This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft File: b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json) Hash identifier: sqvgdCEVRiMrKVtKTqEDWXZ/VOc6vhELGq7yaVQtdRg= Subject key identifier: 3A:38:EA:50:5C:71:DE:39:BF:16:AC:FF:C3:9D:6C:49:4C:7D:2C:28 Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Certificate serial: 019B31FA37465866AF7E6CB0179D48659D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft Manifest number: 086B Signing time: Thu 18 Dec 2025 15:00:40 +0000 Manifest this update: Thu 18 Dec 2025 15:00:40 +0000 Manifest next update: Fri 19 Dec 2025 15:00:40 +0000 Files and hashes: 1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=) 2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: oR2MQNb5iGATlSEI2QfK8fu+U002tyYxZiPFcwGwBE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:37:46:58:66:af:7e:6c:b0:17:9d:48:65:9d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Validity Not Before: Dec 18 15:00:40 2025 GMT Not After : Dec 19 15:00:40 2025 GMT Subject: CN=3a38ea505c71de39bf16acffc39d6c494c7d2c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:93:42:07:93:41:40:9e:99:91:2c:a9:51: 4a:00:13:14:b2:0f:47:06:49:d6:bd:6c:01:f2:97: 41:67:4a:11:87:3d:c2:72:01:ff:d7:23:77:be:17: 1a:48:56:96:53:6c:06:d0:c3:4a:e5:e7:75:60:4a: e5:93:66:a8:93:c6:10:40:ec:47:12:90:5a:8c:dc: 03:3d:6c:c0:50:4d:72:f1:3c:1b:56:82:e7:ac:64: 42:b3:ac:dd:c2:c3:d6:fe:58:42:59:62:e0:e3:ab: 41:d9:b6:f7:8e:14:e2:c1:72:98:d5:94:e8:e3:43: cc:c8:c7:dd:8f:9b:60:b3:e4:d8:8a:d5:e4:8b:d4: 5b:46:de:db:71:31:92:66:5b:8b:f1:d7:75:83:58: 28:35:8d:26:47:f7:cc:e0:60:58:b0:0f:cc:ae:bc: 56:1a:10:85:09:42:fe:40:e2:1c:b8:aa:ff:53:fb: 72:e4:41:56:e4:be:59:1a:3d:5d:09:ac:8f:6f:62: fa:0d:09:20:66:b2:3f:42:b1:eb:ba:83:f7:04:bd: 20:13:47:5a:eb:2d:ca:4d:88:b7:0b:f7:b1:65:6a: 63:90:12:41:9d:e4:ac:28:1e:fb:17:eb:c3:f7:ce: b6:4b:59:90:ad:ec:47:53:55:e4:19:a2:7e:9a:25: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:EA:50:5C:71:DE:39:BF:16:AC:FF:C3:9D:6C:49:4C:7D:2C:28 X509v3 Authority Key Identifier: keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:08:08:1f:ee:6e:be:77:af:c0:b2:25:c0:d1:89:21:65:28: 01:25:b4:8e:45:bb:9d:83:d1:4d:36:39:0f:3f:ec:0a:d7:ba: 57:62:54:df:f1:8b:c5:9e:69:54:f4:02:79:51:ef:18:61:85: c5:e2:95:8f:e9:ad:82:ec:7f:29:75:7b:83:ad:37:ab:f0:4c: 19:ec:c7:4c:f9:4c:9c:e6:7e:f0:ab:05:8d:ab:21:53:43:33: 5d:5e:01:c8:ae:be:3b:22:09:75:80:15:0b:27:a2:11:1d:1b: 65:cc:d6:64:e1:cc:71:ca:dc:ad:69:bc:33:32:3a:5c:a4:0b: 2f:2a:43:ad:95:92:3c:15:ce:81:7c:97:53:cb:0c:07:e1:38: 91:b4:80:f2:27:12:4c:3b:6f:9e:38:f6:c6:ce:b6:22:9d:22: 60:a3:98:bc:4b:87:06:60:36:4a:4e:8e:1d:90:59:71:97:53: 02:d1:38:e0:1f:f8:c6:91:cd:7f:40:18:a3:f1:6e:d6:ce:05: 34:73:df:b2:fb:8f:e2:21:a0:55:9e:3b:51:e0:83:62:ed:60: af:50:e1:23:34:61:85:21:51:63:7c:54:a3:77:57:c4:4d:83: d5:f5:c6:50:75:5e:37:76:ed:62:1f:f3:f5:be:4e:93:b0:19: cd:38:18:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+jdGWGavfmywF51IZZ09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmNlMTZmZmQ2YTliYTljNTczMTQ1NThhNDQ3ZmFiZjZj NWMwZGEwHhcNMjUxMjE4MTUwMDQwWhcNMjUxMjE5MTUwMDQwWjAzMTEwLwYDVQQD EygzYTM4ZWE1MDVjNzFkZTM5YmYxNmFjZmZjMzlkNmM0OTRjN2QyYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoauTQgeTQUCemZEsqVFKABMUsg9H BknWvWwB8pdBZ0oRhz3CcgH/1yN3vhcaSFaWU2wG0MNK5ed1YErlk2aok8YQQOxH EpBajNwDPWzAUE1y8TwbVoLnrGRCs6zdwsPW/lhCWWLg46tB2bb3jhTiwXKY1ZTo 40PMyMfdj5tgs+TYitXki9RbRt7bcTGSZluL8dd1g1goNY0mR/fM4GBYsA/MrrxW GhCFCUL+QOIcuKr/U/ty5EFW5L5ZGj1dCayPb2L6DQkgZrI/QrHruoP3BL0gE0da 6y3KTYi3C/exZWpjkBJBneSsKB77F+vD9862S1mQrexHU1XkGaJ+miV8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo46lBccd45vxas/8OdbElMfSwoMB8GA1UdIwQY MBaAFG/84W/9apupxXMUVYpEf6v2xcDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2Yt MTBkMDJhNzEwMjE2LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2YtMTBkMDJhNzEwMjE2 LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAgIH+5u vnevwLIlwNGJIWUoASW0jkW7nYPRTTY5Dz/sCte6V2JU3/GLxZ5pVPQCeVHvGGGF xeKVj+mtgux/KXV7g603q/BMGezHTPlMnOZ+8KsFjashU0MzXV4ByK6+OyIJdYAV CyeiER0bZczWZOHMccrcrWm8MzI6XKQLLypDrZWSPBXOgXyXU8sMB+E4kbSA8icS TDtvnjj2xs62Ip0iYKOYvEuHBmA2Sk6OHZBZcZdTAtE44B/4xpHNf0AYo/Fu1s4F NHPfsvuP4iGgVZ47UeCDYu1gr1DhIzRhhSFRY3xUo3dXxE2D1fXGUHVeN3btYh/z 9b5Ok7AZzTgYcg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:17:13 2025 by rpki-client