This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft File: K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json) Hash identifier: 8X2wUOXZM6YGv7tyejf8G+fC9lAIJi3plVRidtNYfPc= Subject key identifier: 0F:21:B5:3C:D6:DD:B2:7E:8C:48:BF:67:50:2D:73:80:CC:E6:F1:0E Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Certificate serial: 019B0E5B968A0CE32BF4F703C9A5FCA08D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft Manifest number: 1058 Signing time: Thu 11 Dec 2025 17:00:41 +0000 Manifest this update: Thu 11 Dec 2025 17:00:41 +0000 Manifest next update: Fri 12 Dec 2025 17:00:41 +0000 Files and hashes: 1: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (hash: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=) 2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: gxb95pl3spbjNlCeCae6zjI6LlzTCpBoBxHVPeefRvo=) 3: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (hash: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=) 4: tOKffNLeqoCRQyLhX0pk9w0e9gE.roa (hash: ZtE1N4hx0o7ezg+y2AZrHnoAdijePQwyuxVbH8gDLhU=) 5: xsMX4xnBtAkWlhocItT5wdfVH3k.roa (hash: z7ATRuzsizy0J/zWBm/YAirUNrjy9iWYQrOG/F0bSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:96:8a:0c:e3:2b:f4:f7:03:c9:a5:fc:a0:8d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Validity Not Before: Dec 11 17:00:41 2025 GMT Not After : Dec 12 17:00:41 2025 GMT Subject: CN=0f21b53cd6ddb27e8c48bf67502d7380cce6f10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:b8:3d:52:a2:f2:c3:82:f3:3b:fc:e3:cb: c0:cf:21:69:36:f9:60:7a:3e:24:57:25:3a:31:df: 50:fd:7f:b9:04:0b:c2:f9:71:81:04:28:70:df:e1: aa:87:81:68:ac:a3:b6:af:ab:40:af:d0:39:f8:8f: 8a:c7:25:b9:f7:83:1e:7e:5b:40:8b:3a:1a:28:2d: 5f:6d:72:d9:da:d7:85:2c:b8:65:ee:ba:9c:5d:a8: 0c:06:95:da:da:08:fb:6a:5a:56:63:fb:3c:b6:06: a0:f5:fd:32:69:2e:c3:33:dc:01:ab:de:44:4d:a5: 51:04:2a:71:9f:2c:f6:fa:c9:04:b1:c6:2e:d8:60: 4e:77:05:e2:34:a3:a6:d4:6a:b3:bd:36:7c:d7:10: 27:31:23:2c:25:82:47:a9:38:08:6c:a7:f8:04:b7: 33:a0:b1:46:c9:4f:7f:a7:dd:45:f8:77:27:96:cb: 85:43:b1:6e:18:a8:96:78:89:6b:da:93:1a:b1:ed: 10:6e:33:26:c7:99:25:a0:a5:9b:5f:c6:d7:62:ba: a1:85:2e:6f:b9:0d:98:12:59:20:dd:ad:9a:5f:c7: be:b5:a4:c3:5a:dd:59:97:e4:f4:60:dd:44:ba:22: e1:ce:db:c1:01:d5:c2:98:3c:21:ef:c7:8a:13:c5: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:B5:3C:D6:DD:B2:7E:8C:48:BF:67:50:2D:73:80:CC:E6:F1:0E X509v3 Authority Key Identifier: keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7f:c5:09:5d:38:9c:42:2f:18:46:78:d3:5b:4d:93:51:1d: 16:14:cc:df:02:b8:c8:83:ac:db:80:1f:a6:31:8d:dc:92:bc: 2a:d4:79:0a:01:e7:7a:81:d0:ba:f5:5f:2f:8d:70:a7:23:33: ae:82:2f:c0:00:51:56:c7:b9:58:0e:fb:53:09:af:cf:b4:f1: c3:15:3d:67:c9:6d:a0:0c:57:fa:06:28:b6:fc:28:c3:3a:f1: 82:c9:f7:f8:87:ca:7b:55:6a:99:9e:57:e9:c6:aa:e2:15:36: c3:2f:dd:6a:b2:b4:8d:92:20:a4:82:8f:d4:8c:20:2f:ba:8d: 3d:65:0d:56:52:2d:75:80:b3:e7:d4:28:c1:83:c0:49:4d:ec: 0c:2d:a8:d8:cf:0d:9f:c3:b6:a9:f2:77:ce:6c:36:f5:d0:6a: 7e:89:d3:2b:74:cf:fa:97:02:a2:2e:4c:f9:08:3e:25:1a:df: 36:7d:af:5a:63:e6:1b:5a:08:ea:b6:1d:95:a3:cb:54:bf:9f: 06:5f:75:ff:e1:3d:96:79:be:0e:d6:76:08:54:9e:e8:d4:a1: 09:3c:51:6a:71:a8:73:d4:32:e4:bf:02:24:91:e8:f3:cb:83: 94:24:cd:ad:a9:5d:80:c4:81:dc:88:ad:3f:67:37:61:e2:b9: f8:1a:dc:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW5aKDOMr9PcDyaX8oI1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw ZWEzYTAwHhcNMjUxMjExMTcwMDQxWhcNMjUxMjEyMTcwMDQxWjAzMTEwLwYDVQQD EygwZjIxYjUzY2Q2ZGRiMjdlOGM0OGJmNjc1MDJkNzM4MGNjZTZmMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLG4PVKi8sOC8zv848vAzyFpNvlg ej4kVyU6Md9Q/X+5BAvC+XGBBChw3+Gqh4ForKO2r6tAr9A5+I+KxyW594MefltA izoaKC1fbXLZ2teFLLhl7rqcXagMBpXa2gj7alpWY/s8tgag9f0yaS7DM9wBq95E TaVRBCpxnyz2+skEscYu2GBOdwXiNKOm1GqzvTZ81xAnMSMsJYJHqTgIbKf4BLcz oLFGyU9/p91F+HcnlsuFQ7FuGKiWeIlr2pMase0QbjMmx5kloKWbX8bXYrqhhS5v uQ2YElkg3a2aX8e+taTDWt1Zl+T0YN1EuiLhztvBAdXCmDwh78eKE8U0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8htTzW3bJ+jEi/Z1Atc4DM5vEOMB8GA1UdIwQY MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt MDBjYTMxMjZiM2ZlLzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjX/FCV04 nEIvGEZ401tNk1EdFhTM3wK4yIOs24AfpjGN3JK8KtR5CgHneoHQuvVfL41wpyMz roIvwABRVse5WA77Uwmvz7TxwxU9Z8ltoAxX+gYotvwowzrxgsn3+IfKe1VqmZ5X 6caq4hU2wy/darK0jZIgpIKP1IwgL7qNPWUNVlItdYCz59QowYPASU3sDC2o2M8N n8O2qfJ3zmw29dBqfonTK3TP+pcCoi5M+Qg+JRrfNn2vWmPmG1oI6rYdlaPLVL+f Bl91/+E9lnm+DtZ2CFSe6NShCTxRanGoc9Qy5L8CJJHo88uDlCTNraldgMSB3Iit P2c3YeK5+Brcog== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:17 2025 by rpki-client