This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          Kltcrc4a4hqEhhlhFcyNfUon2wvLDfixAzuAHVcTth4=
Subject key identifier:   D1:CB:B6:F3:BF:D4:B0:05:20:13:58:7B:6F:FE:FD:1B:FA:12:C7:F2
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       019BF42BA01614DB8CD2BA04F8E91F274C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          1381
Signing time:             Sun 25 Jan 2026 08:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:58 +0000
Files and hashes:         1: 0WuIWlsLXC1_jGFUV8I4y2rLPS4.roa (hash: Bwks1+c8tVHKN3QINXV0cydMA5ipPHwpey8nJuZpvts=)
                          2: 86rwpp7NoSy9fECyDeEoFqFRMi4.roa (hash: rgEJeX45tszWO1cxr8s21ZwNAHTD1705NnbIc/RLjw0=)
                          3: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=)
                          4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: 8wumDoxRuHbucPDmTfr7oAyoG461ccC9yH0Yg19/1w8=)
                          5: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (hash: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4=)
                          6: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=)
                          7: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=)
                          8: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=)
                          9: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=)
                          10: SOgaP1DH2swEptFsywDuWJ897xw.roa (hash: LYHLoXM2uerJ8kW5uG4y1NPyevrNKVqu8gNCKOXwcIo=)
                          11: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=)
                          12: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=)
                          13: XkTjGnGGh3laYViJaWY0KDmoQI8.roa (hash: IMQlknsH0owKAXY35MWVuDQJyGr8qx9A7Y7oI0Y0kaI=)
                          14: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=)
                          15: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=)
                          16: ZJ7qyLf1uflJv0UE31f7DogP9kY.roa (hash: CHjJnDb5O+JB6HzDIm8z86a9jxNfN2t1h10rf75Njzw=)
                          17: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=)
                          18: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=)
                          19: hm_BsJzB0AR6SdenHtvz-Cegi4c.roa (hash: gM+Jf85Sje+vulSZO7OAAXwSQcvD0036g6WsBfGoNeo=)
                          20: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=)
                          21: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=)
                          22: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=)
                          23: rTo0UEeW4WSn2MjXsG-3uABsPfY.roa (hash: Imb7IO3Q8rHzQrWinxJegVt8mzKf4/246lxnQ0sa3no=)
                          24: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=)
                          25: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:a0:16:14:db:8c:d2:ba:04:f8:e9:1f:27:4c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Jan 25 08:00:58 2026 GMT
            Not After : Jan 26 08:00:58 2026 GMT
        Subject: CN=d1cbb6f3bfd4b0052013587b6ffefd1bfa12c7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:d5:7f:d7:85:d5:8f:03:5e:19:00:5e:de:
                    e6:63:72:ee:2b:39:02:aa:56:e3:76:00:5a:b0:1a:
                    82:41:23:e8:67:9e:29:fe:e4:c4:76:5e:a9:0f:d5:
                    1f:a1:11:2e:d7:3c:99:32:e3:97:11:3c:e1:8b:05:
                    9b:68:e1:27:49:61:b2:16:e4:0b:ea:40:7b:67:24:
                    8d:2f:ec:72:fe:aa:5a:b5:4b:36:09:06:eb:fb:eb:
                    22:7f:74:4d:db:14:9b:0e:ce:8d:85:53:b6:bd:dd:
                    46:58:a4:e3:ee:03:44:60:8c:f1:df:aa:65:8f:f5:
                    00:d7:50:83:22:2c:e6:b9:42:52:f4:90:73:72:dc:
                    35:09:18:48:ae:a6:35:9c:b9:72:35:1b:59:69:7e:
                    a9:44:4d:5e:94:9f:5e:52:67:e5:c8:c0:cd:7d:b9:
                    3a:31:7c:ab:d2:96:85:a1:8e:c3:33:2f:c5:a4:60:
                    2f:56:92:ce:b4:22:f2:0c:a9:60:fb:2a:83:db:63:
                    ae:5f:34:86:24:e6:a7:5c:34:7a:37:a3:c7:d8:17:
                    c8:ef:0c:16:1b:55:0b:a1:dd:5a:b9:25:7a:ac:bc:
                    e5:84:35:12:44:6f:fc:3d:77:92:0d:f8:eb:c6:31:
                    f2:e9:71:46:e0:74:8d:91:0e:42:d6:cb:f4:69:ad:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CB:B6:F3:BF:D4:B0:05:20:13:58:7B:6F:FE:FD:1B:FA:12:C7:F2
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:08:b2:61:5f:6c:97:29:fb:e6:8a:13:dc:a4:05:52:5a:01:
         11:14:5c:6d:b5:6a:61:18:12:54:16:53:3b:10:11:d6:e3:07:
         dc:fc:7a:45:2e:bf:c9:e1:bf:e8:e1:b0:03:81:54:1b:7d:7c:
         a7:46:4c:a6:8a:36:33:ca:94:31:6a:84:86:35:f0:9f:66:43:
         82:3f:7d:b7:1b:1d:99:b8:e3:71:17:3e:37:ed:20:9e:b6:c8:
         59:45:fa:e0:66:ea:50:e8:1b:98:af:4d:76:bb:f0:82:f7:26:
         86:ec:fc:8a:1f:a0:d5:6e:e1:c8:cb:27:67:eb:3b:30:db:c2:
         64:bc:cd:ed:7a:99:5b:68:18:8c:a1:d7:09:86:3a:e5:85:97:
         71:dd:26:c9:c6:0d:6f:4e:77:6d:98:3d:e4:31:69:24:65:01:
         cd:90:9c:95:ad:bb:f8:f5:d8:fe:60:c3:8c:11:4c:3a:24:9b:
         f9:53:55:86:34:02:e6:ab:eb:3d:0d:48:9c:7a:46:3a:ff:72:
         b9:67:d9:af:85:d3:c7:72:43:77:bf:7e:ed:0d:df:ea:eb:ea:
         df:2e:0d:e1:52:59:ef:62:de:67:90:fa:a9:51:ac:7e:c1:ef:
         db:20:97:cd:a3:7e:a8:b8:fb:52:8f:d8:bf:16:56:d6:87:d6:
         27:ff:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:43:49 2026 by rpki-client