This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: STysqGR32RRw+vYd3Mw9Fswns0CDgrI08SoKcE1JnAg= Subject key identifier: 5B:CE:B8:21:22:74:92:5D:1D:15:A1:98:80:3F:3F:5B:96:23:40:DB Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019AF240013754CCD68968B28A7E5FD269C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0F70 Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: 2RlFAu1sQJe4oHA9tlcZoGBCJZC5K0YQqBooNnLtBU8=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:01:37:54:cc:d6:89:68:b2:8a:7e:5f:d2:69:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=5bceb8212274925d1d15a198803f3f5b962340db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:00:b4:66:1b:0c:18:b3:b6:1e:a7:e1:6f: 5d:4a:63:2b:bb:b2:6c:5b:9b:38:8d:37:39:0e:26: 23:9c:3d:e7:f1:ce:c0:6d:3e:9c:77:dd:40:f0:81: cf:63:57:e9:5f:2f:52:12:7c:f5:1e:81:f8:b3:87: 02:30:aa:7d:d5:51:dc:78:fe:58:4f:e5:e0:eb:7d: 7f:d4:49:1b:aa:a6:b6:d9:11:08:d4:f2:47:b6:2f: 7e:65:a5:1b:28:c9:84:34:c8:35:83:2b:b5:57:5b: 08:bf:12:2f:11:be:08:e7:72:d7:89:87:97:02:91: 81:9e:1c:a6:2e:a2:83:5b:f9:fa:9a:36:05:1b:fd: 79:3b:59:29:9b:c1:fb:fe:7f:15:fb:26:5d:61:ab: fe:c4:65:bf:b2:ae:b5:c4:76:82:6e:2a:7e:bd:cf: 93:c5:65:ee:8b:ba:c4:8d:bb:4c:de:fa:7a:3d:e3: 94:a5:bd:51:5c:c5:a7:e2:4c:56:e5:89:2f:a4:5b: de:3e:40:3c:8e:9e:03:22:d1:af:6e:4f:26:dc:1b: 3c:13:95:c9:33:d8:3e:40:11:4c:4a:66:57:90:71: bb:3b:fb:9d:9e:12:7b:44:61:3f:bc:da:23:05:f8: 08:20:65:35:e7:3c:c0:23:31:5a:f9:b4:31:15:3c: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CE:B8:21:22:74:92:5D:1D:15:A1:98:80:3F:3F:5B:96:23:40:DB X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3e:24:37:23:bf:aa:30:ee:8c:ca:dc:a0:f5:79:aa:e3:e4: 57:fb:32:7d:2f:df:42:89:92:8e:4d:cf:21:27:88:1f:f4:9f: 15:2f:91:24:f9:dd:e1:41:4e:00:02:9d:86:08:63:33:65:59: 48:09:bd:4f:07:9d:b1:65:d4:c7:c5:4b:52:34:f6:30:24:26: c9:9b:b4:47:15:59:7c:6c:4b:20:c1:3f:d0:73:c0:39:aa:a8: e0:e2:25:bb:b6:da:8a:ef:93:3a:79:95:b8:5b:ed:3a:81:06: 12:26:7c:be:49:20:91:53:e9:40:4c:c1:dd:2b:c3:b7:65:b6: db:90:f9:35:e0:b1:ba:96:b4:ad:8e:da:2f:5e:3f:c5:e6:66: 16:c4:69:26:cd:a4:7d:a8:e2:58:e0:9d:86:bd:20:c5:e5:57: 13:3c:31:0b:5b:95:6b:f3:01:0f:6b:81:3f:ac:c1:05:15:64: fa:92:e1:9f:8b:4a:09:a7:6e:dc:b4:ad:13:70:1b:43:39:fe: b7:d6:23:0c:82:13:b8:64:74:fe:58:e0:19:8b:3d:fc:91:88: 63:f3:f3:8e:b0:01:74:c6:55:82:4a:b0:01:56:9d:29:d7:7b: bb:21:29:28:d6:4b:09:0f:a5:8b:d2:23:bf:49:f7:3a:67:9e: 70:61:88:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAE3VMzWiWiyin5f0mnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD Eyg1YmNlYjgyMTIyNzQ5MjVkMWQxNWExOTg4MDNmM2Y1Yjk2MjM0MGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm24AtGYbDBizth6n4W9dSmMru7Js W5s4jTc5DiYjnD3n8c7AbT6cd91A8IHPY1fpXy9SEnz1HoH4s4cCMKp91VHceP5Y T+Xg631/1Ekbqqa22REI1PJHti9+ZaUbKMmENMg1gyu1V1sIvxIvEb4I53LXiYeX ApGBnhymLqKDW/n6mjYFG/15O1kpm8H7/n8V+yZdYav+xGW/sq61xHaCbip+vc+T xWXui7rEjbtM3vp6PeOUpb1RXMWn4kxW5YkvpFvePkA8jp4DItGvbk8m3Bs8E5XJ M9g+QBFMSmZXkHG7O/udnhJ7RGE/vNojBfgIIGU15zzAIzFa+bQxFTxDOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvOuCEidJJdHRWhmIA/P1uWI0DbMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT4kNyO/ qjDujMrcoPV5quPkV/syfS/fQomSjk3PISeIH/SfFS+RJPnd4UFOAAKdhghjM2VZ SAm9TwedsWXUx8VLUjT2MCQmyZu0RxVZfGxLIME/0HPAOaqo4OIlu7baiu+TOnmV uFvtOoEGEiZ8vkkgkVPpQEzB3SvDt2W225D5NeCxupa0rY7aL14/xeZmFsRpJs2k fajiWOCdhr0gxeVXEzwxC1uVa/MBD2uBP6zBBRVk+pLhn4tKCadu3LStE3AbQzn+ t9YjDIITuGR0/ljgGYs9/JGIY/PzjrABdMZVgkqwAVadKdd7uyEpKNZLCQ+li9Ij v0n3OmeecGGInA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:06 2025 by rpki-client