This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft File: Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json) Hash identifier: 1gRfVVo+AJLbniN9mwBRaE3VoUHAuGKL8kKAAXlCHdQ= Subject key identifier: 0C:2A:F7:A7:E5:65:DA:04:A7:52:6C:C5:28:8D:04:A5:85:BD:E3:6D Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C Certificate issuer: /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c Certificate serial: 019B37C5FA36808408C4D16082BD08419702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft Manifest number: 010D Signing time: Fri 19 Dec 2025 18:01:20 +0000 Manifest this update: Fri 19 Dec 2025 18:01:20 +0000 Manifest next update: Sat 20 Dec 2025 18:01:20 +0000 Files and hashes: 1: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: 2mRNwrmevkO7Jv/ecEtgPWjXhRbcQIYV67kI1hawk1c=) 2: GYr8yP9MN4MbpWp4jixKRApgKMs.roa (hash: pl+4FEfHYxinnMm48C/F+Vfnw1jWSSXa0/xCmlg6X+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:fa:36:80:84:08:c4:d1:60:82:bd:08:41:97:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c Validity Not Before: Dec 19 18:01:20 2025 GMT Not After : Dec 20 18:01:20 2025 GMT Subject: CN=0c2af7a7e565da04a7526cc5288d04a585bde36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:b0:a7:94:8d:7b:1d:09:76:a1:d1:17:82: 2e:7d:a5:31:46:9c:44:7c:7f:bc:2b:55:e3:f7:d8: fd:29:5e:10:7b:65:e4:70:b7:72:71:27:7c:de:df: de:15:c5:e1:c3:9d:f1:0c:56:56:bc:5c:93:55:66: 03:7a:e3:7d:79:a2:03:7b:68:e5:73:0e:d8:72:25: f6:b9:2b:0f:58:ad:21:1a:76:08:09:e2:eb:84:33: 0d:d2:20:ec:01:fe:8d:31:be:d0:8d:2e:84:14:30: 3c:21:89:ce:16:4b:4c:3e:18:65:31:f2:48:39:89: 08:60:78:aa:1d:ad:06:31:19:1c:21:2a:e2:35:12: 31:50:b2:15:9e:c6:71:9d:9d:28:7a:9b:77:96:16: 2b:2b:c0:61:83:dc:a1:fd:ad:23:a6:89:27:08:54: 17:82:50:69:1a:69:46:85:e2:52:a4:d5:ba:08:02: 48:9c:41:af:b5:56:58:a8:3b:e9:7a:5a:f1:1a:57: d9:65:9f:79:f9:dc:84:2d:1a:cd:e5:2d:d4:9a:97: c0:a2:86:55:46:1a:3f:3f:d6:97:2c:48:8a:30:ee: 14:77:97:16:ac:14:1c:53:7d:8f:98:54:ca:09:35: da:17:bc:89:cd:b3:52:bb:4e:94:39:c9:61:57:20: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2A:F7:A7:E5:65:DA:04:A7:52:6C:C5:28:8D:04:A5:85:BD:E3:6D X509v3 Authority Key Identifier: keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6c:47:31:fa:ec:a4:42:c4:45:ae:58:38:ad:d1:98:ba:33: 94:5b:3d:b5:63:2c:51:45:da:8c:5a:cd:fe:a5:d2:ef:69:b2: 85:a0:c6:67:ce:bd:3d:f7:f7:af:ce:30:7e:75:ad:62:68:e5: 30:f4:50:9c:93:6d:ea:f0:06:53:8b:a2:4e:b9:bb:95:5f:57: ee:14:8b:c8:f0:0e:74:4b:62:32:32:3d:5a:26:ca:21:8f:96: 4e:f3:02:c3:c4:12:65:b0:e7:3d:f7:5b:8d:b5:86:eb:8a:be: d5:ac:66:30:9b:b7:29:51:50:33:58:db:f4:93:b8:f7:80:67: 68:d4:ba:0f:b4:fe:7a:27:06:bd:ec:d4:bc:f5:14:80:85:59: 02:2f:79:d7:18:f8:f7:55:c0:91:7b:c6:50:51:11:87:2f:dc: 45:5f:ad:4c:7d:0d:76:fe:97:3e:80:b4:01:ee:6e:74:78:61: 59:1d:b2:75:c7:98:9e:3a:3e:28:94:ae:f6:3c:e1:b9:8f:f5: b0:1a:bb:66:ec:a3:b8:0f:b6:a2:e2:49:ad:74:6b:e9:23:e1: 72:1f:a7:43:62:46:3c:b4:12:80:0c:a0:e3:9e:d4:ca:8b:b3: 76:39:5d:6e:10:ad:32:61:70:85:8c:ce:e8:2d:06:de:4b:2d: 8a:29:f0:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xfo2gIQIxNFggr0IQZcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmOWY3OGMyY2JiYzVmYTA4YjliODlmMGExMWQyYjBi YTQ3M2MwHhcNMjUxMjE5MTgwMTIwWhcNMjUxMjIwMTgwMTIwWjAzMTEwLwYDVQQD EygwYzJhZjdhN2U1NjVkYTA0YTc1MjZjYzUyODhkMDRhNTg1YmRlMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWiwp5SNex0JdqHRF4IufaUxRpxE fH+8K1Xj99j9KV4Qe2XkcLdycSd83t/eFcXhw53xDFZWvFyTVWYDeuN9eaIDe2jl cw7YciX2uSsPWK0hGnYICeLrhDMN0iDsAf6NMb7QjS6EFDA8IYnOFktMPhhlMfJI OYkIYHiqHa0GMRkcISriNRIxULIVnsZxnZ0oept3lhYrK8Bhg9yh/a0jpoknCFQX glBpGmlGheJSpNW6CAJInEGvtVZYqDvpelrxGlfZZZ95+dyELRrN5S3UmpfAooZV Rho/P9aXLEiKMO4Ud5cWrBQcU32PmFTKCTXaF7yJzbNSu06UOclhVyBtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwq96flZdoEp1JsxSiNBKWFveNtMB8GA1UdIwQY MBaAFAXp+feMLLvF+gi5uJ8KEdKwukc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYt YTZhYjk3YTBmNDQ1LzEvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYtYTZhYjk3YTBmNDQ1 LzEvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2xHMfrs pELERa5YOK3RmLozlFs9tWMsUUXajFrN/qXS72myhaDGZ869Pff3r84wfnWtYmjl MPRQnJNt6vAGU4uiTrm7lV9X7hSLyPAOdEtiMjI9WibKIY+WTvMCw8QSZbDnPfdb jbWG64q+1axmMJu3KVFQM1jb9JO494BnaNS6D7T+eicGvezUvPUUgIVZAi951xj4 91XAkXvGUFERhy/cRV+tTH0Ndv6XPoC0Ae5udHhhWR2ydceYnjo+KJSu9jzhuY/1 sBq7ZuyjuA+2ouJJrXRr6SPhch+nQ2JGPLQSgAyg457UyouzdjldbhCtMmFwhYzO 6C0G3kstiinwww== -----END CERTIFICATE-----Generated at Sat Dec 20 04:38:50 2025 by rpki-client