This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
File:                     190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft (raw, json)
Hash identifier:          6XyTDcCmoUdgCfIy1gs7IAPTtYS3rrNRiaz2kIGWxug=
Subject key identifier:   47:5B:87:4B:38:11:D2:C0:67:DB:09:E9:5E:92:5C:34:2C:10:E6:F4
Authority key identifier: 19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6
Certificate issuer:       /CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
Certificate serial:       0609B379A3D6B8CA318B6B838AD89DDBC5BBEE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
Subject info access:      rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
Manifest number:          CF
Signing time:             Sat 20 Dec 2025 19:57:09 +0000
Manifest this update:     Sat 20 Dec 2025 19:52:09 +0000
Manifest next update:     Sun 21 Dec 2025 23:36:09 +0000
Files and hashes:         1: AS59920.asa (hash: Jh8KWCeTefIYAXmY/CIsRG+1sPr2U4Yt/QC477/8qdQ=)
                          2: 190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl (hash: j0mu++u7xTUjuUUk9YqyTPZNSTzz/TM8GNnyzJWOqiY=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl
                          rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 23:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:09:b3:79:a3:d6:b8:ca:31:8b:6b:83:8a:d8:9d:db:c5:bb:ee:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190cfee850f309ddec01dc2b30b3d7a70d965ba6
        Validity
            Not Before: Dec 20 19:52:09 2025 GMT
            Not After : Dec 21 23:36:09 2025 GMT
        Subject: CN=475B874B3811D2C067DB09E95E925C342C10E6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:63:5c:2b:ef:b4:5b:7d:c5:4d:40:d2:19:
                    00:83:a2:18:3f:eb:e4:ad:33:6e:f1:c8:1e:8a:fe:
                    c6:42:15:e4:dc:3c:26:52:88:a7:a7:7f:ba:38:78:
                    b9:c3:86:c6:dd:ca:23:35:91:1a:dc:2c:9c:cc:fb:
                    98:dc:62:51:52:49:da:7d:bf:24:f7:e4:91:0d:25:
                    e0:91:9d:fb:4b:08:d2:72:9e:f0:18:88:fd:b7:27:
                    8b:eb:67:78:d7:1f:3a:aa:53:51:fb:c2:4d:0b:f4:
                    bc:8c:62:6a:cb:99:a7:18:eb:cc:d6:d6:22:a5:fc:
                    69:81:9f:87:e0:77:81:b1:eb:8f:23:66:f0:7b:25:
                    3a:34:64:4f:4e:84:80:b2:e9:3d:3c:21:4f:f1:5d:
                    bd:11:24:16:62:63:ed:6c:c7:d5:41:ef:80:14:02:
                    3e:c4:49:23:58:4e:95:70:8d:48:70:a5:a2:df:30:
                    0a:4a:47:c0:c0:90:e0:0a:5d:0c:a8:43:5c:36:48:
                    96:47:13:08:f7:2f:ee:b8:68:f1:2a:86:34:93:85:
                    1e:14:4f:3d:70:0f:3a:d9:2b:7a:ee:c0:72:c4:4e:
                    5e:13:36:bc:2a:84:9e:f1:00:52:5b:5c:9f:82:43:
                    1d:73:bd:eb:f5:6d:00:b8:b5:03:5b:af:d8:dc:26:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5B:87:4B:38:11:D2:C0:67:DB:09:E9:5E:92:5C:34:2C:10:E6:F4
            X509v3 Authority Key Identifier:
                keyid:19:0C:FE:E8:50:F3:09:DD:EC:01:DC:2B:30:B3:D7:A7:0D:96:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQz-6FDzCd3sAdwrMLPXpw2WW6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/lusory/0/190CFEE850F309DDEC01DC2B30B3D7A70D965BA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:e4:fd:7c:60:94:ce:22:41:bb:ee:7c:29:d3:35:ed:aa:
         5c:23:53:75:b2:70:99:cc:db:77:05:b4:af:ae:bd:8a:47:93:
         90:37:42:72:9b:89:3b:2f:75:a0:c3:6c:b0:dd:58:72:64:26:
         4b:81:d4:cf:22:66:dd:51:f3:cd:d6:70:48:27:05:77:a7:f0:
         52:11:f7:66:69:6d:f7:12:22:a6:b4:bd:bb:8b:22:52:fb:d7:
         4c:be:fb:95:e7:3d:88:c9:c8:12:cd:29:fc:98:ce:dc:44:cc:
         8c:ea:ea:e5:02:e9:32:50:a8:2d:93:0a:0e:01:25:40:bd:a6:
         4d:c9:a9:cc:9f:e5:61:56:72:45:cc:9a:d8:77:30:f8:6e:e8:
         78:e8:38:63:2a:c1:89:34:28:f5:ae:2c:d4:f9:75:90:e8:b6:
         1a:9d:31:a0:26:79:23:0b:bb:d4:35:65:6b:30:c9:23:be:e5:
         b6:9d:6b:13:cd:b1:5f:c3:3d:de:87:db:f2:8e:78:d5:cf:27:
         dc:d1:45:cd:95:dd:0e:ac:db:37:bd:c8:4d:cf:fb:7d:05:79:
         07:00:df:55:0b:8f:03:fc:51:93:f5:66:6d:d0:6c:4f:86:13:
         5c:e4:b7:34:4a:a9:6b:c4:8b:03:f4:9d:b4:5c:78:58:9e:f6:
         af:77:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:34:19 2025 by rpki-client