This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json) Hash identifier: 5DA87Obpi27hprKyNu4W0mQeIqHlyfOaT5ZwUVEhjos= Subject key identifier: 30:26:06:D9:D9:71:17:D8:EA:3E:20:24:FA:F6:0B:22:84:5F:29:1F Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Certificate serial: 019B6EB4000A6273EA56839AEE7760F0D571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 10:00:48 +0000 Manifest this update: Tue 30 Dec 2025 10:00:48 +0000 Manifest next update: Wed 31 Dec 2025 10:00:48 +0000 Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: HdbLiYKcGCPvAvvNWb92keJP3ELBlMuHc2iEaFSBPI4=) 2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:00:0a:62:73:ea:56:83:9a:ee:77:60:f0:d5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Validity Not Before: Dec 30 10:00:48 2025 GMT Not After : Dec 31 10:00:48 2025 GMT Subject: CN=302606d9d97117d8ea3e2024faf60b22845f291f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:0a:4b:27:18:a6:ab:5a:29:10:09:1c:3c: af:c3:b6:2a:a6:1d:f0:c7:a9:8d:ad:20:05:84:79: 67:90:d0:d8:9b:65:de:17:4a:c9:12:e5:f1:e1:f9: 20:1f:06:f8:f3:0c:3e:67:4f:a3:62:f5:8f:ae:17: 75:a4:93:a9:a9:65:d4:2a:0e:a6:9f:dc:80:62:ae: c2:17:a2:00:05:db:32:79:42:9d:0a:65:c2:d6:1e: ad:c4:b7:f2:2f:c1:e1:b2:99:0a:ca:2f:5d:c7:bf: e2:6e:da:80:6b:3a:6d:48:28:28:29:f7:96:90:52: ab:67:1f:ab:0f:dd:75:c8:89:3e:c8:ea:d9:ff:5e: 88:33:ca:34:45:8e:7e:88:a7:56:b4:7f:8b:8f:e4: 4d:d5:70:62:3a:e4:ae:50:16:90:44:47:3d:1d:e7: 09:f0:60:f0:ff:cd:41:ee:cf:d5:1a:7d:9e:01:bf: 55:c7:36:6d:11:f5:93:95:71:f3:c4:08:2c:3a:7c: 9f:bd:4f:6c:46:91:7f:de:8e:64:bc:da:36:47:ca: 65:8f:3a:bd:20:1a:69:d2:54:77:27:86:08:d3:f4: c6:15:e1:52:ab:7b:b4:40:02:dd:7d:6e:d4:7d:a4: 2e:cf:4a:26:52:b8:30:2b:0b:81:50:e6:6f:0a:d2: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:26:06:D9:D9:71:17:D8:EA:3E:20:24:FA:F6:0B:22:84:5F:29:1F X509v3 Authority Key Identifier: keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2c:e3:d4:96:2a:d1:7b:c6:f5:2e:2c:b7:41:89:86:1c:f5: 20:30:cb:e3:a4:e4:ff:87:f5:d3:34:d8:77:ee:ac:2a:ca:e0: 64:2e:94:35:e2:a7:68:21:ea:ef:5d:8a:37:13:dc:36:69:01: 25:79:ce:02:91:de:92:42:01:47:99:86:f2:2f:e8:b8:d4:c3: 30:ed:b2:31:89:ec:da:dd:cc:1f:73:16:26:cf:25:73:67:8d: 7b:59:1a:dd:55:50:63:fc:52:16:6b:b2:68:64:37:34:6c:87: 80:ac:fb:5b:a3:9a:a2:c4:17:13:99:78:b3:8b:bc:61:1a:1a: 0f:c4:db:39:76:fd:c7:d3:0e:e4:db:b6:40:a8:ee:63:d4:b6: 11:af:5c:34:76:46:65:e5:36:42:8e:8b:d4:44:16:b1:58:16: b8:a2:e8:1f:b4:6e:b9:4d:47:5d:a0:fa:4b:39:1f:6c:d4:40: 0f:93:e8:8d:b6:70:d6:98:80:97:ca:34:0f:93:d7:ff:1c:15: 59:33:e6:1b:d4:79:84:77:5e:2f:24:de:3b:47:c1:3b:bf:b5: 76:be:e5:7a:a3:b9:11:de:0f:13:c0:11:15:60:e0:d7:fb:3c: bd:5e:9b:56:41:16:40:a6:09:98:61:9d:1b:71:cf:e6:7a:f4: 7d:70:22:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutAAKYnPqVoOa7ndg8NVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz ZTk2OWIwHhcNMjUxMjMwMTAwMDQ4WhcNMjUxMjMxMTAwMDQ4WjAzMTEwLwYDVQQD EygzMDI2MDZkOWQ5NzExN2Q4ZWEzZTIwMjRmYWY2MGIyMjg0NWYyOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsYKSycYpqtaKRAJHDyvw7Yqph3w x6mNrSAFhHlnkNDYm2XeF0rJEuXx4fkgHwb48ww+Z0+jYvWPrhd1pJOpqWXUKg6m n9yAYq7CF6IABdsyeUKdCmXC1h6txLfyL8HhspkKyi9dx7/ibtqAazptSCgoKfeW kFKrZx+rD911yIk+yOrZ/16IM8o0RY5+iKdWtH+Lj+RN1XBiOuSuUBaQREc9HecJ 8GDw/81B7s/VGn2eAb9VxzZtEfWTlXHzxAgsOnyfvU9sRpF/3o5kvNo2R8pljzq9 IBpp0lR3J4YI0/TGFeFSq3u0QALdfW7UfaQuz0omUrgwKwuBUOZvCtIaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAmBtnZcRfY6j4gJPr2CyKEXykfMB8GA1UdIwQY MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt ODZmNWQwYTExOTQ5LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5 LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCzj1JYq 0XvG9S4st0GJhhz1IDDL46Tk/4f10zTYd+6sKsrgZC6UNeKnaCHq712KNxPcNmkB JXnOApHekkIBR5mG8i/ouNTDMO2yMYns2t3MH3MWJs8lc2eNe1ka3VVQY/xSFmuy aGQ3NGyHgKz7W6OaosQXE5l4s4u8YRoaD8TbOXb9x9MO5Nu2QKjuY9S2Ea9cNHZG ZeU2Qo6L1EQWsVgWuKLoH7RuuU1HXaD6SzkfbNRAD5PojbZw1piAl8o0D5PX/xwV WTPmG9R5hHdeLyTeO0fBO7+1dr7leqO5Ed4PE8ARFWDg1/s8vV6bVkEWQKYJmGGd G3HP5nr0fXAiQw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:25 2025 by rpki-client