This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          KBjmEIL0hhnigPzlxEMGjJO1MoTcr/rpiCYL9d3Sm+Y=
Subject key identifier:   AA:C6:C0:BF:64:0A:16:C3:58:15:0E:24:27:24:0E:19:C9:41:31:81
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019B300C0DEB6D9E386EFEA1F98F42AC0BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          1150
Signing time:             Thu 18 Dec 2025 06:00:54 +0000
Manifest this update:     Thu 18 Dec 2025 06:00:54 +0000
Manifest next update:     Fri 19 Dec 2025 06:00:54 +0000
Files and hashes:         1: A2VCepwS6QjlURI4CoEJ3b6rUYY.roa (hash: HY46ZmOTRPyDPxWp/aE8yepyzS9Dd83zC3fHytSEbfo=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: uYxK6D1J/qLCYgBTNl3Ukrqrs3CtBDaLoq4vjLJUQfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:0c:0d:eb:6d:9e:38:6e:fe:a1:f9:8f:42:ac:0b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Dec 18 06:00:54 2025 GMT
            Not After : Dec 19 06:00:54 2025 GMT
        Subject: CN=aac6c0bf640a16c358150e2427240e19c9413181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:c2:9b:97:44:a7:5f:7b:df:58:f3:08:44:
                    00:f7:12:db:eb:53:0a:05:b4:5c:93:ae:8e:8f:7b:
                    72:4a:47:cf:10:7d:e1:b7:3c:84:d3:2a:f3:2a:0b:
                    01:41:37:18:c1:4d:32:11:f8:e0:39:c2:3f:91:46:
                    b0:2e:c4:01:af:d1:00:71:be:8e:a7:f1:38:ac:d0:
                    b4:95:1e:c6:a8:21:dd:a0:c4:cd:b1:d9:60:64:84:
                    43:c8:69:6f:db:d1:f1:81:39:65:fe:5b:a1:80:43:
                    12:bc:0b:27:11:05:d6:d1:f1:f3:0c:89:1d:01:f5:
                    fb:e1:11:da:23:dc:bf:27:1a:c7:1d:b9:de:29:ae:
                    16:3b:c7:a4:fa:5e:8d:78:2d:d9:ef:2b:33:ef:63:
                    e3:9f:bd:ad:a0:2d:cc:b3:a6:05:87:3a:d5:bc:d1:
                    cb:7b:2f:3c:43:3f:c4:c0:71:3b:45:4c:2d:88:af:
                    25:82:7e:ef:93:03:54:f2:61:7e:1c:53:da:7d:4b:
                    e0:dc:62:4a:45:d4:0c:2d:b2:e1:41:bc:40:11:29:
                    6a:e5:55:b1:69:d8:d4:1b:14:bd:c8:f0:50:f3:2f:
                    3a:f9:fe:8b:fe:87:12:9c:58:76:7b:fa:da:a7:23:
                    b1:eb:25:86:69:98:60:c3:ef:a5:de:a5:e7:53:a9:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:C0:BF:64:0A:16:C3:58:15:0E:24:27:24:0E:19:C9:41:31:81
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:19:13:b6:8a:b0:cb:97:a4:4d:07:22:94:69:73:37:a4:
         99:a9:0d:ff:a1:f4:a9:df:11:cd:b4:16:47:88:ae:18:e4:7a:
         c4:08:c1:4d:9b:01:6a:f0:6b:3f:a4:96:7e:e1:7f:6f:3b:c6:
         72:c9:17:48:d9:f0:dc:f4:27:39:11:09:30:43:95:6b:86:d7:
         d8:64:c0:2d:35:34:cf:9e:db:cf:09:7f:b1:1f:5c:d8:f0:6d:
         ed:cd:72:a4:e6:6e:f3:24:30:c5:95:51:24:03:86:51:7d:22:
         19:3f:6f:fe:37:5a:dc:e9:0d:83:b4:41:34:37:6a:60:1c:a6:
         60:ca:fd:0e:d6:24:57:73:28:1f:da:29:c3:6e:1e:c0:11:bc:
         0c:39:d7:d4:9d:e7:2e:e3:a4:ef:dc:74:05:3d:3e:e9:e3:7d:
         6f:d3:51:b3:89:01:46:6e:d7:63:ce:ec:a6:53:c0:ad:5f:8f:
         17:cf:3e:ec:e9:55:ed:3d:d3:36:56:a7:8f:be:2e:75:06:61:
         59:e3:2a:4f:8d:e0:0a:3e:68:5e:51:f8:ae:27:d4:5d:9c:91:
         fa:d8:4e:16:97:70:15:e9:dd:1d:b0:ae:89:05:50:b9:f8:32:
         cb:15:6b:1a:0c:5c:f8:fa:5b:f3:be:1a:df:41:25:3f:66:42:
         18:1e:c2:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZswDA3rbZ44bv6h+Y9CrAvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOWY4OThjZjc1ZGFmNjgwMDA5M2YyNTY3YWFmNzJhYTk4
NmUyOWMwHhcNMjUxMjE4MDYwMDU0WhcNMjUxMjE5MDYwMDU0WjAzMTEwLwYDVQQD
EyhhYWM2YzBiZjY0MGExNmMzNTgxNTBlMjQyNzI0MGUxOWM5NDEzMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBrCm5dEp19731jzCEQA9xLb61MK
BbRck66Oj3tySkfPEH3htzyE0yrzKgsBQTcYwU0yEfjgOcI/kUawLsQBr9EAcb6O
p/E4rNC0lR7GqCHdoMTNsdlgZIRDyGlv29HxgTll/luhgEMSvAsnEQXW0fHzDIkd
AfX74RHaI9y/JxrHHbneKa4WO8ek+l6NeC3Z7ysz72Pjn72toC3Ms6YFhzrVvNHL
ey88Qz/EwHE7RUwtiK8lgn7vkwNU8mF+HFPafUvg3GJKRdQMLbLhQbxAESlq5VWx
adjUGxS9yPBQ8y86+f6L/ocSnFh2e/rapyOx6yWGaZhgw++l3qXnU6kLKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrGwL9kChbDWBUOJCckDhnJQTGBMB8GA1UdIwQY
MBaAFI6fiYz3Xa9oAAk/JWeq9yqphuKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQt
YjNjZWM5ZDEwNjExLzEvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQtYjNjZWM5ZDEwNjEx
LzEvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0UZE7aK
sMuXpE0HIpRpczekmakN/6H0qd8RzbQWR4iuGOR6xAjBTZsBavBrP6SWfuF/bzvG
cskXSNnw3PQnOREJMEOVa4bX2GTALTU0z57bzwl/sR9c2PBt7c1ypOZu8yQwxZVR
JAOGUX0iGT9v/jda3OkNg7RBNDdqYBymYMr9DtYkV3MoH9opw24ewBG8DDnX1J3n
LuOk79x0BT0+6eN9b9NRs4kBRm7XY87splPArV+PF88+7OlV7T3TNlanj74udQZh
WeMqT43gCj5oXlH4rifUXZyR+thOFpdwFendHbCuiQVQufgyyxVrGgxc+Ppb874a
30ElP2ZCGB7Cog==
-----END CERTIFICATE-----
Generated at Thu Dec 18 14:06:17 2025 by rpki-client