This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
File:                     2DC6464BC863F4B338647A68C390021651EE36B3.mft (raw, json)
Hash identifier:          sbRsvrH2GOyIvDGQwplpnwjxabueiQ6xm8NdGTjGUls=
Subject key identifier:   A8:AB:C5:9F:16:9D:14:5A:DB:B2:E0:1F:CD:A1:D8:82:B3:17:85:F3
Authority key identifier: 2D:C6:46:4B:C8:63:F4:B3:38:64:7A:68:C3:90:02:16:51:EE:36:B3
Certificate issuer:       /CN=2DC6464BC863F4B338647A68C390021651EE36B3
Certificate serial:       70AF3CD65B9070586CAC03B836F247BA3CB4B2F6
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/2DC6464BC863F4B338647A68C390021651EE36B3.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
Manifest number:          0289
Signing time:             Sat 06 Dec 2025 02:15:08 +0000
Manifest this update:     Sat 06 Dec 2025 02:10:08 +0000
Manifest next update:     Sun 07 Dec 2025 04:57:08 +0000
Files and hashes:         1: 326131343a3763343a3a2f33322d3332203d3e2030.roa (hash: DvK3+OsZtXBuuWX645HJ8LJ2R44gA1brMiNGMLENOQ0=)
                          2: 2DC6464BC863F4B338647A68C390021651EE36B3.crl (hash: lqbPbpOMCa7LSOVQdQQEFcytQkyMThtbI/ZltSI76CQ=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.crl
                          rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/2DC6464BC863F4B338647A68C390021651EE36B3.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:af:3c:d6:5b:90:70:58:6c:ac:03:b8:36:f2:47:ba:3c:b4:b2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC6464BC863F4B338647A68C390021651EE36B3
        Validity
            Not Before: Dec  6 02:10:08 2025 GMT
            Not After : Dec  7 04:57:08 2025 GMT
        Subject: CN=A8ABC59F169D145ADBB2E01FCDA1D882B31785F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7a:f3:57:3b:f6:10:61:63:f7:5c:8c:24:a9:
                    28:8b:15:78:3a:37:d6:d8:ed:b1:d9:2b:2c:c9:b0:
                    67:dd:94:d0:37:1a:4f:2f:a8:e8:89:0c:99:3c:02:
                    b7:83:df:08:4a:31:ee:7d:b3:5f:f4:bb:91:65:2f:
                    8f:9f:30:4c:1a:67:75:24:c3:30:ff:0f:42:d6:6a:
                    7d:b9:1a:ef:ae:b6:73:72:93:89:85:a1:e2:29:a8:
                    5f:a4:b3:9d:8d:cb:86:89:b7:60:58:5d:fb:05:8e:
                    e0:ee:ad:a0:a9:ee:7a:72:76:01:e1:9d:f3:b2:ad:
                    d9:40:e7:da:6f:5e:18:3e:28:3d:f9:cb:30:c0:88:
                    2f:85:2f:c4:e0:fd:79:33:60:e7:88:3f:34:c4:44:
                    1d:df:4b:8b:5d:c5:0c:9d:a2:f0:d6:e0:30:6f:7d:
                    9a:71:5c:65:10:3f:7d:f4:35:92:63:c0:81:07:ce:
                    48:f3:40:0b:28:d1:34:19:cd:50:8a:f0:8a:1f:a2:
                    59:0f:63:bc:8e:39:31:02:27:4a:57:be:92:69:36:
                    1d:ec:47:c7:8d:b0:90:77:f8:92:ea:f0:c5:e2:0a:
                    84:0f:31:d8:05:97:36:7e:d3:d5:55:d1:fc:3f:57:
                    7e:fa:c5:f2:39:f7:a3:37:6d:d1:70:c1:67:4f:9b:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AB:C5:9F:16:9D:14:5A:DB:B2:E0:1F:CD:A1:D8:82:B3:17:85:F3
            X509v3 Authority Key Identifier:
                keyid:2D:C6:46:4B:C8:63:F4:B3:38:64:7A:68:C3:90:02:16:51:EE:36:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/2DC6464BC863F4B338647A68C390021651EE36B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4c:7c:a7:b6:6e:af:8a:9f:9e:2e:68:61:b5:6d:dc:d7:30:
         87:96:05:56:42:59:da:a3:8f:83:7c:44:98:7f:04:42:e3:e8:
         11:87:21:00:41:eb:e2:ee:02:f4:a3:21:a8:9d:a3:90:5f:1b:
         af:eb:5b:01:5a:98:85:af:1d:cc:34:31:da:8f:30:33:80:c2:
         41:67:05:98:39:0c:0d:c4:2d:8b:31:6a:ad:1f:4c:fd:2a:3c:
         04:f6:c6:d5:38:ba:4b:a1:6f:6b:1f:5d:6f:9e:5a:17:8a:90:
         b6:4a:cd:fd:a1:78:39:35:ed:af:3f:aa:85:99:2f:f3:79:4e:
         ff:6e:5a:4b:01:10:3b:c2:5e:b9:33:c5:57:f9:ea:ce:9d:4b:
         39:2a:89:9a:35:7c:a2:f3:01:06:f9:5c:c6:5e:b2:2d:b7:57:
         c8:ed:f0:48:0c:39:07:c6:5f:0b:70:c2:6d:c1:69:86:1d:92:
         e6:14:a7:16:85:a3:f7:b3:93:7c:a9:cc:3c:9b:5a:1c:57:bc:
         c4:18:30:ec:bb:b8:be:b5:7d:e7:bd:75:b9:f3:b2:3b:99:0f:
         61:a8:03:63:8c:02:29:86:23:6d:07:51:79:27:9f:ef:77:f5:
         74:61:82:a0:88:be:ca:e3:06:8a:9a:0e:88:08:5b:6f:c8:02:
         a1:9b:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:36:39 2025 by rpki-client