This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File:                     JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier:          wcFzoxHdwmLMXXn4vVzacW3mI0aQRH/gx8B4qNPWaYE=
Subject key identifier:   3F:42:4F:CA:31:AC:A4:3B:46:79:7D:EF:2D:75:08:DD:AF:E9:85:47
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer:       /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial:       019B3A90A5AF325B3F61B7D85E5741B4D5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number:          1787
Signing time:             Sat 20 Dec 2025 07:01:56 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:56 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:56 +0000
Files and hashes:         1: 1-nkq1gI9c-xmhnINJKTO0eY1F-c.roa (hash: esI7VyyO9I62Rhxi2p/PfcbKRFK2dputujGVLb2DIKs=)
                          2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: 8fksKhZCiefnBCaTnKOJiV9wNkB8zSJlvpogg8IEwQ8=)
                          3: NLCollhjrEEQOE-PDJFwvSEkpWg.roa (hash: MVYofLmObC6krPDdhLIsoczQc+WblQhfU3QgFVWsECQ=)
                          4: ngBNYl-whCyGIde-bD1GXnCv6tc.roa (hash: jOzkj1FabBPArbWH4CC715VSys+dMBcuG0O5ZOY3nPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:a5:af:32:5b:3f:61:b7:d8:5e:57:41:b4:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
        Validity
            Not Before: Dec 20 07:01:56 2025 GMT
            Not After : Dec 21 07:01:56 2025 GMT
        Subject: CN=3f424fca31aca43b46797def2d7508ddafe98547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:bf:c8:81:5b:a3:df:52:fb:8a:f8:02:8d:
                    91:fc:fd:c7:3d:c1:af:7f:61:ad:5e:72:8a:6e:0d:
                    4a:8f:12:1e:69:89:37:55:7b:85:14:46:0c:47:25:
                    81:b3:fa:fb:d6:e6:eb:18:37:af:74:df:73:a6:44:
                    00:e0:6c:f6:bf:12:e5:13:16:b6:c9:12:8c:f7:01:
                    ab:d1:50:62:ef:d1:2f:c7:4a:79:86:c5:05:22:64:
                    92:25:0a:f2:05:a0:11:2c:22:16:9c:d1:90:c5:3a:
                    53:a4:ff:4d:a7:7b:49:4d:5d:c2:b9:57:ae:c4:0d:
                    e3:7f:b9:7a:c1:e3:51:8b:c3:0d:3f:0b:2c:98:9c:
                    60:e6:6e:b3:8d:4c:b5:e4:90:50:e5:13:18:a0:d2:
                    40:3a:81:49:e3:5d:e6:57:62:4a:1e:96:e7:c6:ec:
                    13:2e:70:e6:19:6e:88:1d:d2:29:50:e6:bb:f8:c7:
                    92:a3:9b:a7:15:d9:7b:c1:21:f3:77:a3:da:fb:80:
                    ad:e1:2c:03:72:56:c7:0e:26:c2:ca:00:08:1c:d9:
                    32:68:8d:87:b2:68:db:26:97:fd:53:78:24:dd:11:
                    71:94:91:c3:41:91:5b:d8:48:c6:98:a4:e9:be:d9:
                    d7:c8:b2:a8:5b:11:e5:fe:aa:fd:1f:d7:67:31:c3:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:42:4F:CA:31:AC:A4:3B:46:79:7D:EF:2D:75:08:DD:AF:E9:85:47
            X509v3 Authority Key Identifier:
                keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:f7:5c:30:51:18:87:bd:6f:f4:47:3f:f9:fe:7d:99:f0:
         2e:a6:61:00:4e:e9:f0:42:fd:1b:a7:d0:3a:40:6e:60:ab:ef:
         eb:65:b3:13:56:d4:de:01:ff:c2:fd:c7:04:5f:e5:5f:b0:0c:
         d8:36:ca:05:8c:fd:0a:12:cf:b6:ad:30:c6:fb:01:8d:4b:d2:
         f2:e0:89:e4:f7:47:f2:cd:c8:c1:11:22:1a:db:79:be:89:08:
         36:21:b0:41:ff:eb:cc:18:f0:a1:58:e5:dd:22:31:d9:b5:7f:
         46:a6:d8:88:09:ff:ff:bc:60:fc:f5:25:e2:d5:bb:ba:21:35:
         62:f5:db:15:e7:66:df:4d:c1:e6:fc:d2:d2:bf:06:c0:dd:af:
         94:ef:6d:51:b4:70:7c:b8:8d:23:42:8b:07:4c:e8:c5:46:14:
         c6:8f:8f:c0:74:bc:a2:95:0f:9c:87:50:f0:aa:38:da:d8:09:
         27:a2:15:cd:4f:ac:c6:b8:d9:11:75:00:95:ca:96:4b:b5:1b:
         29:54:5f:80:90:e7:0d:dc:8d:93:ee:02:ba:81:49:aa:88:4b:
         77:55:a2:ee:0e:7b:23:01:ed:1c:32:dc:51:48:16:15:f1:21:
         63:0b:6b:8a:2f:58:46:b1:c6:f3:ac:90:2e:f2:9f:2f:d3:40:
         9a:0a:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:30:51 2025 by rpki-client