This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: Tsq4FoPOznjhJPzlzEE8pI+S+MB16w8R7rJLvXWQV9Q= Subject key identifier: 2F:82:E8:4B:9D:5D:4E:43:46:8B:B2:56:33:81:A6:25:DC:10:48:44 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B416DE4DB207790BBA99AFF57FF0D06F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0F99 Signing time: Sun 21 Dec 2025 15:01:19 +0000 Manifest this update: Sun 21 Dec 2025 15:01:19 +0000 Manifest next update: Mon 22 Dec 2025 15:01:19 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: MeClUFIl4JKhSmjlOkjiFVcczJKojlnNFDZfCU3W9k8=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:e4:db:20:77:90:bb:a9:9a:ff:57:ff:0d:06:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Dec 21 15:01:19 2025 GMT Not After : Dec 22 15:01:19 2025 GMT Subject: CN=2f82e84b9d5d4e43468bb2563381a625dc104844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:1a:7a:d2:cc:f5:0c:4b:39:fc:fe:2e:89: b3:85:ca:9d:65:52:a8:ba:54:3b:90:b8:d0:ae:79: 72:02:d2:29:a4:8e:60:82:9b:e0:3d:4a:85:53:76: 95:4d:96:90:e5:78:cf:56:c3:48:94:bf:67:a5:64: 5e:f1:34:72:f9:ed:c5:f6:42:19:c8:70:63:a1:13: b0:27:30:2e:74:55:cc:e8:16:51:03:07:75:c9:37: 8a:e6:c3:c6:02:64:37:cb:a1:8e:98:4a:67:d0:9d: d9:71:6c:7f:2f:1c:a5:68:a6:4e:52:b6:f7:52:54: 7b:ac:ef:b3:b9:5a:45:41:89:fd:4a:4f:35:6a:e7: 9a:27:7c:d4:8e:a8:3a:7d:6f:8e:0c:2e:67:e6:e1: 1e:d3:e6:f2:7e:77:f6:c4:5e:89:21:2f:a8:29:65: 95:ae:1d:53:23:8a:e8:75:68:e0:5b:6a:c5:52:a4: c2:dc:b8:09:17:90:e8:00:ae:50:4e:e6:4c:10:99: 6b:50:cc:30:70:8f:8e:f7:21:ef:ca:01:47:1d:89: b8:37:09:c6:c5:7c:11:7f:f5:fd:0e:9f:43:be:a8: f6:5e:76:de:38:2f:c7:14:0f:3a:67:fa:7f:e8:42: 59:31:0f:9c:92:4d:19:86:a4:97:1f:93:28:a9:d9: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:82:E8:4B:9D:5D:4E:43:46:8B:B2:56:33:81:A6:25:DC:10:48:44 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:6d:68:69:70:45:c7:d8:84:20:17:30:5e:91:4f:9e:df:9a: f9:38:3c:57:66:a2:0e:27:1e:e1:e0:98:dc:05:00:ef:05:76: 87:42:52:35:f5:53:be:5c:02:1d:fd:a2:37:f4:2e:e0:33:73: bf:de:53:4a:75:f8:f6:d6:8d:8a:3e:8b:bf:fa:20:01:ad:20: 3e:20:ce:3c:11:c3:af:83:dd:c1:25:be:42:4e:3d:d6:19:91: ef:9a:35:36:fa:67:3f:5e:65:6b:c6:59:7b:e2:41:68:5e:6c: ad:4f:b2:ca:6a:26:c7:74:5c:72:77:13:70:d0:b6:a8:d0:b9: fb:5e:1a:31:ef:71:68:89:fe:2f:e8:be:4a:16:75:78:8a:26: e8:ef:83:f9:66:17:08:9a:61:3b:c8:61:28:bf:29:1d:69:2b: 13:1a:56:7d:cd:88:8b:5e:bc:28:31:6a:1e:19:bb:51:40:d8: 2c:04:6f:84:d7:59:50:37:a6:e2:8b:20:84:59:d5:6d:00:d7: f6:03:71:87:a9:94:9f:d8:da:a6:98:08:6c:15:43:5c:78:46: 32:5c:56:0b:89:34:0a:77:34:0b:8b:9b:eb:cd:c4:02:a0:ee: 19:6e:06:5f:b2:d6:a6:36:5b:e9:52:e0:de:9a:c8:4b:7a:ec: 1d:50:d7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbeTbIHeQu6ma/1f/DQbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUxMjIxMTUwMTE5WhcNMjUxMjIyMTUwMTE5WjAzMTEwLwYDVQQD EygyZjgyZTg0YjlkNWQ0ZTQzNDY4YmIyNTYzMzgxYTYyNWRjMTA0ODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkaetLM9QxLOfz+LomzhcqdZVKo ulQ7kLjQrnlyAtIppI5ggpvgPUqFU3aVTZaQ5XjPVsNIlL9npWRe8TRy+e3F9kIZ yHBjoROwJzAudFXM6BZRAwd1yTeK5sPGAmQ3y6GOmEpn0J3ZcWx/LxylaKZOUrb3 UlR7rO+zuVpFQYn9Sk81aueaJ3zUjqg6fW+ODC5n5uEe0+byfnf2xF6JIS+oKWWV rh1TI4rodWjgW2rFUqTC3LgJF5DoAK5QTuZMEJlrUMwwcI+O9yHvygFHHYm4NwnG xXwRf/X9Dp9Dvqj2XnbeOC/HFA86Z/p/6EJZMQ+ckk0ZhqSXH5Moqdmk0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+C6EudXU5DRouyVjOBpiXcEEhEMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx21oaXBF x9iEIBcwXpFPnt+a+Tg8V2aiDice4eCY3AUA7wV2h0JSNfVTvlwCHf2iN/Qu4DNz v95TSnX49taNij6Lv/ogAa0gPiDOPBHDr4PdwSW+Qk491hmR75o1NvpnP15la8ZZ e+JBaF5srU+yymomx3RccncTcNC2qNC5+14aMe9xaIn+L+i+ShZ1eIom6O+D+WYX CJphO8hhKL8pHWkrExpWfc2Ii168KDFqHhm7UUDYLARvhNdZUDem4osghFnVbQDX 9gNxh6mUn9jappgIbBVDXHhGMlxWC4k0Cnc0C4ub683EAqDuGW4GX7LWpjZb6VLg 3prIS3rsHVDX5w== -----END CERTIFICATE-----Generated at Mon Dec 22 00:00:02 2025 by rpki-client