This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          KOUvkagD55gKMpS59Yrp4gtRCp96CwervkPs8MthD9E=
Subject key identifier:   97:79:1A:AF:0D:B3:5D:1B:BF:FF:35:E9:C0:63:3F:C9:FC:A9:4B:9B
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019B33E8A36D6A681EF6686BDCD93E4244BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          1152
Signing time:             Fri 19 Dec 2025 00:00:42 +0000
Manifest this update:     Fri 19 Dec 2025 00:00:42 +0000
Manifest next update:     Sat 20 Dec 2025 00:00:42 +0000
Files and hashes:         1: A2VCepwS6QjlURI4CoEJ3b6rUYY.roa (hash: HY46ZmOTRPyDPxWp/aE8yepyzS9Dd83zC3fHytSEbfo=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: 3g+bCHKV/XGTA2FQNk9yAsJcFPxzXCQ2rRE51EWSrs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:e8:a3:6d:6a:68:1e:f6:68:6b:dc:d9:3e:42:44:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Dec 19 00:00:42 2025 GMT
            Not After : Dec 20 00:00:42 2025 GMT
        Subject: CN=97791aaf0db35d1bbfff35e9c0633fc9fca94b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:73:77:ff:00:79:5f:35:6f:f7:60:ef:3a:
                    5f:8a:0e:b5:30:b4:be:44:bd:3d:19:ea:ef:65:f9:
                    fa:e0:17:d3:03:0b:02:8f:ed:ba:28:83:80:14:61:
                    8a:7b:32:22:c6:b4:2f:6e:82:2d:fe:94:fd:28:5e:
                    ef:a7:25:30:fa:24:de:90:58:00:c1:e5:24:0a:6c:
                    d9:de:dc:a5:a5:92:f6:18:f8:fc:59:ce:48:af:62:
                    37:45:a0:f7:93:2d:1d:a1:9a:e4:ba:94:f1:65:b5:
                    3b:98:d0:22:97:ce:9c:30:ac:a9:e3:50:0c:c6:2d:
                    5a:4e:f0:f2:7c:d2:b3:7f:f8:75:d2:4a:94:ac:ba:
                    1c:e6:79:b6:68:a5:1b:ac:54:88:4c:69:61:0b:42:
                    af:5b:3b:42:4e:d5:16:25:d9:62:b3:de:f2:49:62:
                    b7:99:b2:c2:c0:e7:5b:40:9b:ad:f1:34:5a:e2:cc:
                    cf:11:4e:96:42:8f:f1:4c:1f:67:ff:ba:0f:6b:e7:
                    37:4d:df:04:17:39:84:ec:3e:d2:ba:c1:5a:80:c3:
                    06:a5:59:60:d7:0f:45:0b:2e:76:ca:31:b8:1c:d2:
                    d5:d5:87:7e:e1:c8:ac:06:94:8f:4d:2c:a6:4c:c9:
                    df:39:16:1e:04:80:96:13:95:6c:2e:a9:92:e7:e4:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:79:1A:AF:0D:B3:5D:1B:BF:FF:35:E9:C0:63:3F:C9:FC:A9:4B:9B
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:2d:05:2a:39:cf:91:68:07:92:b0:4f:7c:1a:5c:ce:9d:
         3f:61:00:69:b0:71:b2:bc:23:4d:ec:6c:b2:58:ad:b2:8d:51:
         33:bb:1c:96:25:16:26:c6:c2:1d:88:ec:ce:6a:42:fb:51:76:
         1e:56:29:57:30:b9:cb:db:4a:a2:10:89:79:28:c5:1e:7c:2b:
         7b:73:69:4e:09:cc:48:d5:77:7c:c7:7c:cd:77:ae:94:3a:d5:
         ba:92:17:d8:00:8f:18:6f:a5:e4:97:57:55:07:e9:35:32:59:
         8b:cf:67:3d:cc:5a:bf:30:28:c7:c2:f2:d5:24:ed:0c:96:18:
         4f:98:ff:c4:15:89:37:13:40:97:19:72:5d:45:77:3d:2b:f4:
         31:a5:e8:56:33:a3:6f:c3:ec:71:d8:37:12:07:f4:28:73:f6:
         c5:ad:b2:e1:5c:72:b8:9f:a2:0f:e2:a8:96:7c:a0:c9:9c:20:
         89:73:0e:03:cc:fd:58:83:4e:28:b6:67:cf:66:66:07:68:35:
         2f:39:2e:e5:ba:2c:b8:65:03:35:81:e7:06:b1:12:4a:91:9a:
         68:96:e1:df:2b:6f:bb:ab:21:9c:20:2f:9e:79:8d:20:a7:37:
         2a:76:cb:1d:a2:c5:fb:6c:ae:e5:20:4b:3f:4d:81:92:ad:73:
         04:57:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:57:18 2025 by rpki-client