This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
File:                     190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft (raw, json)
Hash identifier:          iur1HU5j7eLiaOQa5FLKfawHunovxTLP+BGAiiTlTvg=
Subject key identifier:   F2:93:B2:0A:1D:C4:06:97:84:F3:8C:24:D5:6A:3C:D5:44:9A:57:90
Authority key identifier: 19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6
Certificate issuer:       /CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
Certificate serial:       459CD578536CB2CFA0330D3D248DB9114518C13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
Subject info access:      rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
Manifest number:          0100
Signing time:             Mon 26 Jan 2026 15:58:03 +0000
Manifest this update:     Mon 26 Jan 2026 15:53:03 +0000
Manifest next update:     Tue 27 Jan 2026 17:59:03 +0000
Files and hashes:         1: 190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl (hash: lyCHVVSVDxG3/8fWMyDoe6b1j+qT79ukiQw15Po7nXM=)
                          2: AS59920.asa (hash: Jh8KWCeTefIYAXmY/CIsRG+1sPr2U4Yt/QC477/8qdQ=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl
                          rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9c:d5:78:53:6c:b2:cf:a0:33:0d:3d:24:8d:b9:11:45:18:c1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
        Validity
            Not Before: Jan 26 15:53:03 2026 GMT
            Not After : Jan 27 17:59:03 2026 GMT
        Subject: CN=F293B20A1DC4069784F38C24D56A3CD5449A5790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:4a:74:d1:20:ae:a1:9f:33:c0:7b:a9:ba:
                    3d:c6:af:bb:7f:74:be:27:c3:ec:9b:db:5c:83:00:
                    fd:89:8c:cd:8a:19:fd:9d:79:ac:82:b6:9e:81:0e:
                    a1:63:a9:c6:e0:f0:c6:89:3f:c5:aa:cc:0a:88:55:
                    1f:f6:60:2b:e3:c3:74:7e:65:50:61:b5:a4:ee:81:
                    4f:bf:33:c8:36:e0:42:47:54:fc:16:b3:1e:e2:66:
                    fe:c0:5f:2f:80:6b:17:1f:57:c0:06:a2:a1:d2:8f:
                    61:50:de:3b:08:54:fb:68:1f:e8:fa:02:6c:5b:2a:
                    7b:ba:87:f3:a4:e6:2e:78:aa:15:75:cd:71:81:bd:
                    3f:68:17:7e:c5:85:4e:e5:e9:ce:c3:33:4f:f9:48:
                    51:0a:6f:f9:0c:bc:4a:b1:a5:37:77:59:38:0f:a2:
                    63:e2:39:54:65:79:d1:4d:bd:e7:90:fb:da:20:be:
                    bc:8f:6d:94:19:51:e2:ca:23:66:06:e9:7d:c7:1a:
                    a8:28:cd:81:e0:0f:22:f1:1a:e1:63:ad:53:f7:8c:
                    64:4d:46:a9:c8:51:cb:56:94:f6:65:de:1b:8c:0c:
                    3e:d4:63:e2:df:18:69:77:90:79:f5:b5:aa:61:82:
                    d3:4a:a5:ab:32:16:27:23:70:50:d0:99:37:73:41:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:93:B2:0A:1D:C4:06:97:84:F3:8C:24:D5:6A:3C:D5:44:9A:57:90
            X509v3 Authority Key Identifier:
                keyid:19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:be:38:5b:b8:d1:f6:84:44:26:9c:fe:95:32:90:bc:2d:63:
         94:ca:8a:c1:95:7b:fa:5f:d0:1d:f9:5e:68:4a:43:c6:21:06:
         41:e2:fd:47:9d:ba:a0:c2:66:f7:5b:5e:f4:d8:ad:d9:d2:30:
         b0:bd:b7:85:6e:bc:e0:b1:b5:1b:bf:9e:4f:34:19:d9:83:06:
         7f:d9:49:c0:f1:fa:2d:b8:9d:ae:5d:ce:65:63:8f:2b:8e:cd:
         21:8b:0d:d3:02:1c:9a:ca:ad:44:8e:0e:4b:01:40:7a:f8:67:
         4e:9b:56:39:80:6b:25:62:45:05:32:42:f5:96:b2:eb:d6:17:
         30:dd:7d:e1:df:ff:15:56:eb:5c:90:5a:74:65:10:de:e7:a9:
         d9:1a:af:e5:9b:7e:48:b4:85:d7:7c:3a:e3:05:d7:69:bd:c6:
         aa:d7:22:c2:e6:6c:a2:03:84:24:51:ac:d4:ea:7a:81:c0:c6:
         f0:f5:a9:7c:68:93:59:1f:a7:07:ab:75:e5:5a:ca:42:29:79:
         94:f6:bb:bf:30:1e:49:c6:47:da:d3:e0:17:3a:ed:9f:b1:20:
         4c:a8:40:e2:f1:11:a5:3e:07:7f:9b:c5:fe:d4:5a:c4:e3:57:
         e2:fd:9a:de:02:5f:e0:e7:81:92:dc:8c:8d:fb:34:82:7e:f2:
         a1:70:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:20:46 2026 by rpki-client