This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json) Hash identifier: f5COIoaQvTvbLzYqOrBEFHb1QvkQrcvzwl2UAk8vLU0= Subject key identifier: BC:F8:D6:BB:F0:5B:1E:4C:18:44:E3:94:DF:C4:7E:3B:11:A2:84:C5 Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Certificate serial: 019BF4D08ABB3A76DCC3C652CC4B29F58ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 11:01:06 +0000 Manifest this update: Sun 25 Jan 2026 11:01:06 +0000 Manifest next update: Mon 26 Jan 2026 11:01:06 +0000 Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: wLEEEosKu5lqSg9V2EagI44dDlm2HhlKR0h+Kg6xCKw=) 2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:8a:bb:3a:76:dc:c3:c6:52:cc:4b:29:f5:8a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Validity Not Before: Jan 25 11:01:06 2026 GMT Not After : Jan 26 11:01:06 2026 GMT Subject: CN=bcf8d6bbf05b1e4c1844e394dfc47e3b11a284c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:aa:30:52:d6:03:91:1a:1b:aa:ea:9b:d1: 43:0f:72:34:dc:50:33:dc:b7:65:62:3d:5f:cd:66: e7:c6:9a:c4:72:38:b4:7b:20:9e:49:21:ab:05:a7: 39:72:d6:b9:84:5f:2a:49:59:2d:bd:b2:60:e2:c9: c5:02:10:6a:ab:5e:49:76:52:36:b8:92:ca:e2:3e: 24:89:6b:e8:b7:53:60:4c:b4:35:ad:73:cd:06:e4: 28:49:96:1c:e3:a9:03:3a:50:d7:42:5b:04:c8:23: 19:68:58:88:4a:bb:ca:3f:35:51:fc:a0:37:a8:bd: 38:01:33:83:8b:e4:c8:c7:1e:1d:4e:e5:9f:94:3a: a5:44:0c:d7:1d:5d:50:ca:4c:3d:43:23:0a:9b:44: 5e:19:9a:b2:ae:74:59:d7:71:5d:c5:13:52:7d:65: d7:fb:8a:8b:05:90:d2:15:be:57:f1:e9:fd:73:66: 60:e8:95:cb:eb:ab:30:45:92:c3:4c:f5:5a:23:e6: 0a:ef:d8:67:37:42:23:d2:8b:12:98:99:f3:d5:af: 3b:8a:e3:6d:88:85:81:97:6c:90:c4:4a:d4:7d:d2: 4e:4c:4e:80:9f:a8:1a:26:3d:4f:35:73:6d:49:6b: cc:13:6e:02:08:98:6d:a2:8c:c7:de:99:95:8c:85: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:D6:BB:F0:5B:1E:4C:18:44:E3:94:DF:C4:7E:3B:11:A2:84:C5 X509v3 Authority Key Identifier: keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d5:ad:c3:cf:fb:53:b1:be:58:27:be:d9:a4:78:b7:24:0a: 30:e5:c7:4c:bc:b1:26:4a:07:60:08:31:83:49:78:af:d8:0c: 8d:c9:0e:b7:04:95:26:d6:09:91:16:f8:48:5a:ec:4b:24:84: 36:01:5a:37:98:d4:d4:c5:3e:5d:85:09:5b:27:88:31:5d:b3: 26:7d:d2:62:9c:0b:fb:5a:a0:29:5a:9c:35:a3:d3:82:66:03: ca:cb:fb:74:e1:00:7e:a4:4e:28:63:84:48:7a:42:61:c7:91: 9d:c6:ba:ac:b8:64:9a:3f:68:51:bc:60:89:00:82:44:05:f4: c5:f2:8b:6d:23:24:08:6e:5d:c2:6e:a7:c3:4a:6a:f4:05:5a: d2:03:eb:1f:a0:75:7a:1b:a6:84:65:e8:d9:cf:e5:62:1c:78: e9:d3:20:8c:68:d5:db:72:22:fd:a3:7f:c7:2a:89:22:4c:5b: 6b:fa:80:79:77:34:ae:85:9a:c1:43:b9:cd:59:5d:89:da:05: 36:8f:5f:f6:80:5f:1d:a6:09:5c:31:af:4c:74:42:9b:ed:27: e9:24:e9:ca:80:aa:f7:ea:83:87:1e:24:d6:d4:e3:e9:99:71: 8e:8d:80:f0:77:41:4b:6a:12:ed:44:ea:11:12:aa:7f:7b:29: 79:34:b5:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Iq7Onbcw8ZSzEsp9Yq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz ZTk2OWIwHhcNMjYwMTI1MTEwMTA2WhcNMjYwMTI2MTEwMTA2WjAzMTEwLwYDVQQD EyhiY2Y4ZDZiYmYwNWIxZTRjMTg0NGUzOTRkZmM0N2UzYjExYTI4NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq02qMFLWA5EaG6rqm9FDD3I03FAz 3LdlYj1fzWbnxprEcji0eyCeSSGrBac5cta5hF8qSVktvbJg4snFAhBqq15JdlI2 uJLK4j4kiWvot1NgTLQ1rXPNBuQoSZYc46kDOlDXQlsEyCMZaFiISrvKPzVR/KA3 qL04ATODi+TIxx4dTuWflDqlRAzXHV1Qykw9QyMKm0ReGZqyrnRZ13FdxRNSfWXX +4qLBZDSFb5X8en9c2Zg6JXL66swRZLDTPVaI+YK79hnN0Ij0osSmJnz1a87iuNt iIWBl2yQxErUfdJOTE6An6gaJj1PNXNtSWvME24CCJhtoozH3pmVjIVCyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz41rvwWx5MGETjlN/EfjsRooTFMB8GA1UdIwQY MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt ODZmNWQwYTExOTQ5LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5 LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdWtw8/7 U7G+WCe+2aR4tyQKMOXHTLyxJkoHYAgxg0l4r9gMjckOtwSVJtYJkRb4SFrsSySE NgFaN5jU1MU+XYUJWyeIMV2zJn3SYpwL+1qgKVqcNaPTgmYDysv7dOEAfqROKGOE SHpCYceRnca6rLhkmj9oUbxgiQCCRAX0xfKLbSMkCG5dwm6nw0pq9AVa0gPrH6B1 ehumhGXo2c/lYhx46dMgjGjV23Ii/aN/xyqJIkxba/qAeXc0roWawUO5zVldidoF No9f9oBfHaYJXDGvTHRCm+0n6STpyoCq9+qDhx4k1tTj6Zlxjo2A8HdBS2oS7UTq ERKqf3speTS1GQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:52 2026 by rpki-client