This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json) Hash identifier: k6d1b4Il6g53+jRsUkYaO7c2MV0oWcd8Y4Oy/hblUyU= Subject key identifier: 78:2A:F0:E1:31:51:01:FC:0A:4A:E6:71:97:77:AB:47:04:35:BF:EC Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Certificate serial: 019B273FAAFB462184D9861A3E8038108484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 13:00:42 +0000 Manifest this update: Tue 16 Dec 2025 13:00:42 +0000 Manifest next update: Wed 17 Dec 2025 13:00:42 +0000 Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: m0hsclzEREKG+jIE6tcEnM0P9xosdNbvAx9m24w5xgM=) 2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:aa:fb:46:21:84:d9:86:1a:3e:80:38:10:84:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Validity Not Before: Dec 16 13:00:42 2025 GMT Not After : Dec 17 13:00:42 2025 GMT Subject: CN=782af0e1315101fc0a4ae6719777ab470435bfec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:82:99:68:99:80:7e:ef:25:4f:2c:be:46: 15:52:2d:84:3f:21:22:16:13:20:69:70:43:20:68: 65:c6:3f:20:17:07:ed:95:75:5a:13:53:60:48:2c: a9:df:9a:49:8a:5a:8d:19:9d:29:96:80:d1:5a:b9: ab:11:f5:cf:db:0d:6c:d5:3f:fb:19:a2:65:94:2a: fe:12:9c:c9:ae:14:cd:8c:50:64:8d:4f:8d:4c:71: 2b:ed:3d:42:c9:9b:93:a4:be:c8:49:6f:d8:fe:e8: 6c:a9:c8:61:94:b4:f9:69:e4:e5:82:00:59:85:50: 68:23:bf:09:a2:a1:06:f8:5d:4c:4e:34:2d:82:ba: 08:e9:ae:b4:41:ce:94:9f:cf:7e:59:16:fb:08:88: a3:bd:ba:dc:59:9e:51:12:4e:ab:cf:70:42:d9:01: 37:c0:14:0e:83:48:42:92:e8:07:4e:37:e2:30:5e: 52:32:0a:89:51:b3:a7:3c:15:80:31:eb:21:1a:dd: a9:46:b6:d5:a8:97:0c:f6:9e:ee:f9:d6:e0:65:04: a0:37:7d:65:81:d8:0a:43:2f:b6:a1:c7:51:b3:fe: ec:0a:aa:ac:01:68:61:13:fb:72:6d:43:a0:90:94: d8:07:40:61:5d:37:da:a1:f4:ff:39:18:14:ed:e9: 97:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2A:F0:E1:31:51:01:FC:0A:4A:E6:71:97:77:AB:47:04:35:BF:EC X509v3 Authority Key Identifier: keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:91:1f:57:eb:95:13:0a:07:b7:89:e2:98:af:b7:02:69:a3: a2:c8:73:04:43:0b:bd:28:54:fa:98:bf:df:90:50:55:1b:89: a6:b4:6e:30:53:0e:e7:71:26:7f:de:e8:b1:cb:84:e3:85:59: c3:a9:77:1a:e8:dd:97:ce:b0:94:f5:af:4b:43:c4:59:bc:16: aa:8f:2e:67:f4:c3:6b:81:b7:32:dc:0d:f5:82:08:4d:21:3e: 8a:15:cf:51:14:4c:08:87:bb:1c:d0:c8:20:53:82:3e:53:ef: 81:72:4c:8f:f7:bf:5c:78:33:57:5d:ba:7a:c8:4f:6e:62:7d: e8:46:8b:3f:5e:7d:0e:58:4a:8e:77:8b:53:e6:63:a2:c0:9f: 37:2f:eb:64:ed:22:0e:7c:a8:65:a9:4a:2f:b6:30:84:ad:f5: 6a:c1:38:a4:2e:ba:f2:c9:48:47:1d:61:49:fa:a6:3a:1a:eb: 39:48:5d:e8:8e:1a:ae:05:a3:be:d8:17:ce:1b:e6:00:26:93: 7a:cb:83:57:51:d1:a5:2a:98:5a:1a:83:88:0d:dc:e5:e6:e2: ea:a8:bf:cc:e2:5a:c8:16:ef:61:17:5c:6e:c2:3b:2d:53:82: 9b:0c:58:3c:98:24:31:3e:7a:0b:a8:97:83:87:d2:d5:94:ed: 52:98:6b:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP6r7RiGE2YYaPoA4EISEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz ZTk2OWIwHhcNMjUxMjE2MTMwMDQyWhcNMjUxMjE3MTMwMDQyWjAzMTEwLwYDVQQD Eyg3ODJhZjBlMTMxNTEwMWZjMGE0YWU2NzE5Nzc3YWI0NzA0MzViZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCeCmWiZgH7vJU8svkYVUi2EPyEi FhMgaXBDIGhlxj8gFwftlXVaE1NgSCyp35pJilqNGZ0ploDRWrmrEfXP2w1s1T/7 GaJllCr+EpzJrhTNjFBkjU+NTHEr7T1CyZuTpL7ISW/Y/uhsqchhlLT5aeTlggBZ hVBoI78JoqEG+F1MTjQtgroI6a60Qc6Un89+WRb7CIijvbrcWZ5REk6rz3BC2QE3 wBQOg0hCkugHTjfiMF5SMgqJUbOnPBWAMeshGt2pRrbVqJcM9p7u+dbgZQSgN31l gdgKQy+2ocdRs/7sCqqsAWhhE/tybUOgkJTYB0BhXTfaofT/ORgU7emXQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgq8OExUQH8CkrmcZd3q0cENb/sMB8GA1UdIwQY MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt ODZmNWQwYTExOTQ5LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5 LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZEfV+uV EwoHt4nimK+3AmmjoshzBEMLvShU+pi/35BQVRuJprRuMFMO53Emf97oscuE44VZ w6l3Gujdl86wlPWvS0PEWbwWqo8uZ/TDa4G3MtwN9YIITSE+ihXPURRMCIe7HNDI IFOCPlPvgXJMj/e/XHgzV126eshPbmJ96EaLP159DlhKjneLU+ZjosCfNy/rZO0i DnyoZalKL7YwhK31asE4pC668slIRx1hSfqmOhrrOUhd6I4argWjvtgXzhvmACaT esuDV1HRpSqYWhqDiA3c5ebi6qi/zOJayBbvYRdcbsI7LVOCmwxYPJgkMT56C6iX g4fS1ZTtUphrGA== -----END CERTIFICATE-----Generated at Tue Dec 16 21:35:01 2025 by rpki-client