This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: /vhmH8Anr+kdurBikWX4cMFSe3v233mjTwa51cLhXmU= Subject key identifier: AA:23:DC:76:4E:6D:0A:23:94:49:D0:A6:BB:C0:07:E9:28:E5:DA:77 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019BDFFFED8131A149E35607BE50C4EAFD22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0FEC Signing time: Wed 21 Jan 2026 10:00:50 +0000 Manifest this update: Wed 21 Jan 2026 10:00:50 +0000 Manifest next update: Thu 22 Jan 2026 10:00:50 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: 3pqwhjOblZsMvITxRXMPwhnaoGtOFfqm16utRnhIIr8=) 3: IgX0yg7OLyE1FEmaOzvAFNwec_c.roa (hash: sizb6eBcughEhem8l1JDf+pWnplrlybiAHwSKXoLMaY=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: cyPQOcdzS_4SfdQdVz0CqSZMdww.roa (hash: 0WNUn7RLirYyARkbquAfInmWqcScy7Jj0jC1hD9xaio=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:ff:ed:81:31:a1:49:e3:56:07:be:50:c4:ea:fd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 21 10:00:50 2026 GMT Not After : Jan 22 10:00:50 2026 GMT Subject: CN=aa23dc764e6d0a239449d0a6bbc007e928e5da77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:60:4c:c0:95:e0:90:f6:0d:79:fc:2c:d7: 20:e7:2b:db:c5:b8:e6:47:e5:0c:b9:29:f2:b1:ba: f1:7a:3b:0c:0e:1a:d8:dd:81:56:5b:27:7d:5b:ad: 1f:45:c6:c8:8f:06:69:40:79:24:c1:ff:3b:81:9b: 9f:55:a9:83:c0:9d:63:05:ea:c0:ce:41:e1:55:d8: 8b:51:39:ba:ad:6c:99:f6:2e:72:8c:2a:c1:c0:87: a8:2a:1c:de:d5:60:81:b5:d8:8b:6d:c9:5e:e8:d8: c0:cc:db:df:54:f2:3b:ad:ef:00:5b:c8:c2:02:f5: 40:94:3f:ac:93:2c:e2:b3:9f:0e:5e:93:9c:00:c7: 25:9d:01:29:60:18:ea:c4:8f:58:3a:e0:95:7d:e2: cb:50:d3:12:4e:52:d5:8d:69:19:04:72:03:5b:0c: 90:32:cb:fb:f5:7b:16:12:0b:b6:9f:38:e9:9d:33: 38:cf:53:10:75:bc:a0:65:49:f6:c1:92:d7:3e:7d: 9e:d3:ea:8d:4a:d4:c1:2e:f1:9d:fd:db:10:f4:ea: 58:1c:fa:e9:38:91:24:63:8e:61:f2:ef:78:d4:dd: 82:67:c7:ba:87:5a:22:59:34:f1:3c:e1:9e:f5:54: 45:3c:00:a4:ab:5a:df:61:ca:ef:9c:0e:bd:57:40: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:23:DC:76:4E:6D:0A:23:94:49:D0:A6:BB:C0:07:E9:28:E5:DA:77 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b6:96:42:e7:fc:63:13:e4:d9:72:7d:4d:d1:35:92:e3:6b: 7e:3c:11:9a:96:bf:a5:34:aa:45:83:64:22:cf:7b:94:46:18: f5:f1:06:e7:81:4a:a8:6b:23:08:54:9f:40:a7:e7:a5:af:69: e2:c1:93:7f:24:a9:9b:db:bb:e1:7c:34:dd:d0:7a:cb:8b:63: 08:db:29:47:4b:5d:24:0c:48:b0:72:bd:6a:81:9c:f2:df:62: ca:11:88:28:97:80:58:eb:26:b8:3a:de:2a:70:e4:b4:70:60: 8b:27:dc:c5:4b:42:92:8c:8f:85:eb:e9:53:62:7e:eb:15:1b: ed:2d:0b:c0:f2:f5:ec:1f:0d:38:d9:5a:8e:ee:e1:1f:8b:f2: 65:7f:fa:6f:6a:d5:dc:d0:20:00:fe:89:06:fa:10:82:29:f5: ef:6a:99:a2:c6:9f:04:a3:8b:99:ab:07:26:e6:66:e5:6b:65: b3:99:b7:f1:84:0a:ac:87:5f:f4:48:05:57:c0:77:59:21:53: 9c:03:61:5a:5c:77:6c:96:1a:9f:3d:a9:00:37:00:2c:0f:14: 1b:9a:9a:1e:ab:43:a4:ae:1b:85:2f:88:70:be:59:e5:0e:1b: 47:7f:e1:91:c6:27:17:3f:da:a1:3b:47:a7:8c:b2:34:c0:e0: fa:74:42:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvf/+2BMaFJ41YHvlDE6v0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTIxMTAwMDUwWhcNMjYwMTIyMTAwMDUwWjAzMTEwLwYDVQQD EyhhYTIzZGM3NjRlNmQwYTIzOTQ0OWQwYTZiYmMwMDdlOTI4ZTVkYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr1gTMCV4JD2DXn8LNcg5yvbxbjm R+UMuSnysbrxejsMDhrY3YFWWyd9W60fRcbIjwZpQHkkwf87gZufVamDwJ1jBerA zkHhVdiLUTm6rWyZ9i5yjCrBwIeoKhze1WCBtdiLbcle6NjAzNvfVPI7re8AW8jC AvVAlD+skyzis58OXpOcAMclnQEpYBjqxI9YOuCVfeLLUNMSTlLVjWkZBHIDWwyQ Msv79XsWEgu2nzjpnTM4z1MQdbygZUn2wZLXPn2e0+qNStTBLvGd/dsQ9OpYHPrp OJEkY45h8u941N2CZ8e6h1oiWTTxPOGe9VRFPACkq1rfYcrvnA69V0AASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoj3HZObQojlEnQprvAB+ko5dp3MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbaWQuf8 YxPk2XJ9TdE1kuNrfjwRmpa/pTSqRYNkIs97lEYY9fEG54FKqGsjCFSfQKfnpa9p 4sGTfySpm9u74Xw03dB6y4tjCNspR0tdJAxIsHK9aoGc8t9iyhGIKJeAWOsmuDre KnDktHBgiyfcxUtCkoyPhevpU2J+6xUb7S0LwPL17B8NONlaju7hH4vyZX/6b2rV 3NAgAP6JBvoQgin172qZosafBKOLmasHJuZm5Wtls5m38YQKrIdf9EgFV8B3WSFT nANhWlx3bJYanz2pADcALA8UG5qaHqtDpK4bhS+IcL5Z5Q4bR3/hkcYnFz/aoTtH p4yyNMDg+nRCfA== -----END CERTIFICATE-----Generated at Wed Jan 21 18:27:00 2026 by rpki-client