This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json) Hash identifier: 4RsimhoDIDEPRkRFOGneK/4WqSqy/3lWyR6pt0rvzD0= Subject key identifier: 9B:A9:E9:84:03:C9:7F:FD:6D:B9:9D:02:9B:19:7A:EB:C4:DB:DC:56 Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Certificate serial: 019BF5E307EF251A7641E4091D9336C936E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft Manifest number: 158D Signing time: Sun 25 Jan 2026 16:00:55 +0000 Manifest this update: Sun 25 Jan 2026 16:00:55 +0000 Manifest next update: Mon 26 Jan 2026 16:00:55 +0000 Files and hashes: 1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=) 2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: NhNsFFSKXryjm4Q78zIeTXSmtcfyq5OhqdC5pGyUnh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:07:ef:25:1a:76:41:e4:09:1d:93:36:c9:36:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834 Validity Not Before: Jan 25 16:00:55 2026 GMT Not After : Jan 26 16:00:55 2026 GMT Subject: CN=9ba9e98403c97ffd6db99d029b197aebc4dbdc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:3d:fe:c5:75:09:20:74:c5:1e:be:a9:b5: 4c:74:d1:3f:54:f5:7a:5c:6c:1b:a2:51:a7:c2:d2: 2e:3d:e3:92:95:92:cb:52:71:e2:fd:16:f1:2b:ef: 78:10:13:47:b0:ad:80:79:38:cb:7c:be:0b:74:33: 52:51:81:0c:7b:fe:9f:e5:0a:76:72:f0:06:44:d7: 5f:45:23:46:4e:32:55:5b:d1:26:16:1d:35:e0:e6: 44:2a:c9:08:6d:98:84:05:42:00:f6:04:10:d4:10: f3:de:97:e1:f0:50:c9:f7:e7:d1:c8:35:8a:ad:2a: b4:9f:50:e5:bb:25:60:ff:30:09:9e:ab:1b:53:69: b2:77:f4:b8:d7:50:c8:06:ac:8b:9c:8a:57:d6:76: 38:d6:1f:85:89:c0:2c:61:80:57:98:73:2f:c2:23: 02:4e:01:33:95:3a:0b:27:69:83:0b:db:94:a5:bf: 24:af:b5:9e:21:d0:1b:c1:0a:25:b6:ae:0d:e9:69: 36:84:89:56:1a:39:b1:09:a1:b5:6f:cf:a9:12:f3: 25:b8:90:ee:e9:76:db:7f:53:64:c4:6e:6b:03:36: 8f:96:36:9c:40:7d:a9:be:d6:41:4f:1c:9d:a3:60: 1e:02:5f:46:97:2b:74:72:d8:fd:aa:c8:94:a8:86: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A9:E9:84:03:C9:7F:FD:6D:B9:9D:02:9B:19:7A:EB:C4:DB:DC:56 X509v3 Authority Key Identifier: keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fe:1d:34:76:f0:84:a9:60:ec:fe:71:a3:c6:65:71:1f:e9: ee:b0:65:be:fa:9c:a4:ec:f5:3f:7a:0e:49:ed:6c:4c:fc:22: 1c:a6:55:90:33:4b:ec:32:03:44:f4:09:75:88:14:b3:95:a0: 02:d6:70:62:0a:ef:5b:4f:6c:cc:74:a5:2e:78:f3:fd:20:f0: e0:2f:a4:19:3c:ae:fd:01:bd:87:05:6a:12:ef:bf:6a:56:31: ea:5d:24:b9:90:7e:6f:12:c8:99:74:07:9d:97:a7:fc:eb:e3: af:96:aa:50:85:a7:74:52:8c:d3:3e:c4:d0:2f:30:1b:7b:98: f5:af:e3:10:8d:e6:de:2b:ba:7b:89:0c:43:2c:2d:ea:6f:d4: e4:23:bc:ec:5b:15:6e:aa:a3:4b:88:62:fe:36:78:38:cc:8f: 8e:12:d1:da:74:55:c2:34:54:37:bd:aa:07:3a:22:ff:3c:f1: 4f:6e:a0:38:6e:18:f4:89:d6:2f:10:d3:0a:69:64:a1:b1:d8: dd:ef:82:13:22:d1:f6:4f:cf:66:d5:e3:14:d6:4c:e9:bf:e4: 98:dd:42:fc:4e:77:a7:6e:0c:e6:5a:dd:45:b6:4b:2f:af:67: 95:67:a3:b8:d5:af:db:2c:12:d2:8d:aa:0d:b1:13:a8:82:79: 64:53:bf:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14wfvJRp2QeQJHZM2yTbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTJkYjk1ZGZjM2IzMTM5NWUwZWNiNWZmMjYyMTJkNzk4 ZGU4MzQwHhcNMjYwMTI1MTYwMDU1WhcNMjYwMTI2MTYwMDU1WjAzMTEwLwYDVQQD Eyg5YmE5ZTk4NDAzYzk3ZmZkNmRiOTlkMDI5YjE5N2FlYmM0ZGJkYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwA9/sV1CSB0xR6+qbVMdNE/VPV6 XGwbolGnwtIuPeOSlZLLUnHi/RbxK+94EBNHsK2AeTjLfL4LdDNSUYEMe/6f5Qp2 cvAGRNdfRSNGTjJVW9EmFh014OZEKskIbZiEBUIA9gQQ1BDz3pfh8FDJ9+fRyDWK rSq0n1DluyVg/zAJnqsbU2myd/S411DIBqyLnIpX1nY41h+FicAsYYBXmHMvwiMC TgEzlToLJ2mDC9uUpb8kr7WeIdAbwQoltq4N6Wk2hIlWGjmxCaG1b8+pEvMluJDu 6Xbbf1NkxG5rAzaPljacQH2pvtZBTxydo2AeAl9Glyt0ctj9qsiUqIabywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJup6YQDyX/9bbmdApsZeuvE29xWMB8GA1UdIwQY MBaAFLMS25Xfw7MTleDstf8mIS15jeg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEt ZmRhNDcwYzYxZTA5LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jYmM1MGUtZmFlZi00M2VjLWJkYmEtZmRhNDcwYzYxZTA5 LzEvc3hMYmxkX0RzeE9WNE95MV95WWhMWG1ONkRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmP4dNHbw hKlg7P5xo8ZlcR/p7rBlvvqcpOz1P3oOSe1sTPwiHKZVkDNL7DIDRPQJdYgUs5Wg AtZwYgrvW09szHSlLnjz/SDw4C+kGTyu/QG9hwVqEu+/alYx6l0kuZB+bxLImXQH nZen/Ovjr5aqUIWndFKM0z7E0C8wG3uY9a/jEI3m3iu6e4kMQywt6m/U5CO87FsV bqqjS4hi/jZ4OMyPjhLR2nRVwjRUN72qBzoi/zzxT26gOG4Y9InWLxDTCmlkobHY 3e+CEyLR9k/PZtXjFNZM6b/kmN1C/E53p24M5lrdRbZLL69nlWejuNWv2ywS0o2q DbETqIJ5ZFO/mg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:34 2026 by rpki-client