This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft
File:                     2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft (raw, json)
Hash identifier:          aCRzUT48xvHoJkuqjMQ4Puw2gp4/UMLyGO1BExwRArQ=
Subject key identifier:   BA:A2:68:AD:80:61:1C:4D:32:82:C1:0F:97:6E:78:56:32:EC:95:AB
Authority key identifier: 2C:BF:9F:5D:26:01:FC:AA:FF:FB:D2:B4:EE:03:3F:47:4A:72:63:52
Certificate issuer:       /CN=2cbf9f5d2601fcaafffbd2b4ee033f474a726352
Certificate serial:       5B691FEFA14D250D143F4BFA303E00AEC591E4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer
Subject info access:      rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft
Manifest number:          0232
Signing time:             Fri 05 Dec 2025 13:40:28 +0000
Manifest this update:     Fri 05 Dec 2025 13:35:28 +0000
Manifest next update:     Sat 06 Dec 2025 16:34:28 +0000
Files and hashes:         1: AS200160.asa (hash: YkEawgXVK1yS33W5NnNVrW7XRyhKwfTKqw0dcB1Aluk=)
                          2: 2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl (hash: Rrw+vHf15GvFVf05iKCFCwMgWVh7EjZtMhCG904Pjd0=)
Validation:               OK
Signature path:           rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl
                          rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 16:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:69:1f:ef:a1:4d:25:0d:14:3f:4b:fa:30:3e:00:ae:c5:91:e4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbf9f5d2601fcaafffbd2b4ee033f474a726352
        Validity
            Not Before: Dec  5 13:35:28 2025 GMT
            Not After : Dec  6 16:34:28 2025 GMT
        Subject: CN=BAA268AD80611C4D3282C10F976E785632EC95AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:e8:5b:40:e5:e3:7e:16:68:00:fe:32:33:
                    b1:bf:8f:95:b4:d7:08:df:3c:28:34:ac:3c:72:45:
                    3f:cd:1b:6f:48:df:5b:cf:d1:c5:88:40:07:56:df:
                    a3:1c:26:5c:ba:95:e9:2f:0d:10:31:6c:02:40:6b:
                    92:a0:3f:a5:c4:1f:b7:38:c2:07:99:03:cd:6f:43:
                    b4:4a:d8:50:5d:67:65:5b:c0:e5:63:6f:a2:54:2d:
                    6b:e4:67:a4:24:32:72:59:5f:bf:4b:1a:01:fb:a3:
                    cf:d7:fe:9e:19:2d:50:a3:b8:19:91:b5:80:09:3f:
                    0e:75:2e:60:0e:8e:15:3e:db:ae:64:f4:9d:62:65:
                    ea:57:f1:27:83:47:68:10:2c:0e:89:aa:42:ce:72:
                    e1:10:fc:b8:3d:fc:21:0b:31:67:1a:af:9c:e0:54:
                    71:3a:d8:a5:53:cf:cc:2d:f3:ca:ba:4b:f2:f9:5e:
                    82:09:fb:91:01:df:ed:4c:6f:2e:04:c9:a6:89:78:
                    d4:8e:ac:4a:d4:8e:8e:5c:2b:f6:e8:74:eb:03:df:
                    e9:be:41:bd:82:61:63:a4:6f:9e:bf:27:4a:3f:15:
                    22:57:1b:4e:2b:1f:c1:29:eb:f0:a7:87:a8:f0:9d:
                    83:8d:70:0e:5e:28:04:5f:3e:27:d5:26:42:63:5b:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A2:68:AD:80:61:1C:4D:32:82:C1:0F:97:6E:78:56:32:EC:95:AB
            X509v3 Authority Key Identifier:
                keyid:2C:BF:9F:5D:26:01:FC:AA:FF:FB:D2:B4:EE:03:3F:47:4A:72:63:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:19:c3:a4:78:10:b6:5d:2b:cd:3d:e1:81:33:17:38:41:c4:
         78:f6:90:3a:58:db:f1:1b:4a:44:1f:e9:56:4a:b3:f4:a9:71:
         ef:87:33:50:e3:f0:ef:56:59:4f:72:c9:8e:fa:6a:d7:bf:6a:
         8a:3a:18:61:f4:fb:75:c9:31:2c:c8:03:ce:90:c4:61:e6:32:
         42:d8:cb:6b:68:9c:6d:db:66:86:39:fb:dc:84:41:ec:97:a9:
         91:c0:0d:69:ab:9d:f9:9f:9f:92:ae:c7:8a:f3:b8:95:59:3b:
         ff:00:93:dc:65:e4:1c:09:65:86:54:47:1a:3e:d2:09:3e:19:
         63:ec:8e:4a:85:b1:48:50:51:f9:af:9c:5a:a4:e9:5c:12:4c:
         4d:b2:85:17:a1:30:d0:74:63:7a:da:81:75:0f:5f:f6:6d:8c:
         6d:21:7b:5a:db:ca:71:c7:52:ab:26:8a:8d:4f:2d:ac:bd:01:
         ea:0f:cc:3a:0d:14:8d:88:d0:73:18:3d:dc:a4:fd:d0:52:26:
         bd:2b:4b:88:18:61:a7:b3:38:8e:43:c2:6e:fe:d3:1d:65:4a:
         f5:62:f9:52:68:d3:40:14:ef:4f:e9:a1:28:ea:b7:49:1e:3a:
         7e:17:86:44:78:59:47:89:26:e5:6d:4f:10:ce:3e:6f:0a:7f:
         c6:b3:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:03:45 2025 by rpki-client