This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: WRiPLz97v6RmKMRwSVqonuBmAjw6FxaopAwpVZO7teY= Subject key identifier: 93:8C:7E:5C:E8:B2:05:91:79:CB:94:98:73:4E:DF:D9:6E:71:C6:4D Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019AED517F40B56C36A868FA80E02E5D6C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 12F0 Signing time: Fri 05 Dec 2025 07:02:12 +0000 Manifest this update: Fri 05 Dec 2025 07:02:12 +0000 Manifest next update: Sat 06 Dec 2025 07:02:12 +0000 Files and hashes: 1: 1-hVanR_FPCjv_aTLCNO0RAiVGS0.roa (hash: KproQy06PBqXsE6K/0QrxPjb1wQmcYSTrX8ZPG1y0gw=) 2: 4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa (hash: uWN9nsMDOn0xfjEWkhhvUgtWX2KzO1qJYjAx6fiUPH0=) 3: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 4: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 5: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: x3Xw7jdv9/wl5jIykXyxpWLd35CygGouvGECdNtOdsw=) 6: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 7: Pk-166nBqp2AnHZRjt3naSPZm_A.roa (hash: vCXEEXcMS38HEhXquUN+5uxP1rLIYunBHbDrNhQYfIs=) 8: QKNvv00ZlqMXMRIZptoslASj0bE.roa (hash: GCNTvlpScKsutE7ubWhols6pMlrIypRQhNYXcPhW2f8=) 9: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 10: _mL7hcF4ZPvPPXLAtzSeabjQS34.roa (hash: DBnna8FaIwhZ3GWldzYJcweUnTCSXyYKWo3RB/UTPD4=) 11: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 12: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 13: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=) 14: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=) 15: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 16: i61yJhWlIpiU3IaDDJOUzTLy3CI.roa (hash: 1EGI7WgAJYqPotcGFTR+YSEC2Cd3Jis75UUmneXHYjQ=) 17: iQmz1GXtR8FJneQ1KYDioUsH4MI.roa (hash: fMw497lccTPDr8T36zAVKc2Ro0KWYpfFsYM8v+oLdmY=) 18: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 19: nqxuwNOWEBcBg_suquuqHCXgzIk.roa (hash: l41FOHuACDOAavEW4jpVIC/+gjSMokyDWa6Y9bS/LHQ=) 20: uXPkwSni1Ie_bjRePZgMcx89NEs.roa (hash: qmhqJfrU+3wdywUUqiHqXJS9YWnmrs1L37BGEb6ro7Q=) 21: wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa (hash: 5N2lY2rir++DNkU0rNQwk4o3De67eUBe63z0gVaBPpI=) 22: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:51:7f:40:b5:6c:36:a8:68:fa:80:e0:2e:5d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Dec 5 07:02:12 2025 GMT Not After : Dec 6 07:02:12 2025 GMT Subject: CN=938c7e5ce8b2059179cb9498734edfd96e71c64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:99:ed:95:71:dc:93:76:57:74:74:a1:50: 21:62:c0:f0:20:94:ac:bc:fc:98:9e:18:cf:a9:9e: 6f:9a:ea:40:d8:36:e3:b7:79:f2:26:b2:2b:c3:b3: 4a:19:29:2e:1c:0c:9c:19:77:ef:ee:07:2b:a6:5c: 10:f3:0d:c1:54:38:59:f1:ce:1b:8f:9e:2f:68:53: c4:be:1c:1d:88:48:f2:55:fa:c3:a1:ac:4b:b9:ef: 66:79:00:22:b7:1b:d6:5d:8b:d9:b8:ca:22:28:59: 6b:1d:d8:0c:58:7b:25:97:f4:4c:ea:a6:c0:3d:04: b4:68:4e:bf:59:4d:22:a4:a8:64:7d:6d:62:7f:f1: cd:f9:7c:bf:77:8c:f2:b5:87:3a:b8:ca:c5:a5:79: 4c:11:d7:7b:74:90:c9:be:5c:48:02:4d:c9:e2:2c: 12:1e:46:e7:e4:9c:02:33:0b:42:e0:82:80:73:57: fe:a5:ae:7a:07:55:aa:52:1a:be:63:08:05:81:ac: 09:6c:df:c7:bc:ac:e7:10:1d:92:2f:19:8b:3e:5b: 50:f9:38:88:38:b0:86:aa:3d:9c:ca:31:35:4c:dd: 3f:d6:f4:b3:04:37:20:27:6e:94:fc:f6:8d:77:b7: a8:19:4d:73:65:0d:bc:cb:b3:11:80:07:1a:ea:54: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8C:7E:5C:E8:B2:05:91:79:CB:94:98:73:4E:DF:D9:6E:71:C6:4D X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fd:35:71:2a:e1:51:7d:c2:a1:e1:21:bf:73:9c:16:73:04: 9a:0e:e1:91:1c:e0:9a:d0:a9:bd:6f:8c:50:19:10:2b:8a:b7: 22:28:ea:cf:23:b3:31:cd:ca:b4:1e:15:6a:3a:98:50:84:2f: 82:12:3d:d3:9d:86:83:d4:f1:66:8a:8c:c7:40:54:f4:b0:33: 00:47:fc:f2:69:dc:d3:19:a7:e0:82:e0:f0:53:a6:d1:f8:bc: 94:b0:c4:16:0b:ac:6e:bb:fa:f8:a0:6b:69:5e:b4:13:10:81: ce:28:6b:47:63:e4:79:18:71:b7:50:0a:c1:e7:50:38:f4:81: db:be:45:4b:e9:4c:06:c1:80:82:5a:1e:48:9a:f3:1b:9f:2c: 4a:f8:d4:58:37:c4:36:b0:06:af:95:05:cb:18:7e:7c:45:8b: 05:89:81:67:4c:e5:6d:ee:10:2b:6b:db:49:3e:26:fb:01:75: 81:4a:27:a0:6f:39:81:f6:65:8b:31:23:59:23:2d:f0:f9:96: b9:a1:fd:ca:e3:95:22:c3:62:4e:b1:08:18:11:b6:38:d5:84: fe:70:c6:a3:6f:ad:21:e4:a0:17:a5:3d:d8:20:89:6e:f9:2e: f5:28:81:18:92:87:b3:a9:b7:7f:81:9c:2c:5d:1b:fe:a7:ec: e1:cf:8e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrtUX9AtWw2qGj6gOAuXWyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMjA1MDcwMjEyWhcNMjUxMjA2MDcwMjEyWjAzMTEwLwYDVQQD Eyg5MzhjN2U1Y2U4YjIwNTkxNzljYjk0OTg3MzRlZGZkOTZlNzFjNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUOZ7ZVx3JN2V3R0oVAhYsDwIJSs vPyYnhjPqZ5vmupA2Dbjt3nyJrIrw7NKGSkuHAycGXfv7gcrplwQ8w3BVDhZ8c4b j54vaFPEvhwdiEjyVfrDoaxLue9meQAitxvWXYvZuMoiKFlrHdgMWHsll/RM6qbA PQS0aE6/WU0ipKhkfW1if/HN+Xy/d4zytYc6uMrFpXlMEdd7dJDJvlxIAk3J4iwS Hkbn5JwCMwtC4IKAc1f+pa56B1WqUhq+YwgFgawJbN/HvKznEB2SLxmLPltQ+TiI OLCGqj2cyjE1TN0/1vSzBDcgJ26U/PaNd7eoGU1zZQ28y7MRgAca6lSnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOMflzosgWRecuUmHNO39luccZNMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANP01cSrh UX3CoeEhv3OcFnMEmg7hkRzgmtCpvW+MUBkQK4q3IijqzyOzMc3KtB4VajqYUIQv ghI9052Gg9TxZoqMx0BU9LAzAEf88mnc0xmn4ILg8FOm0fi8lLDEFgusbrv6+KBr aV60ExCBzihrR2PkeRhxt1AKwedQOPSB275FS+lMBsGAgloeSJrzG58sSvjUWDfE NrAGr5UFyxh+fEWLBYmBZ0zlbe4QK2vbST4m+wF1gUonoG85gfZlizEjWSMt8PmW uaH9yuOVIsNiTrEIGBG2ONWE/nDGo2+tIeSgF6U92CCJbvku9SiBGJKHs6m3f4Gc LF0b/qfs4c+O7w== -----END CERTIFICATE-----Generated at Fri Dec 5 16:54:21 2025 by rpki-client