This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: lxSWZZLfizdL2TV9hiemDrq1fY1oaqZxFBzA9O3SCi8= Subject key identifier: EF:BE:58:82:A4:48:6C:2A:86:8C:B8:2A:E7:CF:07:33:59:3F:D0:3A Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B3A21B801E10C213CA998B7059B443910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 131A Signing time: Sat 20 Dec 2025 05:00:46 +0000 Manifest this update: Sat 20 Dec 2025 05:00:46 +0000 Manifest next update: Sun 21 Dec 2025 05:00:46 +0000 Files and hashes: 1: 4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa (hash: uWN9nsMDOn0xfjEWkhhvUgtWX2KzO1qJYjAx6fiUPH0=) 2: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 3: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: evrVxSIMoZN9pYToZww6J6whFTFpTpb+ryTkC4qnHuk=) 5: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 6: N2aA-jTgbo5bK-Xpb488F349NpA.roa (hash: 8Y0PVTVuI1bylVWoDlTQsuk+kCy3r9vqPS7woOdQ1TQ=) 7: Pk-166nBqp2AnHZRjt3naSPZm_A.roa (hash: vCXEEXcMS38HEhXquUN+5uxP1rLIYunBHbDrNhQYfIs=) 8: QKNvv00ZlqMXMRIZptoslASj0bE.roa (hash: GCNTvlpScKsutE7ubWhols6pMlrIypRQhNYXcPhW2f8=) 9: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 10: _mL7hcF4ZPvPPXLAtzSeabjQS34.roa (hash: DBnna8FaIwhZ3GWldzYJcweUnTCSXyYKWo3RB/UTPD4=) 11: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 12: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 13: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=) 14: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=) 15: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 16: i61yJhWlIpiU3IaDDJOUzTLy3CI.roa (hash: 1EGI7WgAJYqPotcGFTR+YSEC2Cd3Jis75UUmneXHYjQ=) 17: iQmz1GXtR8FJneQ1KYDioUsH4MI.roa (hash: fMw497lccTPDr8T36zAVKc2Ro0KWYpfFsYM8v+oLdmY=) 18: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 19: rH4zTDq_DbrOTV-Cv150Encg0_c.roa (hash: sOzYYtedumoF+uawmC9v+69bsDR2EMzC3U7NNPNVOhk=) 20: uXPkwSni1Ie_bjRePZgMcx89NEs.roa (hash: qmhqJfrU+3wdywUUqiHqXJS9YWnmrs1L37BGEb6ro7Q=) 21: vouAuTxkDs7Fx9PeGiuU9eeofwI.roa (hash: AHJFQQsfjcStfOSuO7/Q/wPGNDVHMGuj2k97GnlSGLA=) 22: wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa (hash: 5N2lY2rir++DNkU0rNQwk4o3De67eUBe63z0gVaBPpI=) 23: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:b8:01:e1:0c:21:3c:a9:98:b7:05:9b:44:39:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Dec 20 05:00:46 2025 GMT Not After : Dec 21 05:00:46 2025 GMT Subject: CN=efbe5882a4486c2a868cb82ae7cf0733593fd03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:e9:3b:49:1c:93:91:25:2c:b2:15:ad:23: 8d:26:a3:5b:56:06:64:23:fe:6b:86:4c:24:ee:ad: 85:b4:db:6a:44:f7:4d:47:1e:94:c9:8f:e0:bb:0d: e1:59:d1:2a:46:c5:9c:e0:16:1d:3e:2d:fb:d7:71: 3a:be:d9:4b:43:e9:91:2d:9b:49:a2:c1:7c:e8:dc: cc:52:3f:4b:65:7e:ff:0c:ff:c4:96:8c:be:e6:b6: 83:0f:ca:90:c4:09:8d:dc:58:43:bc:6f:18:96:6b: 09:fe:ba:12:4e:56:03:2d:2c:ea:d9:6d:a1:a1:f3: c9:50:38:f3:52:60:63:9b:ac:64:ed:91:b5:1c:9a: 15:a9:90:41:f9:fd:e0:b4:5e:59:07:a6:04:bb:d7: 4f:9c:7f:74:01:a4:8b:12:cf:31:3d:2c:4f:39:64: 60:af:52:1f:e0:86:47:51:89:39:60:23:1f:46:4a: 24:9a:f8:1e:32:6b:51:da:81:35:ba:6a:d3:a6:f1: a7:e7:c4:3e:c7:bc:d8:4e:33:18:0a:a8:82:ad:3d: 2a:30:fd:62:9f:4c:bd:b8:6e:7b:2c:7d:d6:10:f5: 8f:4f:27:b3:38:ab:a3:20:77:ac:5a:8c:77:ed:53: 50:a7:ae:73:9d:a4:9c:40:22:cb:41:7f:31:a7:28: 89:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BE:58:82:A4:48:6C:2A:86:8C:B8:2A:E7:CF:07:33:59:3F:D0:3A X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4e:3b:99:ab:aa:1a:d5:16:48:8c:0c:88:de:b3:b4:86:f4: f1:43:99:74:b0:d1:ca:34:b5:33:eb:d8:9b:ca:43:c6:56:28: 94:bb:72:8f:cd:30:79:c2:0c:80:eb:1d:ec:2a:10:06:d2:eb: 2a:e0:4a:3d:4b:2b:a5:22:37:40:28:0e:40:5f:55:f8:d8:74: 6f:3b:13:a9:df:df:5d:cc:41:7e:b5:34:07:d2:ea:26:27:5c: 2c:09:46:64:c5:20:7d:ec:49:64:41:92:5c:f4:8c:3d:b7:bf: f3:6b:6a:ea:79:18:66:23:9e:21:ab:b3:72:ff:2c:c8:86:f9: 71:73:1d:63:ad:0f:33:59:c3:2f:89:a4:0b:90:f0:97:46:67: 1d:39:d6:39:af:14:a3:8d:80:44:44:e3:93:35:44:bd:79:08: da:72:de:90:89:14:70:d5:16:96:0e:11:b3:74:ec:15:ea:6b: 1a:20:02:65:80:21:73:b1:64:e4:2a:c6:cd:18:64:71:13:e2: 29:5b:24:cd:59:ca:6a:16:b2:c9:06:a3:64:03:70:51:87:c4: 0b:df:98:1d:38:1f:e0:89:78:78:88:00:cb:b2:e2:5d:26:52: 6e:fe:db:25:24:7c:c5:ea:78:62:a7:ea:f8:37:70:d3:ef:75: 19:fc:0f:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IbgB4QwhPKmYtwWbRDkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMjIwMDUwMDQ2WhcNMjUxMjIxMDUwMDQ2WjAzMTEwLwYDVQQD EyhlZmJlNTg4MmE0NDg2YzJhODY4Y2I4MmFlN2NmMDczMzU5M2ZkMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyHpO0kck5ElLLIVrSONJqNbVgZk I/5rhkwk7q2FtNtqRPdNRx6UyY/guw3hWdEqRsWc4BYdPi3713E6vtlLQ+mRLZtJ osF86NzMUj9LZX7/DP/Eloy+5raDD8qQxAmN3FhDvG8YlmsJ/roSTlYDLSzq2W2h ofPJUDjzUmBjm6xk7ZG1HJoVqZBB+f3gtF5ZB6YEu9dPnH90AaSLEs8xPSxPOWRg r1If4IZHUYk5YCMfRkokmvgeMmtR2oE1umrTpvGn58Q+x7zYTjMYCqiCrT0qMP1i n0y9uG57LH3WEPWPTyezOKujIHesWox37VNQp65znaScQCLLQX8xpyiJtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO++WIKkSGwqhoy4KufPBzNZP9A6MB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD047mauq GtUWSIwMiN6ztIb08UOZdLDRyjS1M+vYm8pDxlYolLtyj80wecIMgOsd7CoQBtLr KuBKPUsrpSI3QCgOQF9V+Nh0bzsTqd/fXcxBfrU0B9LqJidcLAlGZMUgfexJZEGS XPSMPbe/82tq6nkYZiOeIauzcv8syIb5cXMdY60PM1nDL4mkC5Dwl0ZnHTnWOa8U o42ARETjkzVEvXkI2nLekIkUcNUWlg4Rs3TsFeprGiACZYAhc7Fk5CrGzRhkcRPi KVskzVnKahayyQajZANwUYfEC9+YHTgf4Il4eIgAy7LiXSZSbv7bJSR8xep4Yqfq +Ddw0+91GfwPDg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:39:08 2025 by rpki-client