This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json) Hash identifier: /q4Dy03jlxlRc73SUhOrhrCllXd27mxY/+FjqtEgW7s= Subject key identifier: 29:87:CB:54:D9:7C:99:0E:E8:69:A9:DA:A5:74:84:2F:63:20:BD:A2 Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50 Certificate serial: 019B2FD59CA49261E356E027B21CF76A6566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft Manifest number: 1711 Signing time: Thu 18 Dec 2025 05:01:27 +0000 Manifest this update: Thu 18 Dec 2025 05:01:27 +0000 Manifest next update: Fri 19 Dec 2025 05:01:27 +0000 Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: 5cSopB35RdzHBIagTwZW6QqY5BPRu6G8nOmHczYsxxo=) 2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:9c:a4:92:61:e3:56:e0:27:b2:1c:f7:6a:65:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50 Validity Not Before: Dec 18 05:01:27 2025 GMT Not After : Dec 19 05:01:27 2025 GMT Subject: CN=2987cb54d97c990ee869a9daa574842f6320bda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:46:f7:60:ae:30:37:72:00:b6:79:cc:31: 15:4b:9b:23:e5:ca:b7:fb:61:69:16:b3:c5:e1:a3: 0b:f8:71:2f:7b:4a:bd:2c:00:a7:45:08:2c:45:a2: 6f:a6:10:80:6c:55:72:f4:90:7b:50:fe:b3:69:f2: a8:e3:3d:f2:09:24:8b:53:87:52:f9:1e:b6:4b:8d: dc:3d:83:1c:66:c3:c4:b9:5f:20:df:a6:d0:60:8d: 99:a1:f0:55:cf:45:a2:c9:99:db:18:3b:17:0b:4d: e3:16:ad:74:c0:66:89:c2:cb:b2:86:33:01:09:65: b5:37:2f:a7:44:8f:2f:5f:30:92:f6:f1:62:98:e5: 39:83:08:33:b6:b5:bb:b0:26:a9:57:bf:e5:3e:cb: 95:f9:ad:c1:25:95:39:db:e6:75:61:a6:33:45:c3: d1:24:cd:58:09:94:df:33:15:54:23:14:c7:d4:cc: 16:83:37:ff:17:35:2e:69:ca:d6:fa:36:5f:19:8a: 53:3e:01:58:ff:91:9e:04:9a:d1:52:53:06:36:cc: 48:e5:bf:41:da:16:3d:3f:60:c5:bc:b3:3c:dc:40: 96:f8:fe:b8:de:9c:89:8c:6c:d8:d8:f9:b5:b5:f4: 14:09:7f:a5:d4:c9:28:09:bb:6b:d4:78:c9:1e:df: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:CB:54:D9:7C:99:0E:E8:69:A9:DA:A5:74:84:2F:63:20:BD:A2 X509v3 Authority Key Identifier: keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fe:09:8f:81:d9:bb:e3:fe:94:34:fa:1d:d8:eb:c9:27:c5: ad:2f:d4:6e:33:3e:f2:03:4d:d1:24:6c:03:89:e3:97:03:4f: fc:71:e2:01:fb:68:65:52:1d:66:b9:f8:19:21:de:2c:b7:13: d6:1d:e0:6e:46:38:bd:a4:4d:3c:b4:87:40:79:a3:16:e9:46: 1f:26:12:36:11:4d:e6:ee:c2:83:ae:f6:da:b3:09:57:90:21: 74:31:39:62:f4:c0:68:ca:1a:99:ed:ef:3a:14:db:4f:b7:88: 96:b1:3a:fc:7f:58:b8:0b:2d:3f:ad:5a:ee:5e:f4:48:9a:42: 04:62:bd:ee:7d:ed:b7:73:27:27:85:8e:58:6f:59:a9:d9:11: 4d:71:8e:40:f4:d2:ab:6d:dc:32:a0:47:cd:60:02:70:91:3b: 7d:42:b6:b0:51:a9:9f:ab:7a:24:ae:e7:1d:d8:bc:cc:73:75: 75:a7:cd:30:3c:d0:74:1e:a4:b2:3b:ca:08:13:a4:8f:df:99: 08:7a:36:b2:85:8a:78:7e:a5:0f:47:39:94:e7:d4:6b:ae:4d: 35:0d:da:67:a6:66:8e:b8:61:02:17:e1:92:16:98:29:28:ef: 50:86:63:5c:a0:d8:46:3b:31:d8:11:9f:73:d6:d8:b2:c6:1f: aa:ae:3d:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1ZykkmHjVuAnshz3amVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi NWFhNTAwHhcNMjUxMjE4MDUwMTI3WhcNMjUxMjE5MDUwMTI3WjAzMTEwLwYDVQQD EygyOTg3Y2I1NGQ5N2M5OTBlZTg2OWE5ZGFhNTc0ODQyZjYzMjBiZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0dG92CuMDdyALZ5zDEVS5sj5cq3 +2FpFrPF4aML+HEve0q9LACnRQgsRaJvphCAbFVy9JB7UP6zafKo4z3yCSSLU4dS +R62S43cPYMcZsPEuV8g36bQYI2ZofBVz0WiyZnbGDsXC03jFq10wGaJwsuyhjMB CWW1Ny+nRI8vXzCS9vFimOU5gwgztrW7sCapV7/lPsuV+a3BJZU52+Z1YaYzRcPR JM1YCZTfMxVUIxTH1MwWgzf/FzUuacrW+jZfGYpTPgFY/5GeBJrRUlMGNsxI5b9B 2hY9P2DFvLM83ECW+P643pyJjGzY2Pm1tfQUCX+l1MkoCbtr1HjJHt8QeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmHy1TZfJkO6Gmp2qV0hC9jIL2iMB8GA1UdIwQY MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5 LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP4Jj4HZ u+P+lDT6HdjrySfFrS/UbjM+8gNN0SRsA4njlwNP/HHiAftoZVIdZrn4GSHeLLcT 1h3gbkY4vaRNPLSHQHmjFulGHyYSNhFN5u7Cg6722rMJV5AhdDE5YvTAaMoame3v OhTbT7eIlrE6/H9YuAstP61a7l70SJpCBGK97n3tt3MnJ4WOWG9ZqdkRTXGOQPTS q23cMqBHzWACcJE7fUK2sFGpn6t6JK7nHdi8zHN1dafNMDzQdB6ksjvKCBOkj9+Z CHo2soWKeH6lD0c5lOfUa65NNQ3aZ6ZmjrhhAhfhkhaYKSjvUIZjXKDYRjsx2BGf c9bYssYfqq49UQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:57 2025 by rpki-client