This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
File:                     Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json)
Hash identifier:          wM/yRM35z0jIFXrMZyxUaVzT1xXq8bUFnJU7/BJma7k=
Subject key identifier:   55:22:22:F3:AD:28:51:E7:2D:C8:DB:06:9E:7F:BE:48:61:11:8C:ED
Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Certificate issuer:       /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Certificate serial:       019BF6199EDB36DF7117278B920737E10E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
Manifest number:          0170
Signing time:             Sun 25 Jan 2026 17:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:32 +0000
Files and hashes:         1: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: WBLtE94iPxqUIuI5SQ0BLyrSQ7rNtUeASJRlSZe0ePQ=)
                          2: vSLbgxeH91r7M2JRpNUpQwdC5-I.roa (hash: AdNOFRCrmnc/Q9ZTTzxNg6TKfbh1MeWTSjQqXPic1XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:9e:db:36:df:71:17:27:8b:92:07:37:e1:0e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
        Validity
            Not Before: Jan 25 17:00:32 2026 GMT
            Not After : Jan 26 17:00:32 2026 GMT
        Subject: CN=552222f3ad2851e72dc8db069e7fbe4861118ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:f1:21:3e:ae:dc:e0:0c:54:75:d6:f7:5b:
                    15:47:17:06:b7:26:5d:37:fb:4c:7e:a1:4d:e3:44:
                    bc:af:20:23:af:50:cc:5e:3b:80:4d:87:8d:84:92:
                    cf:65:dd:c7:65:3d:f1:f0:3a:8b:84:7e:5f:cb:50:
                    f6:a5:65:7a:41:a3:a2:8d:95:05:90:71:f8:6d:29:
                    d7:1f:a6:f7:d9:db:fb:c8:15:fe:11:1a:bd:cd:6c:
                    b5:c3:66:43:28:d4:cc:95:16:38:87:52:26:f2:08:
                    ed:99:62:a0:a5:10:4c:d2:f3:57:e6:7d:59:f4:5e:
                    57:87:20:20:c5:ec:9d:1f:7b:18:7a:8b:ce:b6:e3:
                    7d:ef:27:f7:40:86:0f:c6:43:96:e7:b9:44:b8:c8:
                    04:4d:de:7d:d2:6d:e9:77:d3:e6:73:6f:1a:43:01:
                    d6:c5:a1:32:17:1d:a8:ea:f7:24:00:48:cc:2c:d8:
                    cc:d9:e9:34:4c:99:44:ee:7e:20:d1:96:3f:28:0e:
                    9a:7a:a8:7c:fb:0d:b8:00:99:92:bc:80:48:46:8a:
                    98:ad:78:7d:07:d2:81:9a:20:48:3b:de:76:63:c1:
                    a9:c3:6d:f6:a9:d3:cc:e1:8d:c0:74:a4:42:e3:99:
                    49:94:06:da:30:89:88:a8:6f:a4:3b:25:3d:a8:5b:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:22:22:F3:AD:28:51:E7:2D:C8:DB:06:9E:7F:BE:48:61:11:8C:ED
            X509v3 Authority Key Identifier:
                keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:02:81:9f:87:12:21:3c:8d:77:31:b4:be:6b:ae:ed:0f:
         f5:cb:9a:47:5e:b2:a1:3f:f6:f2:92:18:69:08:76:1b:70:a6:
         43:68:6f:62:50:d7:62:d4:b0:64:66:c4:fc:eb:ba:93:b6:a7:
         5b:2a:0b:ee:b5:96:3a:e2:77:6a:f0:b0:63:df:2c:43:6c:3c:
         18:bd:ef:62:46:f3:62:b9:de:3e:83:78:9e:11:9f:e9:67:00:
         22:41:a4:d9:ad:50:21:19:33:42:68:92:6f:b7:c5:e9:28:34:
         41:e6:90:86:7d:d8:42:ff:44:55:54:fd:19:21:52:c2:f7:9a:
         df:38:42:ac:69:e5:3c:11:f5:1c:58:2d:3e:ee:e0:7a:ea:b2:
         7f:f5:c0:d9:43:25:f7:b9:04:81:01:8f:32:b2:25:f8:96:51:
         08:bd:a1:14:46:1e:a0:e9:aa:49:78:c2:19:b1:5f:61:9e:3f:
         20:26:27:89:30:03:39:25:7a:fb:db:92:b6:54:9f:0d:74:75:
         07:db:ac:b0:a1:d6:28:5f:5f:66:e0:dc:4f:85:4e:06:82:fd:
         b2:a1:3f:95:26:2b:8b:05:f8:31:1b:c7:d8:b2:de:25:0f:5d:
         35:8f:f9:8f:14:c1:66:0d:fc:42:5c:e7:dd:e3:26:88:fe:f1:
         91:90:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:33 2026 by rpki-client