This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: IZvi8UmGxjGKcqdX0B52wE0VED5n7GUx9HJYE1IuzXs=
Subject key identifier: C4:41:E3:B1:EC:FF:BD:D5:B9:B1:B7:47:F6:33:36:C9:F8:9F:6E:71
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 019C43FE7CE788CDEC0728E42E9029C49F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 20:01:17 +0000
Manifest this update: Mon 09 Feb 2026 20:01:17 +0000
Manifest next update: Tue 10 Feb 2026 20:01:17 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: eodzXbioJ41mvFeOe0jwCUW0DRXqXzJZbDvyod+XK/M=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:7c:e7:88:cd:ec:07:28:e4:2e:90:29:c4:9f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Feb 9 20:01:17 2026 GMT
Not After : Feb 10 20:01:17 2026 GMT
Subject: CN=c441e3b1ecffbdd5b9b1b747f63336c9f89f6e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:48:9a:dc:bb:ad:f0:3f:19:a5:b0:5b:81:
e6:e1:09:c9:42:f4:9f:78:47:62:76:40:bc:c6:ac:
76:11:c1:63:56:7e:01:b0:ea:e7:47:f8:76:0c:ba:
73:52:2a:7f:30:62:97:e1:d6:b4:be:ca:9d:36:3e:
96:26:bc:d3:17:ff:8f:5c:a4:3c:69:f4:55:44:d9:
4e:d9:b8:da:3c:12:59:d6:36:fc:18:df:b5:26:57:
7e:54:ee:eb:ee:8a:70:3e:9b:cb:b3:5e:19:12:a4:
e2:b7:1f:90:3c:2e:35:be:3c:d6:2a:e0:8c:50:35:
d4:0c:36:aa:3f:04:1b:89:ba:1d:d2:40:a0:4f:a1:
5c:31:7e:05:d0:7d:5e:71:dd:ac:62:85:78:b7:ce:
0b:21:fe:7c:7f:ab:25:2f:7f:72:57:cb:5b:70:6f:
eb:ab:45:d8:a6:b3:37:35:16:76:9f:03:bb:1a:77:
2e:a2:7a:f7:5d:f0:1c:12:1a:05:7a:95:60:9c:56:
ab:59:0c:39:42:59:7a:08:49:fc:8f:28:ec:e5:19:
19:e0:ea:39:ff:b7:3b:a0:e8:af:c1:e3:26:c1:6f:
7b:95:0d:f1:71:d6:62:fa:38:36:e2:8a:b0:23:ce:
09:a9:3b:46:6e:b7:a0:fe:c2:95:fc:e3:85:92:8c:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:E3:B1:EC:FF:BD:D5:B9:B1:B7:47:F6:33:36:C9:F8:9F:6E:71
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:13:ff:2a:55:a3:bd:61:67:51:1f:9e:63:7f:cd:a9:89:
0f:25:d7:73:95:2b:59:43:1c:3e:26:07:75:d8:2e:98:35:89:
0e:fa:df:b5:4e:72:08:0a:e7:cd:7b:e9:44:5d:0c:04:fc:b9:
fb:a6:e6:c2:a1:f5:2c:b1:4c:68:74:6e:55:15:38:9c:2b:7c:
0b:1f:58:a7:fe:c4:1b:79:8b:d6:43:88:ac:ae:5c:aa:e6:36:
b1:69:45:0b:a3:62:35:56:ab:93:2c:ca:c4:5a:cf:4a:4a:45:
95:eb:da:3f:51:9b:1d:63:ed:aa:dd:e8:2b:e5:68:e0:b8:18:
d3:05:93:96:fa:7f:78:f9:91:db:ba:d2:d7:c1:de:78:7f:c0:
df:89:70:5e:b5:f8:79:4b:e6:98:8c:23:3c:85:f1:e1:95:62:
91:eb:95:33:bf:ac:8c:07:4f:e8:51:76:2a:26:14:07:3a:6f:
bf:47:52:41:f7:86:94:33:70:f4:d6:65:74:24:55:aa:3b:2c:
3d:f1:b8:77:5a:8b:41:ae:19:f4:80:33:7a:38:c8:df:ba:e0:
b1:d0:eb:a9:22:fd:77:39:37:f7:f6:31:eb:86:c4:9d:a6:fd:
da:cb:b7:56:8a:e5:23:12:a1:b6:a6:e1:a8:fc:06:c4:6e:b0:
a5:91:25:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:47 2026 by rpki-client