This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft File: K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json) Hash identifier: 371LLstIXgxOpRfA4AqlMUTYLZgExtgdve1IpTHLfvQ= Subject key identifier: BA:4E:36:06:6A:21:84:08:47:86:CF:6A:51:79:48:01:28:8F:31:6D Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Certificate serial: 019AF163EAA3C82C7AEFF2305990CA66EE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft Manifest number: 1049 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (hash: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=) 2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: qTb0V5Ek5SrwaRcvx0H7kPjNNMp5pkdBPLKjE/0OzOg=) 3: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (hash: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=) 4: tOKffNLeqoCRQyLhX0pk9w0e9gE.roa (hash: ZtE1N4hx0o7ezg+y2AZrHnoAdijePQwyuxVbH8gDLhU=) 5: xsMX4xnBtAkWlhocItT5wdfVH3k.roa (hash: z7ATRuzsizy0J/zWBm/YAirUNrjy9iWYQrOG/F0bSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ea:a3:c8:2c:7a:ef:f2:30:59:90:ca:66:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=ba4e36066a2184084786cf6a51794801288f316d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:18:e1:9c:76:a5:21:f9:7c:27:9b:92:0b: 67:22:d5:53:67:cc:57:2a:10:fd:63:4e:90:68:3e: a8:ae:23:2c:e8:c5:64:f4:2b:5a:d6:d0:17:13:72: a5:92:10:99:74:f3:84:02:42:29:45:b6:fa:a6:60: 18:4f:a8:d7:f0:c8:52:99:f9:58:9c:03:be:84:fc: 85:08:c7:bd:14:63:8c:c3:e3:8a:fa:6f:50:a7:57: 17:50:fb:3c:24:1a:b9:12:be:5d:90:0e:49:83:f5: c8:bc:26:86:b4:ed:1d:ff:b6:72:d0:72:b7:bd:b8: 1e:e3:8b:36:94:55:07:21:5d:05:a0:b7:8f:ee:d6: 2a:e7:cd:8c:13:e3:99:ce:27:78:3c:66:a3:70:f7: 66:8b:99:c4:6a:3d:5a:42:d5:d5:59:bf:98:65:9d: 5b:36:5e:42:e6:1f:4d:03:cb:84:94:88:6b:2a:3d: 79:05:02:da:f5:51:92:59:2f:37:34:3e:e8:d1:b2: a2:49:1e:e6:c4:7c:03:7a:f1:d4:c8:bd:07:ce:bc: 8c:0d:73:ef:d7:91:65:e5:48:62:ac:ad:3e:fe:3a: f2:55:2e:ec:83:22:cf:35:ef:1f:dd:fa:a7:ff:53: 5b:f0:c0:55:88:89:18:74:9e:29:b4:b0:ec:89:34: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4E:36:06:6A:21:84:08:47:86:CF:6A:51:79:48:01:28:8F:31:6D X509v3 Authority Key Identifier: keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:38:dc:7a:66:72:db:81:7d:c3:39:02:b0:17:51:8f:b3:85: 3c:af:0a:ea:db:f6:70:4f:9b:79:51:d8:f2:98:6e:e3:90:9a: 84:76:dc:d6:3e:f4:50:5f:64:27:5a:7f:fa:86:60:d1:6b:19: 5c:18:84:1f:30:7f:40:43:05:af:f7:07:0f:47:ef:11:73:fc: 9e:d9:c4:c8:ad:ed:00:b6:b7:08:c9:56:b5:13:ad:f5:36:0c: ba:f2:63:16:79:4f:ab:91:a1:52:38:d2:81:d4:66:7d:c8:06: b0:77:f0:8d:b3:84:6b:03:ed:bb:c1:61:fd:12:54:99:53:ec: 8d:45:90:87:1d:68:2d:ae:d0:38:13:9d:ae:75:ed:75:8e:81: 0d:c3:87:70:fb:86:e6:80:97:e0:a6:4b:97:68:dd:ae:5f:d5: 32:bf:8f:80:b7:92:06:6b:22:00:c9:3f:08:3b:01:5f:69:54: 8c:1d:01:24:08:7d:8d:97:53:48:05:86:71:ae:7c:4e:a6:6a: 98:23:4d:e3:82:ca:6c:3e:33:2a:6e:56:37:f3:2f:b5:c3:c5: 6d:8b:a5:70:7f:e7:dc:b6:fc:01:e8:74:56:9c:c9:52:e6:af: 71:e6:25:d4:b5:9e:f7:66:1c:79:ff:c4:cc:0f:83:1a:b1:14: cb:03:33:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+qjyCx67/IwWZDKZu5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw ZWEzYTAwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EyhiYTRlMzYwNjZhMjE4NDA4NDc4NmNmNmE1MTc5NDgwMTI4OGYzMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszAY4Zx2pSH5fCebkgtnItVTZ8xX KhD9Y06QaD6oriMs6MVk9Cta1tAXE3KlkhCZdPOEAkIpRbb6pmAYT6jX8MhSmflY nAO+hPyFCMe9FGOMw+OK+m9Qp1cXUPs8JBq5Er5dkA5Jg/XIvCaGtO0d/7Zy0HK3 vbge44s2lFUHIV0FoLeP7tYq582ME+OZzid4PGajcPdmi5nEaj1aQtXVWb+YZZ1b Nl5C5h9NA8uElIhrKj15BQLa9VGSWS83ND7o0bKiSR7mxHwDevHUyL0HzryMDXPv 15Fl5UhirK0+/jryVS7sgyLPNe8f3fqn/1Nb8MBViIkYdJ4ptLDsiTTZwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpONgZqIYQIR4bPalF5SAEojzFtMB8GA1UdIwQY MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt MDBjYTMxMjZiM2ZlLzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTjcemZy 24F9wzkCsBdRj7OFPK8K6tv2cE+beVHY8phu45CahHbc1j70UF9kJ1p/+oZg0WsZ XBiEHzB/QEMFr/cHD0fvEXP8ntnEyK3tALa3CMlWtROt9TYMuvJjFnlPq5GhUjjS gdRmfcgGsHfwjbOEawPtu8Fh/RJUmVPsjUWQhx1oLa7QOBOdrnXtdY6BDcOHcPuG 5oCX4KZLl2jdrl/VMr+PgLeSBmsiAMk/CDsBX2lUjB0BJAh9jZdTSAWGca58TqZq mCNN44LKbD4zKm5WN/MvtcPFbYulcH/n3Lb8Aeh0VpzJUuavceYl1LWe92Ycef/E zA+DGrEUywMzMA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:01 2025 by rpki-client