This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: L1nDW7pRPbLa70nBx3Kf15VQdlOBV9k+WGn2ymgFcRc= Subject key identifier: 10:3C:28:38:33:F5:A0:DD:A6:A1:49:31:AE:AB:C2:F0:86:65:3B:4B Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019BD70C3F1547FBA214BF879BF3B64779E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 1371 Signing time: Mon 19 Jan 2026 16:17:42 +0000 Manifest this update: Mon 19 Jan 2026 16:17:42 +0000 Manifest next update: Tue 20 Jan 2026 16:17:42 +0000 Files and hashes: 1: 0WuIWlsLXC1_jGFUV8I4y2rLPS4.roa (hash: Bwks1+c8tVHKN3QINXV0cydMA5ipPHwpey8nJuZpvts=) 2: 86rwpp7NoSy9fECyDeEoFqFRMi4.roa (hash: rgEJeX45tszWO1cxr8s21ZwNAHTD1705NnbIc/RLjw0=) 3: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=) 4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: Zbl79Lkgsy9StA1kSwRVvlx+NlTHFbzT9qBUBUQiXBY=) 5: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (hash: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4=) 6: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=) 7: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=) 8: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=) 9: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=) 10: SOgaP1DH2swEptFsywDuWJ897xw.roa (hash: LYHLoXM2uerJ8kW5uG4y1NPyevrNKVqu8gNCKOXwcIo=) 11: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=) 12: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=) 13: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=) 14: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=) 15: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=) 16: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=) 17: hm_BsJzB0AR6SdenHtvz-Cegi4c.roa (hash: gM+Jf85Sje+vulSZO7OAAXwSQcvD0036g6WsBfGoNeo=) 18: lEm3CZA8GzHEJ1XIR7EtwzyDTh0.roa (hash: q+vH0LhfNaMkXkobnsFG/tv2APuqm3jMk9eI1hYHDkQ=) 19: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=) 20: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=) 21: qh8wS6EGxifxl4T4JNg91aDfgC4.roa (hash: 4r1kaM/mNX9SM0VeY7w/rEQgEQ6/0WhXucowQgUWOks=) 22: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=) 23: rTo0UEeW4WSn2MjXsG-3uABsPfY.roa (hash: Imb7IO3Q8rHzQrWinxJegVt8mzKf4/246lxnQ0sa3no=) 24: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=) 25: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:0c:3f:15:47:fb:a2:14:bf:87:9b:f3:b6:47:79:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 19 16:17:42 2026 GMT Not After : Jan 20 16:17:42 2026 GMT Subject: CN=103c283833f5a0dda6a14931aeabc2f086653b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:3b:af:67:67:12:c5:8d:0d:a2:df:4d:ac: 6b:5a:c8:04:13:da:b9:03:33:f9:79:76:a2:b6:54: 3d:8f:93:83:41:76:45:8d:fa:13:1c:2c:1d:fe:0a: cd:ac:74:35:2b:26:61:35:40:bc:4a:6c:e1:cc:69: 52:5e:01:d2:4f:7d:09:27:56:a8:75:de:20:54:62: 97:b6:79:99:9c:b5:97:3c:7b:ac:dd:fb:b7:72:b4: 4b:32:1b:4d:43:9c:db:7a:43:7e:49:5f:f9:48:8b: d4:7e:85:a2:92:ed:f5:bd:e5:16:5c:31:12:c6:7e: 59:6a:87:fb:86:5f:ae:84:eb:71:75:fd:3f:ad:25: 17:3c:44:6d:a8:54:89:d8:c0:e8:de:a6:02:92:e3: dc:c9:2c:25:f5:fc:06:52:41:65:d6:10:4b:ea:05: 1a:02:3e:44:3a:d0:e2:dc:60:d2:ba:76:46:3b:0a: 5a:7c:f5:da:03:a1:86:6b:f7:60:39:8b:b3:0a:ef: 09:d6:c9:81:87:d0:94:6d:d3:ab:b7:e4:22:b9:b6: 27:d1:e6:13:1d:07:cd:45:85:59:ae:d3:e5:ae:f8: 02:be:f5:35:38:0a:2b:26:db:16:c9:0a:d9:b8:07: b8:1f:e8:b0:c8:3d:35:89:9a:07:16:6c:d0:0a:91: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:28:38:33:F5:A0:DD:A6:A1:49:31:AE:AB:C2:F0:86:65:3B:4B X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:77:58:fb:fd:8b:ae:19:82:5a:36:39:8a:6a:10:36:df:ec: 25:30:e8:e9:70:05:43:c2:59:1a:76:22:ee:a4:fa:28:05:6f: f6:3b:7d:83:7e:41:17:8a:c3:34:48:39:10:98:b7:77:f7:57: bc:56:ec:ae:17:0b:cc:63:8c:90:fd:b7:d7:4e:e3:1d:8c:e2: 62:53:af:43:33:cf:a3:eb:cd:62:f6:30:26:63:da:dc:0c:0b: 3e:db:8a:18:16:4f:f2:e4:ff:52:9a:89:84:7b:f2:be:8c:d6: 09:ff:2c:67:08:c4:7f:a8:25:35:87:b7:d2:55:18:c9:90:f7: 7d:97:1e:17:c5:7e:8f:a3:8b:91:93:ed:e0:88:cf:a9:05:cf: 32:58:b0:37:7c:23:c2:5d:ec:9f:7f:31:77:5e:1b:c9:c1:64: 1b:8e:b3:a0:bc:e3:7b:90:88:8e:a9:fc:f0:b9:9a:33:64:8c: db:18:34:d4:92:7e:d0:20:11:e7:73:69:a1:db:fc:46:f2:97: e5:e7:83:81:f7:a6:48:f3:f8:71:0b:61:bd:ea:9a:0d:29:5b: 2d:f1:10:1a:fe:79:3d:b0:0b:dc:56:17:4c:1e:7c:22:ae:3b: 34:5f:c2:96:df:ca:07:62:bd:8e:34:19:5d:0b:63:38:30:a9: af:0a:78:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXDD8VR/uiFL+Hm/O2R3nnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTE5MTYxNzQyWhcNMjYwMTIwMTYxNzQyWjAzMTEwLwYDVQQD EygxMDNjMjgzODMzZjVhMGRkYTZhMTQ5MzFhZWFiYzJmMDg2NjUzYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIU7r2dnEsWNDaLfTaxrWsgEE9q5 AzP5eXaitlQ9j5ODQXZFjfoTHCwd/grNrHQ1KyZhNUC8SmzhzGlSXgHST30JJ1ao dd4gVGKXtnmZnLWXPHus3fu3crRLMhtNQ5zbekN+SV/5SIvUfoWiku31veUWXDES xn5Zaof7hl+uhOtxdf0/rSUXPERtqFSJ2MDo3qYCkuPcySwl9fwGUkFl1hBL6gUa Aj5EOtDi3GDSunZGOwpafPXaA6GGa/dgOYuzCu8J1smBh9CUbdOrt+QiubYn0eYT HQfNRYVZrtPlrvgCvvU1OAorJtsWyQrZuAe4H+iwyD01iZoHFmzQCpHVeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA8KDgz9aDdpqFJMa6rwvCGZTtLMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXdY+/2L rhmCWjY5imoQNt/sJTDo6XAFQ8JZGnYi7qT6KAVv9jt9g35BF4rDNEg5EJi3d/dX vFbsrhcLzGOMkP23107jHYziYlOvQzPPo+vNYvYwJmPa3AwLPtuKGBZP8uT/UpqJ hHvyvozWCf8sZwjEf6glNYe30lUYyZD3fZceF8V+j6OLkZPt4IjPqQXPMliwN3wj wl3sn38xd14bycFkG46zoLzje5CIjqn88LmaM2SM2xg01JJ+0CAR53Npodv8RvKX 5eeDgfemSPP4cQthveqaDSlbLfEQGv55PbAL3FYXTB58Iq47NF/Clt/KB2K9jjQZ XQtjODCprwp4Kg== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:53 2026 by rpki-client