This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft File: K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json) Hash identifier: QWUUaaxWGPpeILic3ow7frsfBqdszuyywTcp/5CcAh8= Subject key identifier: F0:7B:21:79:34:FF:8A:A4:5E:24:13:29:62:3E:4E:95:A3:17:2B:4B Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Certificate serial: 019BF6F586E398430F736C19C6AD2A0C2D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft Manifest number: 10D2 Signing time: Sun 25 Jan 2026 21:00:44 +0000 Manifest this update: Sun 25 Jan 2026 21:00:44 +0000 Manifest next update: Mon 26 Jan 2026 21:00:44 +0000 Files and hashes: 1: 7dUk_iTWyq-CeV5sugxsu_-uM24.roa (hash: M71kUmZZx7bac9nbXal3k/LyQr/8W0Eyw9aShrmuf9U=) 2: JA2Y-jh-PHCmYhc4L6lveTEQpC8.roa (hash: yCR3T9OdwoX7tNGe8kaR3S1PiWc9KBcnYLkTDnQhJyM=) 3: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: vBNaEOf1CBi/OCAefadOs7/zedMFytvoj2E2Dl4eznY=) 4: VHTezWH7PF8XYyinWvLQSdLirIo.roa (hash: G21prvPwFpFtpTkNE/06nds8TG9ODrPN69mRhqerBUg=) 5: lkwTPzFQR_MXjNlSl2fjCt-hEOc.roa (hash: bVbXDJJ5aDC+G2MskbiLbGMin2Lx7CiB4V4YqH05sP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:86:e3:98:43:0f:73:6c:19:c6:ad:2a:0c:2d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Validity Not Before: Jan 25 21:00:44 2026 GMT Not After : Jan 26 21:00:44 2026 GMT Subject: CN=f07b217934ff8aa45e241329623e4e95a3172b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:1e:67:e8:89:a5:06:47:33:91:29:32:d6: 7a:ff:e6:c4:ba:5e:ae:4a:bb:97:b1:ce:94:bd:71: 23:e3:a0:1a:74:3b:5d:c5:4d:48:93:8a:0a:20:c1: 2b:9d:b4:5d:f5:1e:ec:4c:e1:53:4b:65:cb:14:44: 9a:3b:15:e6:34:5a:dd:34:e9:34:33:7f:f0:29:1d: 87:3b:51:35:63:a5:0c:13:b1:17:1a:3d:33:1d:13: 21:3f:79:3b:08:48:af:e4:0a:5a:a4:31:ed:32:3f: 03:e9:22:61:ef:09:88:b5:fb:87:be:01:0c:17:d0: 63:8c:3f:39:6e:5c:b7:61:e0:a4:d3:af:6d:41:65: af:89:66:31:b2:b6:55:1c:94:65:d9:6a:cf:7b:1b: df:dc:81:dd:a2:73:30:96:2e:12:9d:40:24:54:b5: 05:9e:19:57:4d:fe:c0:e1:36:99:2d:04:d7:d8:39: ce:75:99:9a:ef:1e:09:d0:40:8e:a1:6a:7a:96:9f: 6f:47:5e:eb:f9:c8:c6:35:64:e4:92:f0:7a:66:5f: 41:f8:ce:94:b9:59:74:bd:3b:51:35:1c:50:f1:45: 52:d5:9e:f4:4a:38:c9:a8:5c:cf:8d:9a:f8:5e:aa: 1a:f3:e1:5e:36:3b:76:0d:c5:19:b0:25:bd:0f:38: ee:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:21:79:34:FF:8A:A4:5E:24:13:29:62:3E:4E:95:A3:17:2B:4B X509v3 Authority Key Identifier: keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:77:db:1d:5f:45:53:5e:fe:e9:33:ed:c3:cf:3a:5c:56:e7: 01:71:8f:8e:df:01:13:c7:bd:30:c6:d8:b9:56:7f:e2:db:66: 22:fe:1d:8b:40:0d:54:9e:5b:7e:08:6b:60:c6:6f:bb:67:a0: f5:da:dd:61:bf:b3:50:7c:b8:33:10:a9:d3:0e:48:ae:55:3f: 12:80:bd:98:fd:c4:b7:af:5f:ef:15:9a:11:5f:c3:3c:97:d6: 34:cd:ee:d3:29:8d:08:3f:47:47:60:43:fc:83:12:4c:be:5b: 7b:d8:19:f7:ce:f6:38:19:40:61:f6:9e:35:fe:b0:f9:a1:78: 18:31:86:39:5f:27:2f:a9:17:eb:42:1e:45:fb:03:08:93:08: b7:0d:80:25:d7:eb:96:70:4b:cd:ea:0d:2c:40:5e:e4:a1:3f: b4:52:9e:52:82:05:0d:ec:0f:e1:0f:ec:e4:80:4d:3f:26:2a: ba:cb:2d:d7:b6:4e:76:53:e4:9a:df:c0:ae:bd:8b:fd:96:ad: 3a:f4:f7:41:15:e0:b2:d0:9a:97:2f:a8:1d:58:d8:b2:82:f1: c6:8c:08:1d:b3:90:b4:24:44:af:fc:53:3a:92:4c:9b:f6:a6: 44:ce:0b:13:12:2d:d9:1a:f8:16:4e:2b:18:dd:11:3a:6b:36: 6e:6c:76:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YbjmEMPc2wZxq0qDC2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw ZWEzYTAwHhcNMjYwMTI1MjEwMDQ0WhcNMjYwMTI2MjEwMDQ0WjAzMTEwLwYDVQQD EyhmMDdiMjE3OTM0ZmY4YWE0NWUyNDEzMjk2MjNlNGU5NWEzMTcyYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyckeZ+iJpQZHM5EpMtZ6/+bEul6u SruXsc6UvXEj46AadDtdxU1Ik4oKIMErnbRd9R7sTOFTS2XLFESaOxXmNFrdNOk0 M3/wKR2HO1E1Y6UME7EXGj0zHRMhP3k7CEiv5ApapDHtMj8D6SJh7wmItfuHvgEM F9BjjD85bly3YeCk069tQWWviWYxsrZVHJRl2WrPexvf3IHdonMwli4SnUAkVLUF nhlXTf7A4TaZLQTX2DnOdZma7x4J0ECOoWp6lp9vR17r+cjGNWTkkvB6Zl9B+M6U uVl0vTtRNRxQ8UVS1Z70SjjJqFzPjZr4Xqoa8+FeNjt2DcUZsCW9DzjuvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB7IXk0/4qkXiQTKWI+TpWjFytLMB8GA1UdIwQY MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt MDBjYTMxMjZiM2ZlLzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnfbHV9F U17+6TPtw886XFbnAXGPjt8BE8e9MMbYuVZ/4ttmIv4di0ANVJ5bfghrYMZvu2eg 9drdYb+zUHy4MxCp0w5IrlU/EoC9mP3Et69f7xWaEV/DPJfWNM3u0ymNCD9HR2BD /IMSTL5be9gZ9872OBlAYfaeNf6w+aF4GDGGOV8nL6kX60IeRfsDCJMItw2AJdfr lnBLzeoNLEBe5KE/tFKeUoIFDewP4Q/s5IBNPyYqusst17ZOdlPkmt/Arr2L/Zat OvT3QRXgstCaly+oHVjYsoLxxowIHbOQtCREr/xTOpJMm/amRM4LExIt2Rr4Fk4r GN0ROms2bmx2cQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:07 2026 by rpki-client