This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
File:                     190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft (raw, json)
Hash identifier:          pqHzB8xmqXrJEMh58IMNkE/Wsal9ZhMZIWN8oJopvrM=
Subject key identifier:   B5:EF:4E:6D:F3:D0:AC:14:E7:B7:C0:CD:FE:54:C4:DF:CA:96:40:58
Authority key identifier: 19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6
Certificate issuer:       /CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
Certificate serial:       41A9E4227B15F690AB1BB97DBB162AA1E507E222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
Subject info access:      rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
Manifest number:          C2
Signing time:             Thu 11 Dec 2025 08:12:09 +0000
Manifest this update:     Thu 11 Dec 2025 08:07:09 +0000
Manifest next update:     Fri 12 Dec 2025 10:04:09 +0000
Files and hashes:         1: 190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl (hash: qqpWHmdqALXPIwZ5ghWUR+Ljiy7bJUEisHLMZ/sZq8M=)
                          2: AS59920.asa (hash: Jh8KWCeTefIYAXmY/CIsRG+1sPr2U4Yt/QC477/8qdQ=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl
                          rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 10:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a9:e4:22:7b:15:f6:90:ab:1b:b9:7d:bb:16:2a:a1:e5:07:e2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
        Validity
            Not Before: Dec 11 08:07:09 2025 GMT
            Not After : Dec 12 10:04:09 2025 GMT
        Subject: CN=B5EF4E6DF3D0AC14E7B7C0CDFE54C4DFCA964058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:28:fb:22:92:f4:66:75:7d:16:2a:a0:18:
                    90:eb:f6:ac:84:26:9b:b4:59:dd:e6:79:29:57:52:
                    c1:46:40:26:51:57:b3:9f:98:5f:14:9f:00:b6:99:
                    5a:17:14:38:a7:16:5e:ba:0b:02:e9:75:f1:7f:36:
                    dd:4b:32:b4:e5:08:12:5b:40:b9:df:d1:ca:e9:ea:
                    1e:57:64:ee:c3:e0:75:98:22:1e:d8:ed:d9:51:30:
                    42:58:27:0c:53:79:b1:87:fc:4a:8c:11:38:ae:3b:
                    92:60:27:be:27:5d:5e:01:80:a2:89:18:b6:02:9f:
                    27:22:56:54:ee:1f:1b:54:a4:b5:63:66:53:fa:91:
                    fd:f2:4e:b5:89:89:e2:7b:ed:1a:f1:4c:a7:a9:fb:
                    33:e6:d0:36:73:77:f9:af:b5:3e:10:3e:c3:6b:5a:
                    91:46:79:48:9b:61:ea:98:7d:e7:f5:7d:52:92:86:
                    65:07:3d:d1:9d:fa:15:67:a8:f8:b4:a5:f4:56:79:
                    13:89:b8:c2:84:4e:7e:c1:da:e5:4e:09:c3:01:c3:
                    90:be:a4:bd:9a:02:cb:d3:3c:6b:0b:c1:93:e0:70:
                    96:75:4d:8b:84:4b:a5:31:50:cf:97:38:80:29:32:
                    af:1e:27:7e:c2:fd:56:40:f2:37:00:63:10:68:2c:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:4E:6D:F3:D0:AC:14:E7:B7:C0:CD:FE:54:C4:DF:CA:96:40:58
            X509v3 Authority Key Identifier:
                keyid:19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bc:24:29:9f:f5:8c:d1:d6:aa:29:f9:0d:8c:17:75:b1:07:
         ee:c6:cc:2a:28:e7:a3:05:67:71:25:ba:17:f4:df:58:f3:4d:
         ae:1e:e6:6b:3e:0a:e5:db:88:b4:2a:59:f5:7d:52:bc:cd:a5:
         b8:48:46:f0:2d:7c:35:30:f6:a9:1b:37:b7:ed:44:18:a4:ad:
         1b:dc:fb:39:c7:32:04:06:f8:bb:3d:ab:ea:c5:31:b3:e9:ae:
         c8:58:68:b0:d2:12:a1:ab:73:d0:ea:21:4e:d1:f2:74:b0:92:
         bd:cc:bd:a3:15:1b:e4:be:63:ba:b9:8f:d4:ac:f1:c9:9e:b3:
         12:ce:dc:e0:ef:6e:6e:b3:15:8f:e5:f2:e1:04:13:6b:cd:a6:
         d4:7b:ee:fb:63:14:65:4c:4a:83:d6:b4:30:b9:1e:dc:92:25:
         b4:85:0f:18:04:bc:46:bd:8c:19:ad:2b:61:e3:8b:fc:51:f0:
         e6:e9:52:d7:c5:0e:f4:00:3a:b4:44:30:a1:d9:76:b6:66:7a:
         1e:77:c8:fd:86:94:f4:2e:c4:e8:74:f7:1b:db:cb:4c:3a:c2:
         74:32:bb:03:4f:43:b1:d5:09:99:8e:1d:f9:be:b1:2c:c5:bd:
         91:4f:28:c9:2b:21:6c:21:94:4d:aa:78:06:81:cc:42:e0:38:
         6f:59:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:34:05 2025 by rpki-client