This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          qXWInyLL5zSVHEedJUtlrOeWqnOp4ZzVOJwN6UuLv9E=
Subject key identifier:   A7:1C:81:A0:A0:93:E9:46:FF:4B:B3:94:63:DA:E9:13:24:D3:17:64
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019C427E0CF4BDD7DDDBA1B1C09A218145A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          11DF
Signing time:             Mon 09 Feb 2026 13:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:22 +0000
Files and hashes:         1: hEkW5mPaiOAxddilnP_CPLFDXhc.roa (hash: /6ykYqPmG+XWL1O5y4iJk4sExLVT7VAvltUQvirqw3w=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: 5HZos74vgKtEh3myqVPaOZntLN1e/aLAtGszqJh8vhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:0c:f4:bd:d7:dd:db:a1:b1:c0:9a:21:81:45:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Feb  9 13:01:22 2026 GMT
            Not After : Feb 10 13:01:22 2026 GMT
        Subject: CN=a71c81a0a093e946ff4bb39463dae91324d31764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:45:cb:0f:da:ea:b1:2f:d1:03:ca:43:f8:
                    d2:34:bd:66:8a:04:89:df:3d:85:92:3e:46:6d:76:
                    b7:b2:c8:af:0c:d4:d4:6a:33:90:b0:b7:d0:15:e6:
                    37:7b:2a:30:ea:0e:61:34:e7:d3:07:76:ab:52:3c:
                    ce:bc:8a:5e:c4:73:91:ab:23:ed:f7:df:d3:3a:88:
                    ff:2e:84:18:e4:04:3f:73:57:72:86:4a:b1:c9:3c:
                    89:3d:bf:41:98:9e:57:f8:b1:4a:a1:68:44:5d:f6:
                    20:16:f1:24:40:8f:20:95:2d:94:f5:26:29:b9:1c:
                    4a:8e:22:eb:2d:35:65:d6:44:96:25:31:eb:76:2c:
                    41:e0:eb:a3:f1:12:11:84:19:f7:ee:12:98:af:05:
                    38:f8:d0:56:37:2c:7e:7e:ee:2a:16:67:f3:b1:33:
                    b7:ff:3a:56:0e:90:ca:9c:be:02:85:5f:71:2e:12:
                    6d:a4:03:7e:3c:89:88:49:91:35:69:09:a5:ba:15:
                    e9:9f:96:9d:41:ba:9b:2c:df:6c:36:2a:f4:4a:76:
                    35:46:ae:1d:fe:57:42:ef:13:c9:3e:2a:a1:e2:e7:
                    90:08:b6:e1:3b:ae:aa:ad:7a:40:bd:7e:c6:8e:ee:
                    c8:3a:d5:5f:7f:f7:46:f5:91:af:d5:ff:e0:2c:76:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1C:81:A0:A0:93:E9:46:FF:4B:B3:94:63:DA:E9:13:24:D3:17:64
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:91:92:2a:67:38:8d:bf:35:a5:c9:d8:85:f0:6e:53:e1:
         6d:a2:e6:91:d6:86:3f:a9:c3:b3:73:8a:42:9e:b6:56:0c:cb:
         15:a6:32:da:a7:ec:a9:df:47:5f:7e:14:49:28:e4:a6:76:22:
         9f:86:5d:74:b5:39:40:cf:43:da:4e:41:62:1e:ba:64:f0:72:
         98:94:00:f7:59:62:b0:30:f9:b9:f3:5e:d4:92:3a:8d:1d:96:
         3e:0c:39:14:d1:5a:1f:21:cf:89:f8:70:76:2c:bf:3e:fc:65:
         f9:f5:71:d5:ea:04:73:9c:3c:b1:e3:bb:57:c1:0c:f2:4d:dc:
         56:a9:4f:b8:83:f4:4e:ce:cb:07:e3:c4:dd:d2:4c:9a:d0:9d:
         31:e7:3a:ac:30:8c:6a:ca:3a:86:29:d9:07:a6:72:0a:4a:15:
         e2:6a:d7:da:ba:b0:13:46:de:6b:7e:c6:b8:b4:4e:7a:e0:88:
         44:64:ed:cc:e0:c0:e8:84:46:2e:5a:cf:35:4d:48:f3:d1:e6:
         61:d7:05:67:3f:c5:c4:75:1c:45:9e:92:e9:eb:2e:b1:82:1b:
         45:90:7b:87:26:f9:5b:ed:26:cf:6c:71:e0:28:20:66:dd:d8:
         33:ef:02:dd:49:d0:16:31:e1:0a:72:fd:bf:90:f2:64:54:0c:
         c4:b4:63:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfgz0vdfd26GxwJohgUWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOWY4OThjZjc1ZGFmNjgwMDA5M2YyNTY3YWFmNzJhYTk4
NmUyOWMwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD
EyhhNzFjODFhMGEwOTNlOTQ2ZmY0YmIzOTQ2M2RhZTkxMzI0ZDMxNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9JFyw/a6rEv0QPKQ/jSNL1migSJ
3z2Fkj5GbXa3ssivDNTUajOQsLfQFeY3eyow6g5hNOfTB3arUjzOvIpexHORqyPt
99/TOoj/LoQY5AQ/c1dyhkqxyTyJPb9BmJ5X+LFKoWhEXfYgFvEkQI8glS2U9SYp
uRxKjiLrLTVl1kSWJTHrdixB4Ouj8RIRhBn37hKYrwU4+NBWNyx+fu4qFmfzsTO3
/zpWDpDKnL4ChV9xLhJtpAN+PImISZE1aQmluhXpn5adQbqbLN9sNir0SnY1Rq4d
/ldC7xPJPiqh4ueQCLbhO66qrXpAvX7Gju7IOtVff/dG9ZGv1f/gLHbpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKccgaCgk+lG/0uzlGPa6RMk0xdkMB8GA1UdIwQY
MBaAFI6fiYz3Xa9oAAk/JWeq9yqphuKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQt
YjNjZWM5ZDEwNjExLzEvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQtYjNjZWM5ZDEwNjEx
LzEvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO6Rkipn
OI2/NaXJ2IXwblPhbaLmkdaGP6nDs3OKQp62VgzLFaYy2qfsqd9HX34USSjkpnYi
n4ZddLU5QM9D2k5BYh66ZPBymJQA91lisDD5ufNe1JI6jR2WPgw5FNFaHyHPifhw
diy/Pvxl+fVx1eoEc5w8seO7V8EM8k3cVqlPuIP0Ts7LB+PE3dJMmtCdMec6rDCM
aso6hinZB6ZyCkoV4mrX2rqwE0bea37GuLROeuCIRGTtzODA6IRGLlrPNU1I89Hm
YdcFZz/FxHUcRZ6S6esusYIbRZB7hyb5W+0mz2xx4CggZt3YM+8C3UnQFjHhCnL9
v5DyZFQMxLRjbA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:51 2026 by rpki-client