This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json) Hash identifier: WFX6zlPGZ1wnZvbThHnZM/h1J+TF562KDTRR+GYqVzw= Subject key identifier: 99:69:76:6E:20:68:FF:80:AC:96:FB:F3:FB:47:A9:2C:1D:89:8B:7D Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Certificate serial: 019AF12CFB471DACCF9B57FCA2ED4A9E6E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft Manifest number: 1505 Signing time: Sat 06 Dec 2025 01:00:48 +0000 Manifest this update: Sat 06 Dec 2025 01:00:48 +0000 Manifest next update: Sun 07 Dec 2025 01:00:48 +0000 Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=) 2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: QsY8e5iNUv9SjNPi5aRlodrbde/rrhjRVLkTScT5dGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fb:47:1d:ac:cf:9b:57:fc:a2:ed:4a:9e:6e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Validity Not Before: Dec 6 01:00:48 2025 GMT Not After : Dec 7 01:00:48 2025 GMT Subject: CN=9969766e2068ff80ac96fbf3fb47a92c1d898b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:6d:c6:d6:c2:14:fa:2d:26:9f:10:ce:d4: 0d:6c:7f:cb:05:2d:14:6e:62:a9:41:76:91:48:7b: 65:11:0f:a1:ac:20:32:b2:e6:44:44:55:ca:6e:d8: 93:53:a2:b2:95:f3:cb:2f:55:e5:a0:78:15:20:83: 57:fb:97:9c:b4:82:ad:c0:6f:34:f7:74:cd:98:35: 92:ec:be:1c:f0:fc:25:90:5e:c9:c8:47:89:ba:0a: 14:20:8d:91:56:b1:51:08:cc:79:1c:d7:72:1e:16: d5:3a:e5:4f:4f:1b:5f:e0:c8:13:47:43:c6:aa:48: d0:25:e4:25:5e:05:9a:a4:57:c0:e5:8f:c8:d8:90: 84:e4:c0:a2:37:62:a9:60:25:d3:5d:c6:76:22:b4: a5:d4:48:64:36:4b:ec:52:52:b3:c4:de:dc:e2:e5: 20:b7:98:2b:52:fa:f7:56:35:c4:52:e3:57:90:18: 57:51:84:0f:37:cc:dc:88:ac:4e:f2:f4:dc:c2:55: 99:e0:9a:cc:bc:19:a0:ea:4e:74:56:59:21:67:0d: 93:f1:59:16:46:dc:2e:aa:ad:c4:c2:15:51:82:60: 6b:5c:0a:e1:29:f2:f5:6c:ff:eb:91:6b:9a:61:3d: cf:5d:b3:b4:e6:f5:bd:02:0a:ef:27:b5:85:ad:75: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:69:76:6E:20:68:FF:80:AC:96:FB:F3:FB:47:A9:2C:1D:89:8B:7D X509v3 Authority Key Identifier: keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0b:37:41:f6:a4:c7:4c:50:4c:71:60:ce:8a:51:b9:01:6f: 76:d0:17:36:cc:99:52:e0:06:32:76:b6:88:93:b9:66:ef:b6: 48:d7:c2:40:0d:d2:d7:d3:2a:02:fb:a2:b7:16:43:b2:98:a1: 48:ca:f8:21:9d:6b:54:7b:9d:71:1b:16:68:74:ce:72:5d:5f: 94:63:4a:8e:53:52:58:b3:ca:2e:59:49:f6:df:d6:3e:b5:6b: 36:07:f2:65:0e:1a:df:4f:a8:3a:55:91:df:45:d2:20:b8:fc: 66:49:0f:ca:45:78:52:38:00:e8:ac:32:7a:f5:5f:56:f3:c5: f6:7f:8d:b1:71:50:2f:be:3b:97:ca:bf:e2:8b:49:9e:98:97: 73:80:79:f6:06:e5:c0:28:f4:66:0d:85:47:18:f9:7d:f8:4c: fb:19:c0:34:96:c7:1f:f4:22:fb:22:10:95:5d:59:43:83:66: 54:16:e7:cc:13:8b:2f:a7:d7:d4:5b:55:14:b5:c4:77:44:74: b8:cc:07:05:ff:8e:2a:dd:78:dc:fe:22:0c:b3:46:f8:25:c2: 87:82:de:e1:bd:4d:ef:d9:b1:f5:71:7c:72:47:d7:dd:f3:c7: c0:ef:b1:64:1f:d3:b8:6a:eb:e3:7c:6d:71:8a:04:9a:bc:82: 80:9a:e5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPtHHazPm1f8ou1Knm4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTJkYjk1ZGZjM2IzMTM5NWUwZWNiNWZmMjYyMTJkNzk4 ZGU4MzQwHhcNMjUxMjA2MDEwMDQ4WhcNMjUxMjA3MDEwMDQ4WjAzMTEwLwYDVQQD Eyg5OTY5NzY2ZTIwNjhmZjgwYWM5NmZiZjNmYjQ3YTkyYzFkODk4YjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxtxtbCFPotJp8QztQNbH/LBS0U bmKpQXaRSHtlEQ+hrCAysuZERFXKbtiTU6KylfPLL1XloHgVIINX+5ectIKtwG80 93TNmDWS7L4c8PwlkF7JyEeJugoUII2RVrFRCMx5HNdyHhbVOuVPTxtf4MgTR0PG qkjQJeQlXgWapFfA5Y/I2JCE5MCiN2KpYCXTXcZ2IrSl1EhkNkvsUlKzxN7c4uUg t5grUvr3VjXEUuNXkBhXUYQPN8zciKxO8vTcwlWZ4JrMvBmg6k50VlkhZw2T8VkW Rtwuqq3EwhVRgmBrXArhKfL1bP/rkWuaYT3PXbO05vW9AgrvJ7WFrXWVlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlpdm4gaP+ArJb78/tHqSwdiYt9MB8GA1UdIwQY MBaAFLMS25Xfw7MTleDstf8mIS15jeg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEt ZmRhNDcwYzYxZTA5LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEtZmRhNDcwYzYxZTA5 LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQs3Qfak x0xQTHFgzopRuQFvdtAXNsyZUuAGMna2iJO5Zu+2SNfCQA3S19MqAvuitxZDspih SMr4IZ1rVHudcRsWaHTOcl1flGNKjlNSWLPKLllJ9t/WPrVrNgfyZQ4a30+oOlWR 30XSILj8ZkkPykV4UjgA6KwyevVfVvPF9n+NsXFQL747l8q/4otJnpiXc4B59gbl wCj0Zg2FRxj5ffhM+xnANJbHH/Qi+yIQlV1ZQ4NmVBbnzBOLL6fX1FtVFLXEd0R0 uMwHBf+OKt143P4iDLNG+CXCh4Le4b1N79mx9XF8ckfX3fPHwO+xZB/TuGrr43xt cYoEmryCgJrlsg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:18 2025 by rpki-client