This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json) Hash identifier: r3rLnq6abG3xsfkxJ35A502GOX2sqK0lKzVBTwUloRI= Subject key identifier: 71:9E:8C:34:BB:8E:94:29:67:20:0C:A2:15:E5:AD:E2:FF:F3:26:85 Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Certificate serial: 019B3C7DFA44E676A7204F298643E29D90DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft Manifest number: 152C Signing time: Sat 20 Dec 2025 16:00:47 +0000 Manifest this update: Sat 20 Dec 2025 16:00:47 +0000 Manifest next update: Sun 21 Dec 2025 16:00:47 +0000 Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=) 2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: jof14vy2nSuYFcrziNkII7usXoLRue+A27gySSWQHa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:fa:44:e6:76:a7:20:4f:29:86:43:e2:9d:90:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Validity Not Before: Dec 20 16:00:47 2025 GMT Not After : Dec 21 16:00:47 2025 GMT Subject: CN=719e8c34bb8e942967200ca215e5ade2fff32685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:5b:d1:ac:92:2c:f0:39:6a:4d:da:cb:5e: 67:75:45:96:b0:9c:63:a7:78:11:e1:c8:80:69:2d: 21:95:1e:df:b8:0b:e7:47:a8:9c:ab:42:9b:0c:e6: b4:a2:e0:5f:c7:3d:7a:e3:df:29:53:1f:74:36:af: bb:d7:a1:21:a9:cb:87:35:bf:35:ce:dc:fc:fc:7e: 09:10:d4:0e:c1:af:22:89:1b:c9:2c:81:ce:69:12: 75:bd:f3:a4:f8:7b:30:cf:ea:54:ed:0d:09:e7:36: d3:eb:03:c7:41:33:ac:ec:0c:3b:dd:c7:5c:e3:52: 71:b2:b2:e3:fe:6e:2e:11:9b:29:fa:36:19:fd:ba: bb:83:1d:33:c3:cd:58:47:d0:02:d6:c9:db:83:95: 65:30:b2:de:81:0b:78:b6:86:15:38:80:30:df:e9: a8:d4:ea:48:81:a6:3e:ef:2b:a9:0f:5b:42:1e:62: 9c:04:62:ca:e1:2d:02:25:82:d2:6e:88:e3:d5:4e: f4:c7:1f:9f:99:af:71:dc:64:0a:9b:df:6a:20:cd: 9f:15:99:dc:d1:af:ac:20:9c:05:c8:b3:97:55:80: 93:bb:3e:83:4b:f1:8a:2b:e0:06:d5:d1:55:af:94: b0:4b:04:8d:66:b2:45:49:40:e5:7f:72:17:bd:d3: c4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9E:8C:34:BB:8E:94:29:67:20:0C:A2:15:E5:AD:E2:FF:F3:26:85 X509v3 Authority Key Identifier: keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c2:44:f8:a3:31:d2:c1:6c:0f:b4:85:35:7e:6b:73:42:8f: 9b:bd:44:ae:90:fb:b6:04:95:af:0d:22:59:f7:a8:e1:8a:78: a0:91:af:72:76:5d:a0:92:ab:92:e8:25:49:0c:f0:3b:65:fa: 06:8f:d1:4a:03:4b:2a:a7:3a:7a:c0:bf:6e:52:ec:4d:66:0f: 1e:1a:58:ea:ed:22:e2:49:dc:f6:43:97:80:75:b5:a8:59:fe: 64:fd:8d:8d:9e:82:a9:fb:b2:89:4d:96:11:df:8a:4a:23:38: e4:40:b5:b7:53:d3:50:10:4f:ec:b3:78:21:62:24:78:57:db: 26:21:65:02:71:cc:8a:de:e6:8b:31:0c:3d:35:47:bd:c2:4a: 75:57:09:09:41:c4:72:3e:5b:61:a5:c4:f3:25:d5:0f:30:04: 18:ad:23:39:05:87:9f:0c:ba:99:97:ce:b3:ab:20:e2:f5:52: 3b:36:22:fc:89:e3:90:25:0e:2d:46:9e:d8:3a:18:a9:6f:62: eb:f6:a3:eb:cf:93:f9:c4:56:33:2a:d6:3d:d7:95:ab:13:75: 1a:10:78:cc:f1:41:c7:05:f3:7b:29:cc:53:13:5b:f2:0e:14: 03:5c:b3:e3:51:f7:81:d6:bf:d8:0a:43:73:12:84:b8:ad:e8: 77:b0:5d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffpE5nanIE8phkPinZDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTJkYjk1ZGZjM2IzMTM5NWUwZWNiNWZmMjYyMTJkNzk4 ZGU4MzQwHhcNMjUxMjIwMTYwMDQ3WhcNMjUxMjIxMTYwMDQ3WjAzMTEwLwYDVQQD Eyg3MTllOGMzNGJiOGU5NDI5NjcyMDBjYTIxNWU1YWRlMmZmZjMyNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjlb0aySLPA5ak3ay15ndUWWsJxj p3gR4ciAaS0hlR7fuAvnR6icq0KbDOa0ouBfxz16498pUx90Nq+716EhqcuHNb81 ztz8/H4JENQOwa8iiRvJLIHOaRJ1vfOk+Hswz+pU7Q0J5zbT6wPHQTOs7Aw73cdc 41JxsrLj/m4uEZsp+jYZ/bq7gx0zw81YR9AC1snbg5VlMLLegQt4toYVOIAw3+mo 1OpIgaY+7yupD1tCHmKcBGLK4S0CJYLSbojj1U70xx+fma9x3GQKm99qIM2fFZnc 0a+sIJwFyLOXVYCTuz6DS/GKK+AG1dFVr5SwSwSNZrJFSUDlf3IXvdPECwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGejDS7jpQpZyAMohXlreL/8yaFMB8GA1UdIwQY MBaAFLMS25Xfw7MTleDstf8mIS15jeg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEt ZmRhNDcwYzYxZTA5LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEtZmRhNDcwYzYxZTA5 LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcJE+KMx 0sFsD7SFNX5rc0KPm71ErpD7tgSVrw0iWfeo4Yp4oJGvcnZdoJKrkuglSQzwO2X6 Bo/RSgNLKqc6esC/blLsTWYPHhpY6u0i4knc9kOXgHW1qFn+ZP2NjZ6CqfuyiU2W Ed+KSiM45EC1t1PTUBBP7LN4IWIkeFfbJiFlAnHMit7mizEMPTVHvcJKdVcJCUHE cj5bYaXE8yXVDzAEGK0jOQWHnwy6mZfOs6sg4vVSOzYi/InjkCUOLUae2DoYqW9i 6/aj68+T+cRWMyrWPdeVqxN1GhB4zPFBxwXzeynMUxNb8g4UA1yz41H3gda/2ApD cxKEuK3od7Bddg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:13 2025 by rpki-client