This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json) Hash identifier: KQp2zETWHroTD3MpZG/BH1+ZBr04sh5IBs/zx0b4Zls= Subject key identifier: 4B:7D:C3:6D:0F:3F:1D:0B:8A:92:0D:CB:95:CC:C3:79:E8:93:6B:1B Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50 Certificate serial: 019B3B6BB9003B5F41CF4B12D75777071B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft Manifest number: 1717 Signing time: Sat 20 Dec 2025 11:01:13 +0000 Manifest this update: Sat 20 Dec 2025 11:01:13 +0000 Manifest next update: Sun 21 Dec 2025 11:01:13 +0000 Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: iG5rQJusbCvh3JKQvRJJ7qUsrJcAFDf4HEQ73rcgtXU=) 2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:b9:00:3b:5f:41:cf:4b:12:d7:57:77:07:1b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50 Validity Not Before: Dec 20 11:01:13 2025 GMT Not After : Dec 21 11:01:13 2025 GMT Subject: CN=4b7dc36d0f3f1d0b8a920dcb95ccc379e8936b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0e:cf:54:3d:1b:30:f5:16:df:a4:75:1a:55: 47:ab:13:81:dc:62:8c:1c:57:f1:a1:94:8a:cd:03: 73:ac:46:39:34:78:f4:0b:4e:ff:61:d0:1d:5f:5c: 8d:9d:d2:68:82:3a:d7:72:6c:d7:4e:69:2e:82:27: 4e:3d:f7:c7:db:b4:78:3f:01:a1:fb:76:c5:ae:84: c3:a4:94:31:0b:44:89:83:4d:7d:9d:93:d0:7b:48: 13:7b:55:2b:33:61:2b:8f:b5:c4:9b:8e:55:b0:6a: f7:d3:af:d8:0b:e8:15:f7:01:b5:b9:1f:2f:eb:27: 21:e4:6d:40:6a:c2:3c:10:30:b1:63:77:26:1d:6d: 3e:46:fa:2f:ad:f1:84:77:03:d6:aa:ca:83:ce:7e: 2c:b7:de:80:2f:ae:f5:e5:fe:8d:49:4d:cf:89:5d: 38:84:e2:65:c5:a2:0d:8b:ce:73:48:cc:42:19:14: 6b:0b:19:6a:c3:6f:28:95:13:6f:49:ee:8e:23:e3: 71:a6:2e:12:11:50:20:56:1a:9d:ae:90:8f:71:46: 40:36:2c:b8:af:a2:96:75:54:7e:6d:dd:f4:e2:e4: c0:86:d0:a9:92:e3:03:19:72:0c:8d:33:26:a0:94: 20:c0:d1:c9:76:fd:51:b3:62:98:a3:d9:93:63:d0: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7D:C3:6D:0F:3F:1D:0B:8A:92:0D:CB:95:CC:C3:79:E8:93:6B:1B X509v3 Authority Key Identifier: keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:90:bb:b2:b4:ff:aa:65:6c:0a:3d:6f:22:e0:aa:0b:46:61: ef:6e:27:be:ff:6e:b2:67:c3:d4:aa:ff:c4:59:1a:fa:a3:44: 14:f5:c9:64:6c:bd:7d:f0:84:f7:0b:37:8e:52:e9:87:5f:86: d9:4e:81:9c:97:cf:15:e0:f1:c7:0e:16:55:1a:4d:b3:46:2c: 6c:64:c4:e5:cd:72:c8:cf:75:c9:79:92:ed:d1:c4:20:c6:e7: d4:f0:90:37:4b:52:ce:80:53:97:bd:2d:8d:c6:6a:7b:0d:96: 2e:b8:5d:6e:77:3f:7b:94:5e:ab:f7:18:ab:a2:61:07:3e:b1: 78:b9:bf:23:05:09:78:7c:26:3c:5c:d4:10:89:b6:bb:e0:dc: c7:77:61:45:7f:d4:33:e8:9d:e3:9d:61:d0:62:f3:25:64:2c: 7b:8a:da:58:2a:2d:4e:e4:69:fc:cd:fc:ef:82:d1:33:06:0c: d6:bd:b8:65:bd:43:15:7d:75:12:91:e7:52:e3:83:55:6a:56: 2f:b0:d2:27:b6:07:48:14:e8:e9:d8:54:b1:f5:2d:bc:d6:4b: 40:d2:a9:6b:62:82:e0:26:4d:59:d5:6c:4a:1c:56:65:cb:e5: 56:e6:a0:53:4b:1d:da:6f:31:a5:6e:de:d6:08:b3:9e:06:e1: 22:59:77:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a7kAO19Bz0sS11d3BxsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi NWFhNTAwHhcNMjUxMjIwMTEwMTEzWhcNMjUxMjIxMTEwMTEzWjAzMTEwLwYDVQQD Eyg0YjdkYzM2ZDBmM2YxZDBiOGE5MjBkY2I5NWNjYzM3OWU4OTM2YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q7PVD0bMPUW36R1GlVHqxOB3GKM HFfxoZSKzQNzrEY5NHj0C07/YdAdX1yNndJogjrXcmzXTmkugidOPffH27R4PwGh +3bFroTDpJQxC0SJg019nZPQe0gTe1UrM2Erj7XEm45VsGr306/YC+gV9wG1uR8v 6ych5G1AasI8EDCxY3cmHW0+RvovrfGEdwPWqsqDzn4st96AL6715f6NSU3PiV04 hOJlxaINi85zSMxCGRRrCxlqw28olRNvSe6OI+Nxpi4SEVAgVhqdrpCPcUZANiy4 r6KWdVR+bd304uTAhtCpkuMDGXIMjTMmoJQgwNHJdv1Rs2KYo9mTY9CwSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt9w20PPx0LipINy5XMw3nok2sbMB8GA1UdIwQY MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5 LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZC7srT/ qmVsCj1vIuCqC0Zh724nvv9usmfD1Kr/xFka+qNEFPXJZGy9ffCE9ws3jlLph1+G 2U6BnJfPFeDxxw4WVRpNs0YsbGTE5c1yyM91yXmS7dHEIMbn1PCQN0tSzoBTl70t jcZqew2WLrhdbnc/e5Req/cYq6JhBz6xeLm/IwUJeHwmPFzUEIm2u+Dcx3dhRX/U M+id451h0GLzJWQse4raWCotTuRp/M3874LRMwYM1r24Zb1DFX11EpHnUuODVWpW L7DSJ7YHSBTo6dhUsfUtvNZLQNKpa2KC4CZNWdVsShxWZcvlVuagU0sd2m8xpW7e 1gizngbhIll3BA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:28 2025 by rpki-client