This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json) Hash identifier: xgYjbnGKfL9YHi788zONIhRKzEhHvxSHeCibLoX0UQI= Subject key identifier: 5F:14:C6:D6:FE:1E:3A:F6:1B:34:C3:0C:35:EA:18:53:1A:F2:C1:49 Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50 Certificate serial: 019AF209461CBB369603D9BBE61722CD3F1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: spkdL0oiOgxnlq2WTToZvLvUvJFhnNNKkX/nWs3NvFE=) 2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:46:1c:bb:36:96:03:d9:bb:e6:17:22:cd:3f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=5f14c6d6fe1e3af61b34c30c35ea18531af2c149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:e7:82:a3:1f:27:8f:88:ab:2b:1e:53:20: 1e:c8:40:3a:73:dc:0b:40:1a:84:b0:9d:31:b5:17: 88:8d:f4:60:6e:b6:d6:1b:59:b9:27:1b:e9:44:5a: b1:d6:48:1c:03:f7:f4:21:f5:5c:45:13:99:62:54: ce:76:14:92:6f:67:11:8f:35:55:fb:94:4e:c3:95: 94:94:da:ba:12:d1:09:bf:07:b2:ae:5a:99:bb:05: 51:07:d9:e5:f0:28:64:fe:f4:03:cd:8e:13:2e:c1: eb:e6:6c:1f:c4:d3:18:d5:17:2f:f5:11:71:8e:22: e2:cf:ee:7e:9d:ce:43:12:09:60:1c:8e:34:66:e1: 7c:41:31:e9:fc:98:d1:ba:a4:d1:cc:7a:dd:1c:b3: 80:ae:77:0f:5a:79:f3:76:3e:a7:56:e5:54:59:97: bb:3a:55:5f:ee:db:df:0b:c5:c0:a2:64:01:47:5f: 26:03:6c:57:7b:a7:6c:c3:db:b5:90:46:b4:03:03: 1f:64:72:59:5a:cd:4c:37:df:ac:24:5d:ed:f0:be: 61:6b:2f:55:db:9d:4c:e7:18:53:7b:80:09:b4:31: 6a:eb:a0:58:83:47:0d:0d:9d:d9:c5:99:b8:0a:53: 95:cf:aa:89:cd:97:71:5e:1e:57:84:e0:28:83:09: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:14:C6:D6:FE:1E:3A:F6:1B:34:C3:0C:35:EA:18:53:1A:F2:C1:49 X509v3 Authority Key Identifier: keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:b5:f3:2e:1a:6e:20:98:5b:8b:2c:eb:97:41:11:54:6f: 2f:6b:e7:b1:c3:ad:2d:5e:71:ee:eb:a2:61:cd:01:af:67:cf: 50:51:2b:fe:b2:9f:25:ef:95:5c:09:b6:57:99:95:c7:80:79: d1:9e:66:f1:93:e1:93:f1:c1:bb:dd:d1:22:a3:33:6c:38:e1: f8:94:52:eb:69:a8:40:d6:ea:d8:fe:a9:ca:7a:a7:61:99:2b: 4b:9f:f8:1e:03:35:bc:f8:49:9d:ac:19:db:8a:ef:d3:12:67: b2:01:1c:55:99:31:3a:8d:7c:0d:81:43:36:33:22:28:da:62: b4:91:6d:fd:43:ea:d6:44:f2:d5:d1:37:f1:c0:22:13:9b:df: 39:4e:77:49:31:1b:53:9b:77:51:0a:de:8e:f2:6e:27:72:48: e3:17:53:37:ff:52:62:ce:e2:31:da:b3:5f:54:b4:41:4f:66: e7:72:6b:d1:40:97:22:52:df:18:17:24:54:5b:55:f3:09:9a: aa:66:2e:f5:1d:aa:7c:58:b4:52:02:ce:f0:e7:e9:f8:8d:38: 21:ba:e9:5c:67:08:4f:11:19:80:68:44:f0:1d:60:25:47:83: 3c:21:24:ef:d4:67:81:0e:0f:e6:44:25:f5:9b:8a:59:db:3b: a5:d5:3b:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUYcuzaWA9m75hcizT8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi NWFhNTAwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg1ZjE0YzZkNmZlMWUzYWY2MWIzNGMzMGMzNWVhMTg1MzFhZjJjMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLrngqMfJ4+IqyseUyAeyEA6c9wL QBqEsJ0xtReIjfRgbrbWG1m5JxvpRFqx1kgcA/f0IfVcRROZYlTOdhSSb2cRjzVV +5ROw5WUlNq6EtEJvweyrlqZuwVRB9nl8Chk/vQDzY4TLsHr5mwfxNMY1Rcv9RFx jiLiz+5+nc5DEglgHI40ZuF8QTHp/JjRuqTRzHrdHLOArncPWnnzdj6nVuVUWZe7 OlVf7tvfC8XAomQBR18mA2xXe6dsw9u1kEa0AwMfZHJZWs1MN9+sJF3t8L5hay9V 251M5xhTe4AJtDFq66BYg0cNDZ3ZxZm4ClOVz6qJzZdxXh5XhOAogwlUDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8Uxtb+Hjr2GzTDDDXqGFMa8sFJMB8GA1UdIwQY MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5 LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRS18y4a biCYW4ss65dBEVRvL2vnscOtLV5x7uuiYc0Br2fPUFEr/rKfJe+VXAm2V5mVx4B5 0Z5m8ZPhk/HBu93RIqMzbDjh+JRS62moQNbq2P6pynqnYZkrS5/4HgM1vPhJnawZ 24rv0xJnsgEcVZkxOo18DYFDNjMiKNpitJFt/UPq1kTy1dE38cAiE5vfOU53STEb U5t3UQrejvJuJ3JI4xdTN/9SYs7iMdqzX1S0QU9m53Jr0UCXIlLfGBckVFtV8wma qmYu9R2qfFi0UgLO8Ofp+I04IbrpXGcITxEZgGhE8B1gJUeDPCEk79RngQ4P5kQl 9ZuKWds7pdU7Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:36 2025 by rpki-client