This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json) Hash identifier: MoriJfBCS4RT2Si8HMPDZVQBhskG0ZKn97W3zxnd6c4= Subject key identifier: C1:86:AF:DD:2C:62:4D:1D:33:E4:4E:44:05:0E:02:A4:36:4E:BB:E1 Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50 Certificate serial: 019BF6BF274C2806F161B770EC806F8C04E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 20:01:21 +0000 Manifest this update: Sun 25 Jan 2026 20:01:21 +0000 Manifest next update: Mon 26 Jan 2026 20:01:21 +0000 Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: FRouJ1jlcG8DHIB/4U51uD7DUA3UvLWWBHwUuJsOYOg=) 2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:27:4c:28:06:f1:61:b7:70:ec:80:6f:8c:04:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50 Validity Not Before: Jan 25 20:01:21 2026 GMT Not After : Jan 26 20:01:21 2026 GMT Subject: CN=c186afdd2c624d1d33e44e44050e02a4364ebbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:78:08:d7:01:30:0c:60:91:59:c6:90:39: b1:a0:61:55:21:ff:21:3c:56:96:74:71:d3:6c:97: 6b:d3:71:d7:69:fe:aa:bc:25:69:f6:93:08:4e:d0: 01:f7:47:a5:92:a4:f0:2d:6f:50:68:2f:e0:b5:8c: 83:24:35:b4:12:30:de:6f:3f:a2:a2:b5:f7:41:f6: 2c:d5:da:8d:98:0e:05:81:c5:f5:57:9e:47:d3:31: b8:ac:72:3a:77:cb:32:69:65:d9:71:8f:dd:83:ca: 66:ca:d9:01:55:55:d9:85:d1:0c:de:bb:40:36:29: 62:00:9c:58:6e:73:d4:91:6e:b5:fb:e8:ca:5d:cb: d9:ea:44:b6:06:a7:89:ee:6b:27:02:ef:62:fd:77: 20:35:3a:3a:bb:7c:90:48:99:08:b3:c6:21:a8:84: a1:51:f3:92:e9:11:fe:1b:5d:b1:98:34:51:35:75: e5:f3:b8:df:cb:0e:61:dd:f3:9f:35:cc:bc:cb:51: 8d:53:dc:79:72:f4:48:ba:71:bc:cd:62:ea:7e:ec: d5:21:8e:8a:5f:c3:2d:75:4d:b0:7b:db:c5:37:dd: bc:f8:79:98:d1:27:32:a2:e2:57:09:e9:9b:d5:14: e4:7b:a5:56:c9:c0:bb:d8:72:58:38:40:32:e8:3b: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:86:AF:DD:2C:62:4D:1D:33:E4:4E:44:05:0E:02:A4:36:4E:BB:E1 X509v3 Authority Key Identifier: keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:cc:83:b3:09:d0:a4:54:0b:cc:d5:39:b4:87:47:3c:71:4b: 29:ce:87:a4:da:9c:3d:fc:36:89:64:80:9f:15:2e:69:ec:90: ff:55:59:8a:41:a9:78:02:3f:2c:89:00:c7:0f:59:cb:b9:0c: 5b:d0:b5:db:b6:13:ee:b5:49:54:ae:85:dc:9f:ce:01:dd:e0: 6e:ee:c6:c7:bc:86:cf:e8:3d:71:25:f8:b1:46:28:ee:98:9c: d3:de:a9:ef:d9:c6:4a:11:a2:c4:7b:2d:a6:52:4a:d9:cd:30: 10:1d:97:c8:2b:0c:ce:18:f1:18:aa:ea:7a:b0:8c:05:dd:3c: d0:4a:a9:2d:8c:ca:97:3a:da:a6:34:2d:40:71:22:fb:41:ce: 35:10:22:71:92:06:b7:85:e3:1a:fa:85:d9:81:5d:7b:76:e3: 51:dc:1c:6a:92:fb:17:1a:cc:e2:30:74:47:38:3f:ff:6c:a7: 99:56:67:af:f1:10:b0:47:15:b4:3b:46:6d:e8:1b:19:bf:a4: 93:d3:cb:7a:3e:a1:d1:38:ab:4e:43:50:91:f9:6b:53:32:ad: 6e:9e:5a:03:16:29:ae:f4:f1:1d:e6:3c:fb:13:12:57:34:90: 24:e8:cc:87:38:b6:f3:12:03:a0:ce:47:9f:58:7e:65:17:fe: 29:b1:67:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vydMKAbxYbdw7IBvjATgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi NWFhNTAwHhcNMjYwMTI1MjAwMTIxWhcNMjYwMTI2MjAwMTIxWjAzMTEwLwYDVQQD EyhjMTg2YWZkZDJjNjI0ZDFkMzNlNDRlNDQwNTBlMDJhNDM2NGViYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu94CNcBMAxgkVnGkDmxoGFVIf8h PFaWdHHTbJdr03HXaf6qvCVp9pMITtAB90elkqTwLW9QaC/gtYyDJDW0EjDebz+i orX3QfYs1dqNmA4FgcX1V55H0zG4rHI6d8syaWXZcY/dg8pmytkBVVXZhdEM3rtA NiliAJxYbnPUkW61++jKXcvZ6kS2BqeJ7msnAu9i/XcgNTo6u3yQSJkIs8YhqISh UfOS6RH+G12xmDRRNXXl87jfyw5h3fOfNcy8y1GNU9x5cvRIunG8zWLqfuzVIY6K X8MtdU2we9vFN928+HmY0ScyouJXCemb1RTke6VWycC72HJYOEAy6DthkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGGr90sYk0dM+RORAUOAqQ2TrvhMB8GA1UdIwQY MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5 LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8yDswnQ pFQLzNU5tIdHPHFLKc6HpNqcPfw2iWSAnxUuaeyQ/1VZikGpeAI/LIkAxw9Zy7kM W9C127YT7rVJVK6F3J/OAd3gbu7Gx7yGz+g9cSX4sUYo7pic096p79nGShGixHst plJK2c0wEB2XyCsMzhjxGKrqerCMBd080EqpLYzKlzrapjQtQHEi+0HONRAicZIG t4XjGvqF2YFde3bjUdwcapL7FxrM4jB0Rzg//2ynmVZnr/EQsEcVtDtGbegbGb+k k9PLej6h0TirTkNQkflrUzKtbp5aAxYprvTxHeY8+xMSVzSQJOjMhzi28xIDoM5H n1h+ZRf+KbFnmw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:14 2026 by rpki-client