This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json) Hash identifier: L1xEybplvuekyQ1tjA+QmKv2ZFuj240wkhCy/gWIfN0= Subject key identifier: A9:DA:2B:CB:A4:5E:4B:A7:4E:98:51:C6:F6:EB:5A:F8:51:B7:18:7C Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Certificate serial: 019B3C7DE442E6897D88C487006B033E1FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:00:41 +0000 Manifest this update: Sat 20 Dec 2025 16:00:41 +0000 Manifest next update: Sun 21 Dec 2025 16:00:41 +0000 Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: RdoYtmzXyhlDXVMz5P0/l2MpWOAWzKU0LhlNMBZcEHc=) 2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e4:42:e6:89:7d:88:c4:87:00:6b:03:3e:1f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Validity Not Before: Dec 20 16:00:41 2025 GMT Not After : Dec 21 16:00:41 2025 GMT Subject: CN=a9da2bcba45e4ba74e9851c6f6eb5af851b7187c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:1f:b3:96:d6:d5:0f:d7:d5:3e:c9:3c:49: c0:3c:51:27:fc:76:94:66:22:a5:9a:c2:ac:dc:89: 7d:95:50:51:06:dd:0b:20:a4:39:4c:1c:75:64:4b: ac:4d:5e:e8:69:53:bb:f4:91:b2:6f:53:2d:31:a8: a2:c0:f6:a1:b1:94:a9:f9:63:21:62:a6:e6:25:bd: e0:ef:46:4b:c4:25:04:d5:79:83:9b:cf:23:4b:91: 41:b6:7b:9f:75:ab:b1:49:f1:61:73:70:a1:58:1c: 9e:4c:ce:90:62:57:cf:e8:6a:f4:dd:14:c1:ae:dd: f4:17:9b:a5:12:14:fa:0f:06:dd:70:8c:3f:18:a3: 65:d5:68:54:84:04:b5:ea:e9:03:4a:be:6d:0d:39: 21:0b:7b:c2:73:8e:3b:9b:c7:8f:54:18:fa:ae:69: b5:4a:17:41:72:ce:bb:15:61:ba:86:68:5f:a1:3c: 88:bf:9d:13:21:67:4b:c2:01:5a:35:6f:b3:90:83: 26:05:12:ae:5d:41:ae:1b:7b:cb:6c:5c:22:b2:82: e5:18:ba:b2:12:ac:3d:c1:84:7e:c1:ec:8b:88:20: 3c:f6:46:9d:dd:1a:94:a7:81:77:0d:cc:f2:6e:a8: 07:96:a1:fd:87:65:da:da:78:eb:20:26:3b:6b:1b: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:2B:CB:A4:5E:4B:A7:4E:98:51:C6:F6:EB:5A:F8:51:B7:18:7C X509v3 Authority Key Identifier: keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:71:70:61:f7:31:f9:39:1a:50:0a:cb:33:38:a8:3c:54:cd: 6e:54:41:8d:d9:65:2d:14:cb:b6:c0:7c:9a:f5:4b:ba:af:29: 71:18:6f:e7:9f:0f:2b:7e:8f:e2:61:b3:6c:3c:3b:d5:f0:ef: 46:58:40:d2:df:0f:5e:13:7c:12:67:b0:b8:4a:11:a5:19:3a: 4f:f5:42:10:bf:f7:ef:ac:0f:4b:e8:be:a1:37:88:ba:16:94: 54:3d:f0:2b:6a:33:d6:fc:04:d3:81:37:75:81:ae:a6:c4:4c: f9:af:45:1e:83:bb:69:36:61:37:f0:c5:db:c1:8e:40:70:be: ef:61:9f:6b:66:52:b9:58:31:75:32:94:99:47:88:d5:f4:d9: 4a:c0:13:9e:39:93:53:da:89:c6:b4:e4:e6:b3:6e:3b:6c:b0: 81:ee:4b:9f:e1:6b:e7:85:31:0e:5c:fa:96:ef:50:f6:c9:e4: eb:c1:7a:73:4a:b9:4a:7f:72:bd:de:fc:3f:74:f4:e2:af:61: 17:03:4b:65:4b:43:6c:84:87:39:e7:e4:17:f3:b5:67:24:5c: 13:0c:0d:57:61:e6:38:92:0f:cc:b0:d7:c3:5d:af:8d:83:c0: 2a:d5:8b:fe:b8:0a:56:2d:a9:b4:e8:ae:16:ca:f4:d8:db:58: 76:5b:55:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feRC5ol9iMSHAGsDPh+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz ZTk2OWIwHhcNMjUxMjIwMTYwMDQxWhcNMjUxMjIxMTYwMDQxWjAzMTEwLwYDVQQD EyhhOWRhMmJjYmE0NWU0YmE3NGU5ODUxYzZmNmViNWFmODUxYjcxODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCAfs5bW1Q/X1T7JPEnAPFEn/HaU ZiKlmsKs3Il9lVBRBt0LIKQ5TBx1ZEusTV7oaVO79JGyb1MtMaiiwPahsZSp+WMh YqbmJb3g70ZLxCUE1XmDm88jS5FBtnufdauxSfFhc3ChWByeTM6QYlfP6Gr03RTB rt30F5ulEhT6DwbdcIw/GKNl1WhUhAS16ukDSr5tDTkhC3vCc447m8ePVBj6rmm1 ShdBcs67FWG6hmhfoTyIv50TIWdLwgFaNW+zkIMmBRKuXUGuG3vLbFwisoLlGLqy Eqw9wYR+weyLiCA89kad3RqUp4F3DczybqgHlqH9h2Xa2njrICY7axt2vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnaK8ukXkunTphRxvbrWvhRtxh8MB8GA1UdIwQY MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt ODZmNWQwYTExOTQ5LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5 LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnFwYfcx +TkaUArLMzioPFTNblRBjdllLRTLtsB8mvVLuq8pcRhv558PK36P4mGzbDw71fDv RlhA0t8PXhN8EmewuEoRpRk6T/VCEL/376wPS+i+oTeIuhaUVD3wK2oz1vwE04E3 dYGupsRM+a9FHoO7aTZhN/DF28GOQHC+72Gfa2ZSuVgxdTKUmUeI1fTZSsATnjmT U9qJxrTk5rNuO2ywge5Ln+Fr54UxDlz6lu9Q9snk68F6c0q5Sn9yvd78P3T04q9h FwNLZUtDbISHOefkF/O1ZyRcEwwNV2HmOJIPzLDXw12vjYPAKtWL/rgKVi2ptOiu Fsr02NtYdltVYA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:39 2025 by rpki-client