This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File:                     S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier:          8O2C/W8HsxOmkTLrYgU4U1ai5nmBxsZImD2ZJRdLLAI=
Subject key identifier:   32:A4:9E:E6:2E:B2:37:87:05:08:A8:3B:82:8E:0B:2F:F3:E8:1A:30
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer:       /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial:       019B6CC6622333D1669D548C27DC8A28F663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number:          17A0
Signing time:             Tue 30 Dec 2025 01:01:39 +0000
Manifest this update:     Tue 30 Dec 2025 01:01:39 +0000
Manifest next update:     Wed 31 Dec 2025 01:01:39 +0000
Files and hashes:         1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: PiD/lxG24SXyJS5daRTj0deu4wiEFpH0fsgGf2OHm8g=)
                          2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6c:c6:62:23:33:d1:66:9d:54:8c:27:dc:8a:28:f6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
        Validity
            Not Before: Dec 30 01:01:39 2025 GMT
            Not After : Dec 31 01:01:39 2025 GMT
        Subject: CN=32a49ee62eb237870508a83b828e0b2ff3e81a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:e0:54:11:4b:bf:a0:15:6a:13:08:2f:56:
                    8f:38:9c:31:3e:21:f4:7a:97:d0:4f:75:ab:12:1a:
                    64:2d:52:66:cf:1d:4b:3e:24:61:09:13:41:0d:59:
                    b3:db:8c:e1:28:e7:b7:0b:a6:0d:fd:12:38:6a:17:
                    d2:da:05:1d:df:60:09:c2:16:44:1f:db:bd:89:ac:
                    45:06:52:d2:05:45:03:e7:fe:db:bc:04:09:ee:17:
                    f2:f5:42:2b:df:ba:8c:2f:35:93:ea:3e:5e:df:7a:
                    57:cf:47:f2:9b:2f:66:21:bc:6d:45:e0:db:10:5b:
                    9a:d6:b4:da:3b:00:04:c6:e2:ff:d5:af:cf:75:49:
                    56:43:ff:e1:fe:a1:b9:ae:e1:36:02:da:a7:70:73:
                    c5:c7:59:3c:0c:12:98:c1:16:c0:eb:5b:e2:a3:50:
                    e9:d0:a4:55:0f:59:e6:f0:04:7a:4c:fe:45:73:d8:
                    74:04:c0:34:84:27:69:ac:ab:25:0e:b6:7a:e0:94:
                    72:52:96:96:22:1e:b2:55:19:41:9b:f7:38:94:90:
                    94:a7:73:61:7a:a0:23:18:d4:40:11:11:3b:e3:38:
                    35:ad:94:c7:6a:08:1b:4f:49:22:84:dd:a8:56:39:
                    91:08:bb:81:72:ff:d8:cb:00:a1:17:40:0b:27:bc:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A4:9E:E6:2E:B2:37:87:05:08:A8:3B:82:8E:0B:2F:F3:E8:1A:30
            X509v3 Authority Key Identifier:
                keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:76:1f:df:0d:3a:f9:94:b3:b0:af:c5:c2:f3:35:82:e0:
         bb:1c:46:c2:25:fe:6f:e3:20:14:3a:38:33:02:8b:21:97:0d:
         42:ec:dd:89:a3:fd:83:ad:25:a8:b4:ec:de:b9:52:30:df:9d:
         02:23:77:ac:cd:c4:d6:19:9c:26:e8:c1:10:2e:61:4d:c8:0b:
         c9:54:3a:6f:c3:26:b0:57:c2:75:a3:ff:a8:e0:51:f3:08:78:
         c6:15:3e:b0:94:0e:e9:0d:14:f8:21:80:3c:f9:a8:b1:69:76:
         7f:2e:c3:7f:99:ab:8c:b0:ea:76:52:10:17:9a:50:44:ab:29:
         cd:12:37:0e:2a:02:5c:a8:19:47:63:e5:49:72:75:38:1c:4d:
         25:84:66:e9:5e:98:f2:7c:29:e8:eb:ae:82:f1:cb:24:c9:89:
         0d:31:56:26:aa:11:7d:c9:01:55:4f:49:ad:2d:2b:dc:ba:1f:
         33:55:b9:5e:d1:43:1f:8a:95:b1:a6:cb:76:24:e0:55:9e:0c:
         40:74:cc:ea:6d:7d:24:18:9b:89:68:a4:e7:74:ce:57:ce:b5:
         7c:af:0f:2b:96:92:e2:a4:c2:bf:74:5f:be:61:fe:9e:3f:fb:
         5c:2c:5d:81:60:b1:3a:f0:06:ba:24:8b:41:35:56:51:6c:c3:
         bc:ea:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:51:39 2025 by rpki-client