This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json) Hash identifier: yNxDsXGGBWvMNbu4Kd1JGcv2UTbHbgKGOp762S+63+E= Subject key identifier: D2:8B:4F:57:7C:F1:00:FD:B3:A1:D3:F7:87:C9:6A:7F:BA:4B:4A:AF Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50 Certificate serial: 019B0747858AE0E6E69537A7BBED5D830446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft Manifest number: 16FC Signing time: Wed 10 Dec 2025 08:01:26 +0000 Manifest this update: Wed 10 Dec 2025 08:01:26 +0000 Manifest next update: Thu 11 Dec 2025 08:01:26 +0000 Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: pxV0G63YWXolNjQTdE5B6tUfNhPr7zz6jsoBklss9eA=) 2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:85:8a:e0:e6:e6:95:37:a7:bb:ed:5d:83:04:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50 Validity Not Before: Dec 10 08:01:26 2025 GMT Not After : Dec 11 08:01:26 2025 GMT Subject: CN=d28b4f577cf100fdb3a1d3f787c96a7fba4b4aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:62:f6:af:d5:bd:99:77:40:1f:c3:bb:ea: 8d:4e:e4:91:3f:0e:32:bd:36:5c:76:a1:1f:2f:b3: ec:e6:ac:c8:ee:16:ed:ab:d6:23:3f:c4:b4:14:d5: 93:ed:cf:d8:11:bf:92:26:69:30:34:55:76:1b:44: 09:0c:7d:82:dd:6b:08:30:a2:97:e7:a2:c8:80:d7: a2:f2:b4:1d:bb:d3:12:5d:28:3f:63:53:ae:12:40: 89:f8:f5:5f:18:c2:ac:39:9b:69:e7:0f:39:33:84: 89:5e:7c:68:81:6c:be:ec:8e:88:d7:c1:6b:3b:a9: d8:18:62:56:31:b2:48:ae:3f:2d:36:4a:fa:be:0c: 10:e1:1d:3a:07:fc:67:fa:ad:6d:f5:a9:25:f8:89: dd:f8:35:3a:21:ce:68:f3:00:53:a3:36:48:df:88: a8:95:1d:cc:5f:34:3c:80:c9:1d:4d:88:d5:44:17: a7:d7:26:bd:d9:fe:11:95:4c:08:fb:32:1a:3d:32: 85:17:85:53:f3:a7:2a:7f:fd:f1:54:66:b3:08:a9: ef:29:dd:21:00:26:6e:21:04:7e:c4:70:2a:96:0c: 82:a8:ea:8c:6b:61:01:0b:04:18:f0:4a:97:a3:f6: bf:f7:a2:5d:e2:4e:49:d3:96:d1:fc:58:66:c2:44: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8B:4F:57:7C:F1:00:FD:B3:A1:D3:F7:87:C9:6A:7F:BA:4B:4A:AF X509v3 Authority Key Identifier: keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a6:9c:cf:c6:16:e5:0e:c3:94:c3:a0:ad:7a:e2:21:4d:2c: d1:d8:64:37:a2:0f:84:15:89:e3:5c:f7:da:32:17:84:15:de: 55:1a:ec:73:c5:6d:91:45:61:31:72:38:0d:05:be:01:69:27: 38:5a:8d:29:42:38:94:13:30:42:8b:30:94:2d:7a:96:e0:9b: 88:cc:dc:19:45:c6:92:14:7a:16:77:a4:5c:46:55:03:05:c4: c8:0c:7d:cc:cc:50:30:93:29:75:ee:8f:43:11:64:8e:79:02: e2:e3:77:61:68:5d:49:1b:de:9f:5e:1f:cc:05:d5:eb:b2:4b: bd:d7:e5:4e:e2:09:1f:bb:22:73:22:4b:f9:61:53:53:11:f2: f1:94:1d:c1:ce:80:97:8d:c5:b4:91:17:d7:e0:a5:28:5b:3e: 56:66:d1:36:d7:3a:23:fd:30:84:d9:56:9c:52:dd:84:d9:a5: 6f:e3:9e:0b:68:e9:14:dd:52:49:98:14:64:d7:bc:45:b0:32: fb:8d:2b:d3:ad:82:9e:ab:b4:2c:4f:b2:7c:73:83:3d:e7:7a: ee:11:4b:44:ed:9a:c8:a3:1d:b4:cb:55:82:ce:a7:7d:16:65: 72:b9:f6:e7:81:03:c8:fe:a9:fb:72:e3:a8:fc:5f:ec:65:19: 81:2e:10:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHR4WK4ObmlTenu+1dgwRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi NWFhNTAwHhcNMjUxMjEwMDgwMTI2WhcNMjUxMjExMDgwMTI2WjAzMTEwLwYDVQQD EyhkMjhiNGY1NzdjZjEwMGZkYjNhMWQzZjc4N2M5NmE3ZmJhNGI0YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvli9q/VvZl3QB/Du+qNTuSRPw4y vTZcdqEfL7Ps5qzI7hbtq9YjP8S0FNWT7c/YEb+SJmkwNFV2G0QJDH2C3WsIMKKX 56LIgNei8rQdu9MSXSg/Y1OuEkCJ+PVfGMKsOZtp5w85M4SJXnxogWy+7I6I18Fr O6nYGGJWMbJIrj8tNkr6vgwQ4R06B/xn+q1t9akl+Ind+DU6Ic5o8wBTozZI34io lR3MXzQ8gMkdTYjVRBen1ya92f4RlUwI+zIaPTKFF4VT86cqf/3xVGazCKnvKd0h ACZuIQR+xHAqlgyCqOqMa2EBCwQY8EqXo/a/96Jd4k5J05bR/FhmwkQc6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKLT1d88QD9s6HT94fJan+6S0qvMB8GA1UdIwQY MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5 LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaacz8YW 5Q7DlMOgrXriIU0s0dhkN6IPhBWJ41z32jIXhBXeVRrsc8VtkUVhMXI4DQW+AWkn OFqNKUI4lBMwQoswlC16luCbiMzcGUXGkhR6FnekXEZVAwXEyAx9zMxQMJMpde6P QxFkjnkC4uN3YWhdSRven14fzAXV67JLvdflTuIJH7sicyJL+WFTUxHy8ZQdwc6A l43FtJEX1+ClKFs+VmbRNtc6I/0whNlWnFLdhNmlb+OeC2jpFN1SSZgUZNe8RbAy +40r062Cnqu0LE+yfHODPed67hFLRO2ayKMdtMtVgs6nfRZlcrn254EDyP6p+3Lj qPxf7GUZgS4QtA== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:50 2025 by rpki-client