This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier:          CycbxhinCqcIuzU+Nfy+kbx5r1WvaDB53mshbPkavdQ=
Subject key identifier:   8F:EE:D1:8D:EC:50:05:F0:F4:5E:13:EE:BF:04:8B:A0:91:74:13:08
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       019B262DB126EA8D6DE8057224B2A4E6E28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number:          0910
Signing time:             Tue 16 Dec 2025 08:01:27 +0000
Manifest this update:     Tue 16 Dec 2025 08:01:27 +0000
Manifest next update:     Wed 17 Dec 2025 08:01:27 +0000
Files and hashes:         1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: xsdoY9Fbk2cwECU3vg94wifvRY0jR0cYkyhIyHlNXjk=)
                          2: yQOovkVgBPdQUYWIP8s5JEl_do0.roa (hash: teGG3Giw/XqatuTMOZRs13KC4GUJoaqGETNz76LPhGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:2d:b1:26:ea:8d:6d:e8:05:72:24:b2:a4:e6:e2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: Dec 16 08:01:27 2025 GMT
            Not After : Dec 17 08:01:27 2025 GMT
        Subject: CN=8feed18dec5005f0f45e13eebf048ba091741308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:e7:2b:59:6e:05:ca:8e:4f:05:b8:ce:47:
                    af:49:74:b5:84:76:ef:e2:5c:bd:d4:3f:29:c7:1c:
                    03:5b:62:8a:7e:fb:ab:e6:68:ec:06:9e:b8:8e:78:
                    36:bc:3d:85:35:c1:62:a6:1c:53:66:e2:8c:66:1d:
                    71:eb:a8:06:5c:ee:14:a2:90:c0:16:4b:db:60:0d:
                    ab:25:ee:23:52:89:b6:db:7c:5f:fe:0a:4a:c2:09:
                    ba:a6:ce:02:70:ab:01:ab:53:2d:6c:16:e1:ed:0a:
                    c7:f6:d1:08:18:e1:cc:aa:ce:3b:43:f6:bf:cc:ef:
                    40:28:c9:f2:a1:eb:01:fb:ac:a8:a3:76:fb:58:85:
                    13:1f:56:4e:c7:fa:f6:12:5c:88:63:7c:9a:a8:d6:
                    b1:2f:60:21:30:2d:33:8e:60:2c:79:9a:46:33:3b:
                    af:75:46:93:94:72:49:16:b6:0a:11:6c:d5:07:a0:
                    6a:94:29:a5:aa:db:41:b7:74:a6:56:7f:7e:4c:a8:
                    d5:f3:85:dc:a2:a2:d6:46:99:4b:ed:89:96:86:52:
                    42:7c:4d:50:66:dd:af:ed:b5:d5:f2:42:ee:6b:2e:
                    d8:b2:56:a8:e7:21:04:e8:6d:c0:c0:72:40:b9:35:
                    56:c0:70:1c:0d:ba:30:73:f5:4f:2e:02:d4:5e:7a:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EE:D1:8D:EC:50:05:F0:F4:5E:13:EE:BF:04:8B:A0:91:74:13:08
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:47:b5:38:ac:cf:d2:e7:a5:b9:54:ba:76:94:57:5d:8a:
         fb:c1:f1:a3:d1:48:4f:40:00:b4:68:7c:fe:72:aa:df:20:d4:
         2e:ef:6f:fa:b5:62:08:ec:e7:bc:50:5a:46:14:0e:42:87:2b:
         36:64:47:e3:e6:a1:92:37:36:25:6b:13:41:a4:7d:cc:fe:98:
         9e:98:e0:95:42:5a:45:dd:f4:56:dd:62:2b:0f:5b:c8:bc:6f:
         91:6e:42:46:c3:cb:fa:54:a6:23:a9:1d:f5:99:90:91:ea:c8:
         70:01:93:72:6d:3c:b4:60:e2:7c:33:fe:29:09:56:64:d4:15:
         9d:bc:ed:95:ec:68:71:c0:20:82:a2:a9:e1:74:c8:70:43:2b:
         97:43:4e:6a:5b:c0:36:78:2c:7a:76:70:6a:4a:79:20:ec:3e:
         62:1e:04:92:ef:3e:2f:7b:5f:73:4a:24:90:28:49:0e:11:7d:
         5d:ee:31:a0:14:fa:33:42:e9:e5:1f:27:a3:25:c2:96:9f:ae:
         bc:f2:75:1a:14:13:45:e8:0b:70:e6:ec:39:ab:75:e6:55:d5:
         0f:94:e2:78:d6:9c:35:68:50:ca:0f:c5:95:4d:06:e9:09:8c:
         e1:d3:2b:76:21:94:48:f9:ae:7a:ac:3d:a9:67:e2:9c:8c:81:
         0a:46:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 17:56:28 2025 by rpki-client