This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier: Kltcrc4a4hqEhhlhFcyNfUon2wvLDfixAzuAHVcTth4=
Subject key identifier: D1:CB:B6:F3:BF:D4:B0:05:20:13:58:7B:6F:FE:FD:1B:FA:12:C7:F2
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019BF42BA01614DB8CD2BA04F8E91F274C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number: 1381
Signing time: Sun 25 Jan 2026 08:00:58 +0000
Manifest this update: Sun 25 Jan 2026 08:00:58 +0000
Manifest next update: Mon 26 Jan 2026 08:00:58 +0000
Files and hashes: 1: 0WuIWlsLXC1_jGFUV8I4y2rLPS4.roa (hash: Bwks1+c8tVHKN3QINXV0cydMA5ipPHwpey8nJuZpvts=)
2: 86rwpp7NoSy9fECyDeEoFqFRMi4.roa (hash: rgEJeX45tszWO1cxr8s21ZwNAHTD1705NnbIc/RLjw0=)
3: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=)
4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: 8wumDoxRuHbucPDmTfr7oAyoG461ccC9yH0Yg19/1w8=)
5: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (hash: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4=)
6: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=)
7: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=)
8: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=)
9: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=)
10: SOgaP1DH2swEptFsywDuWJ897xw.roa (hash: LYHLoXM2uerJ8kW5uG4y1NPyevrNKVqu8gNCKOXwcIo=)
11: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=)
12: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=)
13: XkTjGnGGh3laYViJaWY0KDmoQI8.roa (hash: IMQlknsH0owKAXY35MWVuDQJyGr8qx9A7Y7oI0Y0kaI=)
14: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=)
15: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=)
16: ZJ7qyLf1uflJv0UE31f7DogP9kY.roa (hash: CHjJnDb5O+JB6HzDIm8z86a9jxNfN2t1h10rf75Njzw=)
17: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=)
18: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=)
19: hm_BsJzB0AR6SdenHtvz-Cegi4c.roa (hash: gM+Jf85Sje+vulSZO7OAAXwSQcvD0036g6WsBfGoNeo=)
20: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=)
21: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=)
22: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=)
23: rTo0UEeW4WSn2MjXsG-3uABsPfY.roa (hash: Imb7IO3Q8rHzQrWinxJegVt8mzKf4/246lxnQ0sa3no=)
24: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=)
25: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2b:a0:16:14:db:8c:d2:ba:04:f8:e9:1f:27:4c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 25 08:00:58 2026 GMT
Not After : Jan 26 08:00:58 2026 GMT
Subject: CN=d1cbb6f3bfd4b0052013587b6ffefd1bfa12c7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:d5:7f:d7:85:d5:8f:03:5e:19:00:5e:de:
e6:63:72:ee:2b:39:02:aa:56:e3:76:00:5a:b0:1a:
82:41:23:e8:67:9e:29:fe:e4:c4:76:5e:a9:0f:d5:
1f:a1:11:2e:d7:3c:99:32:e3:97:11:3c:e1:8b:05:
9b:68:e1:27:49:61:b2:16:e4:0b:ea:40:7b:67:24:
8d:2f:ec:72:fe:aa:5a:b5:4b:36:09:06:eb:fb:eb:
22:7f:74:4d:db:14:9b:0e:ce:8d:85:53:b6:bd:dd:
46:58:a4:e3:ee:03:44:60:8c:f1:df:aa:65:8f:f5:
00:d7:50:83:22:2c:e6:b9:42:52:f4:90:73:72:dc:
35:09:18:48:ae:a6:35:9c:b9:72:35:1b:59:69:7e:
a9:44:4d:5e:94:9f:5e:52:67:e5:c8:c0:cd:7d:b9:
3a:31:7c:ab:d2:96:85:a1:8e:c3:33:2f:c5:a4:60:
2f:56:92:ce:b4:22:f2:0c:a9:60:fb:2a:83:db:63:
ae:5f:34:86:24:e6:a7:5c:34:7a:37:a3:c7:d8:17:
c8:ef:0c:16:1b:55:0b:a1:dd:5a:b9:25:7a:ac:bc:
e5:84:35:12:44:6f:fc:3d:77:92:0d:f8:eb:c6:31:
f2:e9:71:46:e0:74:8d:91:0e:42:d6:cb:f4:69:ad:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:B6:F3:BF:D4:B0:05:20:13:58:7B:6F:FE:FD:1B:FA:12:C7:F2
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:08:b2:61:5f:6c:97:29:fb:e6:8a:13:dc:a4:05:52:5a:01:
11:14:5c:6d:b5:6a:61:18:12:54:16:53:3b:10:11:d6:e3:07:
dc:fc:7a:45:2e:bf:c9:e1:bf:e8:e1:b0:03:81:54:1b:7d:7c:
a7:46:4c:a6:8a:36:33:ca:94:31:6a:84:86:35:f0:9f:66:43:
82:3f:7d:b7:1b:1d:99:b8:e3:71:17:3e:37:ed:20:9e:b6:c8:
59:45:fa:e0:66:ea:50:e8:1b:98:af:4d:76:bb:f0:82:f7:26:
86:ec:fc:8a:1f:a0:d5:6e:e1:c8:cb:27:67:eb:3b:30:db:c2:
64:bc:cd:ed:7a:99:5b:68:18:8c:a1:d7:09:86:3a:e5:85:97:
71:dd:26:c9:c6:0d:6f:4e:77:6d:98:3d:e4:31:69:24:65:01:
cd:90:9c:95:ad:bb:f8:f5:d8:fe:60:c3:8c:11:4c:3a:24:9b:
f9:53:55:86:34:02:e6:ab:eb:3d:0d:48:9c:7a:46:3a:ff:72:
b9:67:d9:af:85:d3:c7:72:43:77:bf:7e:ed:0d:df:ea:eb:ea:
df:2e:0d:e1:52:59:ef:62:de:67:90:fa:a9:51:ac:7e:c1:ef:
db:20:97:cd:a3:7e:a8:b8:fb:52:8f:d8:bf:16:56:d6:87:d6:
27:ff:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:43:49 2026 by rpki-client