This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
File:                     JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json)
Hash identifier:          ZVkzvmHDMKw3njDd4ICtInOZ8u67IUO6+MDzUbPJUEE=
Subject key identifier:   0B:92:CC:9D:55:AA:80:D6:40:6E:C7:B0:9F:3F:D0:F4:45:B3:DF:01
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Certificate issuer:       /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial:       019B1C858998E2ED7E9287B012A3C6CFCB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
Manifest number:          04E3
Signing time:             Sun 14 Dec 2025 11:01:12 +0000
Manifest this update:     Sun 14 Dec 2025 11:01:12 +0000
Manifest next update:     Mon 15 Dec 2025 11:01:12 +0000
Files and hashes:         1: 3fYim0ijqP_BPvrPAf718jkZRmQ.roa (hash: V0lFAiOFRTLCuEx4SmU/vGh5hARSPW9ZgXZlfAsOVf8=)
                          2: 5_wrTSOzkEFkkNCOm-aPJQ6g-ks.roa (hash: MnzABlRB9zAfXgr3KOIwgG+mPu7rINrzCKmSJs1qoHs=)
                          3: 8irZy2V_SHs0ikDlT3HoUGHPpBc.roa (hash: ktGCRrCCmdPPWWR6aei4/ftpTdWVZoIYkk/wJpTtUbs=)
                          4: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: TAWugEELHE2CzqZbbR/Nkkw/XbMO6AuNkodWxU6zrPg=)
                          5: LVAav_DbE0Bn_vYesALzQOtzKjY.roa (hash: 4RX3D3BO7OZGFhz2Gjt6JnBHkmsWj0HFcGJycXe3uBc=)
                          6: T_3CW91l4Ozg0UI-EMyAPQNoU_g.roa (hash: SMOplo2gA8wZUBwfetQvreWq71DhKQvNI+FZVh2vTrU=)
                          7: V0hiBKAD_2Rx16fFCpXLWp2vS2o.roa (hash: 257o80B1eNua34Ds30lc/JlpuCcz9SXDjJhL/EtWRiA=)
                          8: _M_h1-9zAN0bMB1vg7c8ROF5VAs.roa (hash: 8R7gKy3wzWC7YJoDHki/Obg/Smy+MMmINl0mUe/Kcmo=)
                          9: qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa (hash: uW0LUh4aX/A4RWhfxffVlViL65qqd1EWr8OCT6eFcKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:85:89:98:e2:ed:7e:92:87:b0:12:a3:c6:cf:cb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
        Validity
            Not Before: Dec 14 11:01:12 2025 GMT
            Not After : Dec 15 11:01:12 2025 GMT
        Subject: CN=0b92cc9d55aa80d6406ec7b09f3fd0f445b3df01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:7c:79:91:ce:4d:62:50:55:0e:8f:82:ea:
                    33:2a:17:48:28:77:f8:91:65:39:22:a2:43:cc:4b:
                    97:7e:b9:10:de:65:94:8f:7a:e8:6d:65:9e:cb:6a:
                    10:b5:c7:6c:65:f3:e5:cd:a1:59:bf:be:a9:70:70:
                    16:a7:d2:71:36:29:07:01:4a:95:ac:b2:b8:4c:b5:
                    03:c9:a8:84:df:29:40:52:df:fa:b9:3e:2b:28:73:
                    07:e1:7e:66:eb:73:07:15:ee:5e:8e:e0:71:f7:51:
                    d5:bb:98:68:8d:fc:2d:83:a5:fe:9f:47:ba:d8:26:
                    3f:1b:f9:53:87:8f:fc:0c:05:f0:b0:9c:6d:5b:2a:
                    8d:a1:b4:5c:42:fd:45:42:6b:37:44:7f:cb:00:8e:
                    c4:2c:e9:90:25:83:25:7e:dc:98:f6:7a:af:89:ee:
                    49:de:a3:2f:50:83:08:c4:17:8e:9a:0f:3b:ae:52:
                    6c:03:63:8e:b9:67:5f:6d:86:23:68:7f:6c:1c:f5:
                    a6:55:6a:8e:54:c2:bf:d7:76:c2:92:f3:5b:c8:5e:
                    2d:53:1f:c3:85:6c:06:9e:5f:39:45:17:7f:1e:97:
                    65:0f:3e:8d:f4:14:bf:e8:91:74:88:23:e1:6e:23:
                    ab:35:9c:53:65:0b:bc:93:5c:46:df:45:19:5f:3b:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:92:CC:9D:55:AA:80:D6:40:6E:C7:B0:9F:3F:D0:F4:45:B3:DF:01
            X509v3 Authority Key Identifier:
                keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:bd:46:ea:46:8d:20:ea:18:41:f4:cc:b4:6f:60:5e:00:
         1b:60:33:80:9b:de:d9:14:cd:e4:98:06:c2:4b:58:cc:91:f4:
         ee:94:6b:74:11:58:c5:14:07:ab:02:32:d9:39:39:3d:aa:52:
         c9:59:53:74:f3:d9:83:e3:55:0e:7a:4a:70:34:d4:ac:08:24:
         ed:c9:a1:ff:0f:c9:8b:2d:f4:e0:6f:24:80:69:8f:dc:be:19:
         57:09:7e:58:ef:6e:0c:da:21:86:85:5a:12:8e:6d:d1:15:ed:
         58:2a:bd:87:1b:c4:cf:17:39:3b:e9:2c:bf:e1:c6:0f:b0:89:
         6b:8b:34:98:aa:06:19:90:d1:70:d0:69:bf:b2:17:ef:a6:ff:
         2e:fa:a9:38:06:1e:12:62:1e:2e:85:3d:45:31:cd:ba:01:8f:
         f6:c2:d5:31:3b:c0:38:83:65:2d:ad:ee:62:4c:9d:45:21:57:
         3c:91:09:74:25:e1:d8:00:7b:96:ba:2f:94:45:12:ca:dc:94:
         f4:6a:2c:43:e1:73:61:b0:02:76:fc:c2:ed:22:96:46:9d:1e:
         08:5d:11:46:ea:35:4a:1c:ac:51:ec:20:dd:ac:9c:55:88:88:
         2d:07:6a:e9:28:28:bd:79:1f:c2:07:c6:dd:a8:8c:83:d8:73:
         be:c0:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 14:38:06 2025 by rpki-client