This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: H91jDBp6EqmZ1qts3V1wTFwR0h8fcmngDSceSNj76N0= Subject key identifier: C3:CE:DF:B3:CB:64:B1:96:F3:67:E1:AB:CD:B9:C0:48:23:2F:5D:97 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B39B4509DD916357A83FDF88FC9A4B443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0F95 Signing time: Sat 20 Dec 2025 03:01:16 +0000 Manifest this update: Sat 20 Dec 2025 03:01:16 +0000 Manifest next update: Sun 21 Dec 2025 03:01:16 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: HHTSn6aWWXAoMG1UDNxLdAZuIJHEm/zSNfFaPxxDAso=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:50:9d:d9:16:35:7a:83:fd:f8:8f:c9:a4:b4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Dec 20 03:01:16 2025 GMT Not After : Dec 21 03:01:16 2025 GMT Subject: CN=c3cedfb3cb64b196f367e1abcdb9c048232f5d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:2c:c6:2e:51:0d:84:a2:07:11:a8:00:22: 1b:5f:0a:5b:5a:9e:33:1e:33:af:a9:61:45:e9:14: ad:87:7c:cd:c3:b9:31:84:66:bd:e0:d0:6e:04:19: 54:59:57:d7:4f:11:7a:08:ce:ed:ec:b4:45:3b:3f: 7b:e1:1b:28:97:61:05:cd:c6:d6:23:16:7b:b7:75: c2:a4:c5:97:13:3f:5f:78:a7:f5:78:f2:56:f3:af: 1c:cc:ad:99:5e:4e:9e:75:fb:ec:de:69:76:bf:19: 1f:6d:50:c7:11:6e:83:b2:b7:8e:bd:4e:89:24:ef: f5:18:a4:9c:7f:c0:78:4a:34:50:b9:9b:67:fc:2b: b8:8a:cd:cf:dd:44:d0:02:9d:c8:62:c5:8e:8f:d4: fc:69:db:ab:45:0b:62:8f:8d:bb:a7:da:2c:a5:ba: a4:96:a5:72:a9:62:06:d7:9e:2d:93:11:6b:49:a3: b8:f3:56:08:3e:11:33:02:0d:91:75:d7:b2:00:8b: 16:7e:eb:f1:aa:b2:db:ef:2d:76:05:2a:05:08:ef: c7:ec:2c:88:03:9b:fc:05:75:9a:a1:54:a4:9b:9a: 9e:19:ed:9c:1b:d1:14:d9:94:e5:fc:25:58:33:dc: 95:de:3d:0e:83:ce:61:c4:54:f2:1d:73:e3:7a:47: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CE:DF:B3:CB:64:B1:96:F3:67:E1:AB:CD:B9:C0:48:23:2F:5D:97 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:8d:23:cb:39:35:85:9c:c6:9e:4c:90:04:f4:4b:07:4e:e0: 87:29:60:2e:9f:4a:23:0d:02:1f:99:5e:a4:1d:65:8d:20:b2: ce:3c:3b:e2:97:82:2b:57:de:da:2c:46:a2:61:2b:4a:e9:ac: 97:74:75:18:0b:05:e1:c9:82:15:65:87:4e:d2:dc:e8:11:5b: 04:2d:cb:ad:0d:9d:8f:49:67:27:eb:b8:b8:f2:12:27:c9:4b: 21:62:e0:ba:1c:27:81:f9:35:b3:ea:f9:32:f4:21:7f:ff:f4: f8:de:cf:7b:e2:ae:71:08:19:a9:21:82:7f:c9:df:bd:b7:1f: 1b:3e:31:8c:76:af:b0:7a:20:e7:0a:36:7d:a2:be:2e:87:3a: 2c:ac:75:a8:4f:8a:0c:3c:1e:1a:95:7c:ed:a6:fd:76:c6:85: 61:f0:83:df:3a:3a:19:03:6b:5a:db:37:6c:d1:34:96:67:60: 74:54:df:2a:fc:75:dd:18:25:b2:02:3b:b8:52:2a:e1:cf:68: a5:b9:79:7e:6e:69:b3:13:9e:f5:a4:44:4e:ab:1a:70:02:2c: 71:b7:c1:9a:7c:9b:85:4d:30:2f:ce:05:2b:1c:e4:91:f0:67: 1b:6a:f3:e3:64:6e:ef:e3:08:36:5d:39:1c:e9:e1:f9:75:54: e9:dc:98:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFCd2RY1eoP9+I/JpLRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUxMjIwMDMwMTE2WhcNMjUxMjIxMDMwMTE2WjAzMTEwLwYDVQQD EyhjM2NlZGZiM2NiNjRiMTk2ZjM2N2UxYWJjZGI5YzA0ODIzMmY1ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoEsxi5RDYSiBxGoACIbXwpbWp4z HjOvqWFF6RSth3zNw7kxhGa94NBuBBlUWVfXTxF6CM7t7LRFOz974Rsol2EFzcbW IxZ7t3XCpMWXEz9feKf1ePJW868czK2ZXk6edfvs3ml2vxkfbVDHEW6DsreOvU6J JO/1GKScf8B4SjRQuZtn/Cu4is3P3UTQAp3IYsWOj9T8adurRQtij427p9ospbqk lqVyqWIG154tkxFrSaO481YIPhEzAg2RddeyAIsWfuvxqrLb7y12BSoFCO/H7CyI A5v8BXWaoVSkm5qeGe2cG9EU2ZTl/CVYM9yV3j0Og85hxFTyHXPjekfFQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPO37PLZLGW82fhq825wEgjL12XMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxo0jyzk1 hZzGnkyQBPRLB07ghylgLp9KIw0CH5lepB1ljSCyzjw74peCK1fe2ixGomErSums l3R1GAsF4cmCFWWHTtLc6BFbBC3LrQ2dj0lnJ+u4uPISJ8lLIWLguhwngfk1s+r5 MvQhf//0+N7Pe+KucQgZqSGCf8nfvbcfGz4xjHavsHog5wo2faK+Loc6LKx1qE+K DDweGpV87ab9dsaFYfCD3zo6GQNrWts3bNE0lmdgdFTfKvx13RglsgI7uFIq4c9o pbl5fm5psxOe9aRETqsacAIscbfBmnybhU0wL84FKxzkkfBnG2rz42Ru7+MINl05 HOnh+XVU6dyYkg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:58:03 2025 by rpki-client