This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json) Hash identifier: 8O2C/W8HsxOmkTLrYgU4U1ai5nmBxsZImD2ZJRdLLAI= Subject key identifier: 32:A4:9E:E6:2E:B2:37:87:05:08:A8:3B:82:8E:0B:2F:F3:E8:1A:30 Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Certificate serial: 019B6CC6622333D1669D548C27DC8A28F663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 01:01:39 +0000 Manifest this update: Tue 30 Dec 2025 01:01:39 +0000 Manifest next update: Wed 31 Dec 2025 01:01:39 +0000 Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: PiD/lxG24SXyJS5daRTj0deu4wiEFpH0fsgGf2OHm8g=) 2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:62:23:33:d1:66:9d:54:8c:27:dc:8a:28:f6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Validity Not Before: Dec 30 01:01:39 2025 GMT Not After : Dec 31 01:01:39 2025 GMT Subject: CN=32a49ee62eb237870508a83b828e0b2ff3e81a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:13:e0:54:11:4b:bf:a0:15:6a:13:08:2f:56: 8f:38:9c:31:3e:21:f4:7a:97:d0:4f:75:ab:12:1a: 64:2d:52:66:cf:1d:4b:3e:24:61:09:13:41:0d:59: b3:db:8c:e1:28:e7:b7:0b:a6:0d:fd:12:38:6a:17: d2:da:05:1d:df:60:09:c2:16:44:1f:db:bd:89:ac: 45:06:52:d2:05:45:03:e7:fe:db:bc:04:09:ee:17: f2:f5:42:2b:df:ba:8c:2f:35:93:ea:3e:5e:df:7a: 57:cf:47:f2:9b:2f:66:21:bc:6d:45:e0:db:10:5b: 9a:d6:b4:da:3b:00:04:c6:e2:ff:d5:af:cf:75:49: 56:43:ff:e1:fe:a1:b9:ae:e1:36:02:da:a7:70:73: c5:c7:59:3c:0c:12:98:c1:16:c0:eb:5b:e2:a3:50: e9:d0:a4:55:0f:59:e6:f0:04:7a:4c:fe:45:73:d8: 74:04:c0:34:84:27:69:ac:ab:25:0e:b6:7a:e0:94: 72:52:96:96:22:1e:b2:55:19:41:9b:f7:38:94:90: 94:a7:73:61:7a:a0:23:18:d4:40:11:11:3b:e3:38: 35:ad:94:c7:6a:08:1b:4f:49:22:84:dd:a8:56:39: 91:08:bb:81:72:ff:d8:cb:00:a1:17:40:0b:27:bc: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A4:9E:E6:2E:B2:37:87:05:08:A8:3B:82:8E:0B:2F:F3:E8:1A:30 X509v3 Authority Key Identifier: keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b4:76:1f:df:0d:3a:f9:94:b3:b0:af:c5:c2:f3:35:82:e0: bb:1c:46:c2:25:fe:6f:e3:20:14:3a:38:33:02:8b:21:97:0d: 42:ec:dd:89:a3:fd:83:ad:25:a8:b4:ec:de:b9:52:30:df:9d: 02:23:77:ac:cd:c4:d6:19:9c:26:e8:c1:10:2e:61:4d:c8:0b: c9:54:3a:6f:c3:26:b0:57:c2:75:a3:ff:a8:e0:51:f3:08:78: c6:15:3e:b0:94:0e:e9:0d:14:f8:21:80:3c:f9:a8:b1:69:76: 7f:2e:c3:7f:99:ab:8c:b0:ea:76:52:10:17:9a:50:44:ab:29: cd:12:37:0e:2a:02:5c:a8:19:47:63:e5:49:72:75:38:1c:4d: 25:84:66:e9:5e:98:f2:7c:29:e8:eb:ae:82:f1:cb:24:c9:89: 0d:31:56:26:aa:11:7d:c9:01:55:4f:49:ad:2d:2b:dc:ba:1f: 33:55:b9:5e:d1:43:1f:8a:95:b1:a6:cb:76:24:e0:55:9e:0c: 40:74:cc:ea:6d:7d:24:18:9b:89:68:a4:e7:74:ce:57:ce:b5: 7c:af:0f:2b:96:92:e2:a4:c2:bf:74:5f:be:61:fe:9e:3f:fb: 5c:2c:5d:81:60:b1:3a:f0:06:ba:24:8b:41:35:56:51:6c:c3: bc:ea:c1:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxmIjM9FmnVSMJ9yKKPZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz ZTk2OWIwHhcNMjUxMjMwMDEwMTM5WhcNMjUxMjMxMDEwMTM5WjAzMTEwLwYDVQQD EygzMmE0OWVlNjJlYjIzNzg3MDUwOGE4M2I4MjhlMGIyZmYzZTgxYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hPgVBFLv6AVahMIL1aPOJwxPiH0 epfQT3WrEhpkLVJmzx1LPiRhCRNBDVmz24zhKOe3C6YN/RI4ahfS2gUd32AJwhZE H9u9iaxFBlLSBUUD5/7bvAQJ7hfy9UIr37qMLzWT6j5e33pXz0fymy9mIbxtReDb EFua1rTaOwAExuL/1a/PdUlWQ//h/qG5ruE2AtqncHPFx1k8DBKYwRbA61vio1Dp 0KRVD1nm8AR6TP5Fc9h0BMA0hCdprKslDrZ64JRyUpaWIh6yVRlBm/c4lJCUp3Nh eqAjGNRAERE74zg1rZTHaggbT0kihN2oVjmRCLuBcv/YywChF0ALJ7yUDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKknuYusjeHBQioO4KOCy/z6BowMB8GA1UdIwQY MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt ODZmNWQwYTExOTQ5LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5 LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLR2H98N OvmUs7CvxcLzNYLguxxGwiX+b+MgFDo4MwKLIZcNQuzdiaP9g60lqLTs3rlSMN+d AiN3rM3E1hmcJujBEC5hTcgLyVQ6b8MmsFfCdaP/qOBR8wh4xhU+sJQO6Q0U+CGA PPmosWl2fy7Df5mrjLDqdlIQF5pQRKspzRI3DioCXKgZR2PlSXJ1OBxNJYRm6V6Y 8nwp6OuugvHLJMmJDTFWJqoRfckBVU9JrS0r3LofM1W5XtFDH4qVsabLdiTgVZ4M QHTM6m19JBibiWik53TOV861fK8PK5aS4qTCv3RfvmH+nj/7XCxdgWCxOvAGuiSL QTVWUWzDvOrBUQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:39 2025 by rpki-client