This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json) Hash identifier: h0T7thubKWQWMV2pNO40G/SQUpZV3V+PaBw7jdLv19I= Subject key identifier: 96:63:24:5E:FB:B5:85:CD:33:00:D9:64:71:4A:6B:A8:2B:68:60:8A Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Certificate serial: 019AF12D2BC4A2F691E0F7707450E576882A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: Tt59eUNibD9H9hQxTl+M1B7xTVCwS4vWSXnY0kP9N5M=) 2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2b:c4:a2:f6:91:e0:f7:70:74:50:e5:76:88:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=9663245efbb585cd3300d964714a6ba82b68608a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:49:f3:67:60:6d:b4:93:c0:b4:af:19:12: d0:f6:ae:22:f1:4a:16:c4:19:24:79:bd:08:45:0a: ed:af:6f:3a:12:f1:35:85:07:ab:bb:ab:39:3f:f2: 03:45:b2:02:6d:fa:bc:8a:87:a6:f4:86:f2:e8:c3: ec:5b:89:d7:51:d6:d0:b0:a8:59:52:f8:a5:cd:26: ae:50:ce:c9:11:5a:1f:c7:a9:36:1c:88:a0:f7:1b: b1:ce:26:a8:4b:35:2d:96:21:90:12:01:05:e2:f6: 6c:a2:db:06:e5:ff:00:33:ad:e9:3b:4c:eb:ad:68: 78:e4:46:3b:bb:8b:71:98:62:b0:aa:0a:ce:7c:ca: 9b:56:0b:b1:31:70:c7:e8:df:57:c2:a0:30:56:40: d5:e4:7e:60:8c:82:8b:ca:f4:b9:e1:fd:39:09:dc: e6:c4:34:48:ae:51:0f:42:ac:ff:f6:1b:f1:ac:76: f4:cd:c4:9e:45:50:25:e4:64:cf:94:db:10:3c:c1: 1f:40:9e:1a:60:30:81:c5:ed:da:5e:ce:40:cc:e0: b4:e2:b4:1e:7f:fa:50:64:3b:ca:61:50:c7:c4:56: a0:1a:43:20:78:1b:31:00:e9:6d:b9:a5:76:e8:25: 4d:f4:72:2e:b5:38:b2:d3:7e:06:61:e4:a5:0d:e7: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:24:5E:FB:B5:85:CD:33:00:D9:64:71:4A:6B:A8:2B:68:60:8A X509v3 Authority Key Identifier: keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a5:19:15:ed:65:eb:a1:94:60:27:06:91:5b:b6:28:04:bf: fb:8e:72:00:79:53:1a:4a:e6:83:e5:81:8e:ff:d0:64:e6:4d: bb:6e:d8:35:fa:ad:46:fb:e9:7c:56:5b:00:d2:59:43:d0:a2: 71:69:ad:07:37:b8:49:8a:67:7f:19:70:57:53:89:ff:b3:0b: 7f:b0:6b:74:da:0c:fa:31:a5:ac:6b:9e:0e:cc:26:01:f4:4d: 84:03:33:9a:9a:87:73:a1:1d:b7:60:44:e0:a7:b5:e8:c9:10: e4:67:2e:c9:18:84:30:8b:9c:9b:6e:70:2f:29:9e:5e:62:ef: 50:55:13:df:8a:91:66:68:ce:07:38:5c:ed:1a:07:9e:d1:07: 07:6f:8a:c4:36:83:78:ef:af:49:b9:c8:c2:c8:06:8f:75:44: 60:f5:2f:bb:ca:e0:b5:70:3c:93:2e:9e:00:44:ae:d2:94:c2: 4a:7d:77:49:bc:24:1d:9d:6c:01:13:f7:5f:df:e7:69:a7:3e: a3:c0:d9:1a:b0:f5:8c:a1:07:52:4f:6e:99:41:5f:59:27:39: 17:b9:2d:34:a3:d3:2d:26:d9:9e:b4:c6:05:84:ca:55:f4:64: 71:87:ee:9a:75:f5:66:a0:cb:f8:20:ed:f8:5e:27:53:4e:e5: 3f:f3:16:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSvEovaR4PdwdFDldogqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz ZTk2OWIwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD Eyg5NjYzMjQ1ZWZiYjU4NWNkMzMwMGQ5NjQ3MTRhNmJhODJiNjg2MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mlJ82dgbbSTwLSvGRLQ9q4i8UoW xBkkeb0IRQrtr286EvE1hQeru6s5P/IDRbICbfq8ioem9Iby6MPsW4nXUdbQsKhZ UvilzSauUM7JEVofx6k2HIig9xuxziaoSzUtliGQEgEF4vZsotsG5f8AM63pO0zr rWh45EY7u4txmGKwqgrOfMqbVguxMXDH6N9XwqAwVkDV5H5gjIKLyvS54f05Cdzm xDRIrlEPQqz/9hvxrHb0zcSeRVAl5GTPlNsQPMEfQJ4aYDCBxe3aXs5AzOC04rQe f/pQZDvKYVDHxFagGkMgeBsxAOltuaV26CVN9HIutTiy034GYeSlDecH1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZjJF77tYXNMwDZZHFKa6graGCKMB8GA1UdIwQY MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt ODZmNWQwYTExOTQ5LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5 LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtaUZFe1l 66GUYCcGkVu2KAS/+45yAHlTGkrmg+WBjv/QZOZNu27YNfqtRvvpfFZbANJZQ9Ci cWmtBze4SYpnfxlwV1OJ/7MLf7BrdNoM+jGlrGueDswmAfRNhAMzmpqHc6Edt2BE 4Ke16MkQ5GcuyRiEMIucm25wLymeXmLvUFUT34qRZmjOBzhc7RoHntEHB2+KxDaD eO+vSbnIwsgGj3VEYPUvu8rgtXA8ky6eAESu0pTCSn13SbwkHZ1sARP3X9/naac+ o8DZGrD1jKEHUk9umUFfWSc5F7ktNKPTLSbZnrTGBYTKVfRkcYfumnX1ZqDL+CDt +F4nU07lP/MWvw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:57 2025 by rpki-client