e:9b:fb:12:17:d1:08:e8:30: 70:c9:8d:ab:78:05:df:20:ed:28:2c:63:04:be:ae: a4:b9:3c:62:38:62:42:69:47:fb:f8:ac:39:04:19: f4:d6:9b:73:54:73:2e:c8:2e:a0:1c:2c:d3:a2:a9: b3:b3:99:4e:c4:a0:fa:ca:b0:3a:5d:84:ed:f6:b9: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A9:0B:C7:AF:5D:DB:4F:81:23:B9:E2:98:0D:F6:2B:FE:F0:11:18 X509v3 Authority Key Identifier: keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ae:0b:4d:89:ab:59:29:50:c6:54:9d:12:d8:6e:70:31:b3: 04:0c:89:c3:bb:da:02:a0:71:94:e9:63:f2:b6:3a:5b:07:e6: f7:b6:13:a0:74:3c:94:4e:bd:f4:62:51:5a:be:15:d9:f0:ec: f4:a3:a5:b5:e0:f3:e5:01:d0:36:21:a4:86:a7:77:36:fd:b7: 82:a4:c1:ff:5c:96:b4:1c:b4:cc:5f:08:1f:66:7f:99:8c:f5: f6:d0:53:e9:92:47:1c:ce:c3:7e:d1:d3:04:92:26:64:ff:73: f3:1f:46:b9:b9:4e:8b:6a:51:a0:3d:51:22:db:76:a2:13:2b: 99:0c:b2:18:66:cc:c7:91:46:c2:59:ee:6e:3c:f0:19:90:12: 85:0f:50:de:44:b9:27:59:e6:10:45:9e:9b:ae:4f:33:f4:02: b2:27:27:4d:20:71:93:cd:e7:93:e5:69:27:68:72:5f:36:b6: a0:1d:75:6b:c6:eb:d7:33:3c:37:da:96:a6:80:31:1e:96:b5: 7a:89:bb:2e:4e:19:ca:20:35:6a:53:03:ea:f2:bf:7b:a4:78: 0e:d6:b9:36:89:67:f5:a3:31:a3:25:90:9c:e8:a2:70:a8:c8: 43:38:db:57:01:f1:5b:f4:d7:bb:f9:45:11:aa:48:41:71:ae: 49:a8:ed:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQTL5FJ2GYyNr8+TaCN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYmU0NDM1NWUwNmZhYWRiZWIxOTQ1NWFkYzMxNmQ5Yjlm MGYxMGUwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD Eyg0YmE5MGJjN2FmNWRkYjRmODEyM2I5ZTI5ODBkZjYyYmZlZjAxMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaDUazE3dPL1KrY6ns5lwccIxUcH QoTbbsoko58WO7ZySwQ1m4LO1yfvHf3fbR0v22+gEqdv0u2HLT9/Tmx9AGzuvwzF BLGA3HlqAriZ1cRkUItyKh8UZcn8Xob+M2+8a/n6dUCjBiRdvLnn/EImBbDu2A+i HdWtM7vVsPucx51mQslcs6HHHPwYu5GB6WWHVmf+e3dBdRp5cpYd/9PukzUUcIeJ cGtDWfrDEs6q9beEM0akxkrdtnUem/sSF9EI6DBwyY2reAXfIO0oLGMEvq6kuTxi OGJCaUf7+Kw5BBn01ptzVHMuyC6gHCzToqmzs5lOxKD6yrA6XYTt9rmL+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEupC8evXdtPgSO54pgN9iv+8BEYMB8GA1UdIwQY MBaAFDu+RDVeBvqtvrGUVa3DFtm58PEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQt YjA4MTQwMDc1MjhmLzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQtYjA4MTQwMDc1Mjhm LzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK4LTYmr WSlQxlSdEthucDGzBAyJw7vaAqBxlOlj8rY6Wwfm97YToHQ8lE699GJRWr4V2fDs 9KOlteDz5QHQNiGkhqd3Nv23gqTB/1yWtBy0zF8IH2Z/mYz19tBT6ZJHHM7DftHT BJImZP9z8x9GublOi2pRoD1RItt2ohMrmQyyGGbMx5FGwlnubjzwGZAShQ9Q3kS5 J1nmEEWem65PM/QCsicnTSBxk83nk+VpJ2hyXza2oB11a8br1zM8N9qWpoAxHpa1 eom7Lk4ZyiA1alMD6vK/e6R4Dta5Noln9aMxoyWQnOiicKjIQzjbVwHxW/TXu/lF EapIQXGuSajttw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:32 2025 by rpki-client