This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
File:                     Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json)
Hash identifier:          7OYrVZHfjL+lPhA8JgKGpHwQPpMLrKKXuIM/X5+fc6A=
Subject key identifier:   95:13:2F:AA:F7:37:6C:F7:6E:4F:84:61:12:5D:C6:0A:F8:0D:B6:74
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Certificate issuer:       /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial:       019AF42E5CFB380991006F14C636BDD564BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
Manifest number:          0F71
Signing time:             Sat 06 Dec 2025 15:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:10 +0000
Files and hashes:         1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=)
                          2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=)
                          3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: s/DrjKwNot9NXoLmkrFK6+oZ1m7sCWwaYUUymVAF1CE=)
                          4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=)
                          5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=)
                          6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=)
                          7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=)
                          8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=)
                          9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=)
                          10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=)
                          11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=)
                          12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=)
                          13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=)
                          14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=)
                          15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:5c:fb:38:09:91:00:6f:14:c6:36:bd:d5:64:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
        Validity
            Not Before: Dec  6 15:01:10 2025 GMT
            Not After : Dec  7 15:01:10 2025 GMT
        Subject: CN=95132faaf7376cf76e4f8461125dc60af80db674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:18:59:21:70:7d:54:b1:bd:a8:03:ba:a6:
                    58:1f:e1:86:d1:fc:b5:99:ff:21:ab:65:6c:fc:bf:
                    0d:b9:bf:26:92:0e:d6:31:a6:f7:14:cd:5c:11:84:
                    d5:e5:00:88:46:53:a2:54:40:16:8b:43:35:90:ff:
                    cd:c7:fb:44:ca:ad:ea:47:46:bc:a4:a9:e7:a6:b4:
                    46:c5:e8:28:02:de:bf:8c:9b:0d:be:50:e3:7e:c3:
                    ec:4c:63:33:c3:50:ba:58:64:c6:80:0a:67:71:c0:
                    11:eb:ed:b8:36:27:36:7b:d5:9d:c9:ac:0a:e2:34:
                    22:c8:14:5b:ac:60:5e:2d:7b:86:0b:8f:b7:62:83:
                    6c:4b:e3:e4:f4:1c:3d:79:ec:d7:54:56:ec:01:8c:
                    d6:1b:24:86:e2:db:74:90:60:9a:6e:a1:2e:de:e3:
                    ef:a0:ca:0c:47:a8:65:d7:ff:70:a6:3e:b2:ad:4f:
                    ff:f8:cf:e7:e8:c5:b1:aa:28:32:66:7f:30:8f:e1:
                    15:9d:57:72:c2:8f:12:ef:25:d1:2b:8a:7a:41:0e:
                    ec:0e:5c:35:34:79:11:f0:63:fd:b0:a7:0a:fc:31:
                    0e:c4:f1:dd:71:47:04:19:28:96:53:cc:51:03:a3:
                    73:e5:2e:b1:89:9d:09:83:a3:53:3c:06:4f:82:cd:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:13:2F:AA:F7:37:6C:F7:6E:4F:84:61:12:5D:C6:0A:F8:0D:B6:74
            X509v3 Authority Key Identifier:
                keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:e6:a7:78:2f:ac:d6:c8:eb:08:96:4b:ae:f3:df:e3:3f:
         61:a8:dc:22:c3:93:bd:ee:c4:d8:00:a3:41:ae:80:88:60:5b:
         0c:fb:d2:69:1f:ea:34:dc:3c:9a:b3:39:7a:47:7f:0f:16:3a:
         5c:8a:76:75:fb:a8:1b:80:8e:63:4f:da:95:e7:bf:c7:e4:4d:
         3d:a6:dc:c8:ea:d7:5c:a0:22:3a:ae:36:47:4e:ac:1e:f0:99:
         52:f9:49:5e:f5:8f:c3:34:ff:b8:71:cd:53:9e:33:94:e8:70:
         ea:71:99:64:84:7e:44:8c:10:23:fd:21:51:2f:1e:05:29:af:
         e9:2d:f2:60:97:27:65:2e:12:25:82:03:8f:37:5d:ba:18:ae:
         17:3d:50:e4:76:34:99:a3:78:48:99:16:38:f5:0d:b6:f5:5d:
         2f:f0:bb:c5:79:bc:f0:34:50:2e:25:f5:c2:c8:e0:16:43:f5:
         ef:70:ee:9a:bb:e0:5f:9a:b6:dd:a1:22:7f:c1:4a:e7:22:02:
         6f:af:fe:17:45:b3:5c:76:f7:c7:94:ca:0c:93:4b:8e:12:f7:
         11:1c:4f:51:47:90:87:53:16:a0:ed:db:c1:46:c1:51:8f:91:
         f7:eb:5b:2c:38:38:7d:f9:4a:aa:7a:1c:3d:56:27:54:30:87:
         7e:b1:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:32:27 2025 by rpki-client