This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft File: b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json) Hash identifier: xj0vVbuM9YZbFDEiHW5v7G+uB0G++pz+8mmp87u0sF4= Subject key identifier: 06:56:E0:D7:4A:20:3F:D3:C4:DD:30:8E:3A:9D:CD:B8:37:17:A7:AD Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Certificate serial: 019B435BAA05F61182C03DCA9B0490650093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft Manifest number: 0874 Signing time: Mon 22 Dec 2025 00:00:39 +0000 Manifest this update: Mon 22 Dec 2025 00:00:39 +0000 Manifest next update: Tue 23 Dec 2025 00:00:39 +0000 Files and hashes: 1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=) 2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: IEbQZnXOanvzPDk/r9YoPSlI/n2BC2XGFboiEvHHtbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:aa:05:f6:11:82:c0:3d:ca:9b:04:90:65:00:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Validity Not Before: Dec 22 00:00:39 2025 GMT Not After : Dec 23 00:00:39 2025 GMT Subject: CN=0656e0d74a203fd3c4dd308e3a9dcdb83717a7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:c7:23:58:4f:1a:55:1b:bc:97:88:7a:80: 98:05:ff:b8:ff:c0:2d:58:f1:0a:fb:2f:bb:d8:8b: 18:45:23:ae:25:2d:01:8a:6b:d0:0e:c3:f8:61:e4: 5e:a2:0b:40:f0:30:ba:b7:b7:66:b5:ad:28:bc:dc: 1f:53:bc:7d:65:08:4c:b6:f6:8d:1e:4d:0a:1d:cb: af:6e:02:29:f9:3c:94:c4:c4:0b:2c:3e:ec:3e:6c: fc:95:92:24:65:9e:29:f0:a7:6a:53:86:2e:53:8f: b6:47:a7:ec:03:a6:5d:ec:26:08:cc:57:94:82:9c: f4:4d:f7:bc:a5:f6:12:5b:fc:3e:3d:d3:74:29:f9: 7d:8a:65:19:d7:6f:7d:cc:69:67:9d:2b:d3:72:2a: cf:47:88:fa:bf:43:49:89:19:21:aa:3c:23:ca:8c: 4c:69:08:b4:a2:8e:be:5b:7e:8d:1f:86:85:2d:44: 4d:96:80:29:97:05:db:4b:b3:de:b7:f8:b3:ca:ad: 05:58:c4:83:05:17:85:0f:be:ad:82:47:4c:dd:35: fe:a4:a7:01:9d:23:15:30:90:07:a8:5e:1e:5e:1e: 1a:e6:0a:03:9c:25:60:bf:cf:99:b9:28:56:4c:8b: 29:43:33:0e:94:57:cf:1b:c3:34:aa:ed:1e:0e:81: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:56:E0:D7:4A:20:3F:D3:C4:DD:30:8E:3A:9D:CD:B8:37:17:A7:AD X509v3 Authority Key Identifier: keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:08:56:a3:64:6a:83:fa:78:a6:73:62:d5:89:56:bb:99:b1: 3a:48:eb:84:c8:91:8a:c3:1b:19:1b:74:72:e0:e0:50:c7:f8: d0:7b:ee:71:61:64:92:e4:be:8c:91:0f:57:84:68:0b:15:2f: 16:b7:dd:1e:89:e7:c8:e8:95:cc:79:cd:83:74:3f:f3:95:7e: 14:4d:34:fa:9e:91:fa:d3:59:18:ad:14:27:82:86:1c:75:8a: 09:fa:9a:85:b7:24:bf:af:9a:42:b2:17:02:91:93:54:cc:0d: 05:30:12:27:70:28:d2:2e:1d:a3:80:96:ab:cc:9d:12:9f:33: d3:11:c6:d8:3b:d3:9d:6a:93:9c:09:5e:f9:de:15:b4:47:fd: 0f:5c:ef:c5:25:29:f8:51:70:dc:c3:d5:f1:ee:53:3c:b9:21: 5f:27:5e:3a:5e:85:1e:9b:4b:c3:2e:4d:63:e8:b5:71:0e:71: 37:77:75:dd:6a:ac:04:5f:09:cd:8a:13:d3:be:e8:48:78:94: 4c:2a:de:25:af:6f:2e:dd:6d:16:f2:46:95:67:6f:15:14:3a: f1:57:7e:70:87:6a:19:0c:00:c4:07:8d:43:a3:57:d0:69:83: ac:34:74:0c:d7:ec:e0:4a:a5:58:27:2a:61:c3:4e:f5:56:cb: 6f:a4:d6:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW6oF9hGCwD3KmwSQZQCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmNlMTZmZmQ2YTliYTljNTczMTQ1NThhNDQ3ZmFiZjZj NWMwZGEwHhcNMjUxMjIyMDAwMDM5WhcNMjUxMjIzMDAwMDM5WjAzMTEwLwYDVQQD EygwNjU2ZTBkNzRhMjAzZmQzYzRkZDMwOGUzYTlkY2RiODM3MTdhN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQbHI1hPGlUbvJeIeoCYBf+4/8At WPEK+y+72IsYRSOuJS0BimvQDsP4YeReogtA8DC6t7dmta0ovNwfU7x9ZQhMtvaN Hk0KHcuvbgIp+TyUxMQLLD7sPmz8lZIkZZ4p8KdqU4YuU4+2R6fsA6Zd7CYIzFeU gpz0Tfe8pfYSW/w+PdN0Kfl9imUZ1299zGlnnSvTcirPR4j6v0NJiRkhqjwjyoxM aQi0oo6+W36NH4aFLURNloAplwXbS7Pet/izyq0FWMSDBReFD76tgkdM3TX+pKcB nSMVMJAHqF4eXh4a5goDnCVgv8+ZuShWTIspQzMOlFfPG8M0qu0eDoGnJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZW4NdKID/TxN0wjjqdzbg3F6etMB8GA1UdIwQY MBaAFG/84W/9apupxXMUVYpEf6v2xcDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2Yt MTBkMDJhNzEwMjE2LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2YtMTBkMDJhNzEwMjE2 LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARghWo2Rq g/p4pnNi1YlWu5mxOkjrhMiRisMbGRt0cuDgUMf40HvucWFkkuS+jJEPV4RoCxUv FrfdHonnyOiVzHnNg3Q/85V+FE00+p6R+tNZGK0UJ4KGHHWKCfqahbckv6+aQrIX ApGTVMwNBTASJ3Ao0i4do4CWq8ydEp8z0xHG2DvTnWqTnAle+d4VtEf9D1zvxSUp +FFw3MPV8e5TPLkhXydeOl6FHptLwy5NY+i1cQ5xN3d13WqsBF8JzYoT077oSHiU TCreJa9vLt1tFvJGlWdvFRQ68Vd+cIdqGQwAxAeNQ6NX0GmDrDR0DNfs4EqlWCcq YcNO9VbLb6TWXw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:53:18 2025 by rpki-client