This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft File: b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json) Hash identifier: 6oezIRiGhODbwB8xMh6ssYphALTr719XH4bo2Sx+TtA= Subject key identifier: D0:0F:CA:D2:8B:11:53:F3:5A:EC:DC:E2:C6:61:71:FC:86:C8:8B:39 Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Certificate serial: 019B33E88C4B27F67D8E060403B44F722A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft Manifest number: 086C Signing time: Fri 19 Dec 2025 00:00:36 +0000 Manifest this update: Fri 19 Dec 2025 00:00:36 +0000 Manifest next update: Sat 20 Dec 2025 00:00:36 +0000 Files and hashes: 1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=) 2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: fX8kyTYFW0/1Ja2PHU00MX/ZEhTaElyIqW1LQCbLCw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:8c:4b:27:f6:7d:8e:06:04:03:b4:4f:72:2a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Validity Not Before: Dec 19 00:00:36 2025 GMT Not After : Dec 20 00:00:36 2025 GMT Subject: CN=d00fcad28b1153f35aecdce2c66171fc86c88b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:5e:d8:bc:94:41:a9:9e:3a:18:9e:cf:e9: 19:4a:53:23:dd:d4:ee:33:8a:9e:18:b0:a4:15:10: ea:86:8d:86:6c:80:92:f6:9c:64:d6:cf:ca:b6:a0: 79:90:0c:36:4f:4f:8b:13:b4:53:bc:c4:c0:42:f5: b2:81:24:48:bf:56:59:ce:3e:d2:fc:1e:61:d7:cf: 61:9c:0d:fd:0a:3b:68:c2:fd:5f:0f:03:1c:17:7d: 03:79:47:09:4e:30:e6:be:a7:b6:7e:16:82:be:a7: f3:9c:e2:b0:d2:62:05:ed:65:46:48:c2:7a:f2:6c: 4e:6a:1c:c1:f2:76:3b:dc:d0:2c:f1:ae:30:5c:58: 99:11:6f:9e:a3:d9:4c:18:49:11:2d:44:e1:64:68: 5c:92:bd:14:63:32:55:77:8e:73:7b:74:81:1e:b3: 04:68:fc:50:4b:26:bb:3f:dd:0e:2a:a3:8f:df:79: f1:7c:82:23:30:79:3f:65:74:00:2b:dc:94:4d:f9: 04:2d:54:bf:90:3a:12:05:2f:f8:48:f4:0e:d8:b5: dd:30:15:33:18:eb:73:a1:60:3e:e1:5d:f5:5b:df: 6d:3c:fb:9d:af:51:d2:2d:10:b9:eb:30:43:db:51: 3b:11:a8:f2:2c:cd:cd:45:51:03:d0:40:90:1c:a0: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0F:CA:D2:8B:11:53:F3:5A:EC:DC:E2:C6:61:71:FC:86:C8:8B:39 X509v3 Authority Key Identifier: keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:da:43:7e:a4:ad:b6:cc:39:a6:4a:46:6a:9f:02:3f:ec:6b: 01:c2:bd:ea:c4:9d:be:01:19:be:8e:d9:ab:06:13:03:05:fc: 53:25:af:15:d1:1e:8f:e6:80:88:c0:d2:32:ea:7c:cc:e1:b8: a0:96:77:6a:a8:bc:ba:40:13:13:b7:a2:2f:27:8c:5a:0d:7f: e7:45:26:62:9c:27:93:51:0b:50:bb:cb:de:9b:fb:9b:1c:42: a3:08:58:45:ed:30:8a:44:4b:4c:46:21:f1:00:d2:99:84:a8: 3c:ed:26:64:59:fe:49:23:1c:bf:bf:6a:ad:87:9c:9a:ad:0d: 0f:63:51:1b:e2:10:00:2e:81:34:ed:bb:3e:ed:49:36:fe:83: 20:3c:ef:d9:fd:97:99:16:fd:97:6f:69:d0:b7:59:05:a4:f4: 9a:6c:af:d9:a7:26:5f:89:52:6a:4f:a7:ce:82:47:ea:f4:01: 3e:5d:5c:4d:dc:39:c0:78:e1:a4:41:c8:21:bc:88:8d:40:25: ac:69:73:4e:21:e0:8b:fb:a9:33:2d:29:df:8a:91:ff:ec:11: 10:1f:68:41:34:70:41:14:7f:a0:9e:ea:55:c1:1f:39:e8:74: e7:db:9f:b0:d4:20:fb:74:a3:8c:55:56:2c:b1:1b:ba:68:c7: ab:89:1e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6IxLJ/Z9jgYEA7RPcioCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmNlMTZmZmQ2YTliYTljNTczMTQ1NThhNDQ3ZmFiZjZj NWMwZGEwHhcNMjUxMjE5MDAwMDM2WhcNMjUxMjIwMDAwMDM2WjAzMTEwLwYDVQQD EyhkMDBmY2FkMjhiMTE1M2YzNWFlY2RjZTJjNjYxNzFmYzg2Yzg4YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjhe2LyUQameOhiez+kZSlMj3dTu M4qeGLCkFRDqho2GbICS9pxk1s/KtqB5kAw2T0+LE7RTvMTAQvWygSRIv1ZZzj7S /B5h189hnA39Cjtowv1fDwMcF30DeUcJTjDmvqe2fhaCvqfznOKw0mIF7WVGSMJ6 8mxOahzB8nY73NAs8a4wXFiZEW+eo9lMGEkRLUThZGhckr0UYzJVd45ze3SBHrME aPxQSya7P90OKqOP33nxfIIjMHk/ZXQAK9yUTfkELVS/kDoSBS/4SPQO2LXdMBUz GOtzoWA+4V31W99tPPudr1HSLRC56zBD21E7EajyLM3NRVED0ECQHKBpswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAPytKLEVPzWuzc4sZhcfyGyIs5MB8GA1UdIwQY MBaAFG/84W/9apupxXMUVYpEf6v2xcDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2Yt MTBkMDJhNzEwMjE2LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2YtMTBkMDJhNzEwMjE2 LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdpDfqSt tsw5pkpGap8CP+xrAcK96sSdvgEZvo7ZqwYTAwX8UyWvFdEej+aAiMDSMup8zOG4 oJZ3aqi8ukATE7eiLyeMWg1/50UmYpwnk1ELULvL3pv7mxxCowhYRe0wikRLTEYh 8QDSmYSoPO0mZFn+SSMcv79qrYecmq0ND2NRG+IQAC6BNO27Pu1JNv6DIDzv2f2X mRb9l29p0LdZBaT0mmyv2acmX4lSak+nzoJH6vQBPl1cTdw5wHjhpEHIIbyIjUAl rGlzTiHgi/upMy0p34qR/+wREB9oQTRwQRR/oJ7qVcEfOeh059ufsNQg+3SjjFVW LLEbumjHq4keeQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:31:38 2025 by rpki-client