This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
File:                     CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft (raw, json)
Hash identifier:          Y4MaeuwHjGFz/SZCnNZfIB/o8uLQnRKdr4lqWDII01U=
Subject key identifier:   CA:2E:E2:6C:72:5F:8C:7D:29:A4:56:5D:52:B1:F9:29:78:47:8F:69
Authority key identifier: CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Certificate issuer:       /CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Certificate serial:       5F13331FC004825C87E2113214244FD534CF2CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
Manifest number:          03CA
Signing time:             Sat 24 Jan 2026 23:37:32 +0000
Manifest this update:     Sat 24 Jan 2026 23:32:32 +0000
Manifest next update:     Mon 26 Jan 2026 01:25:32 +0000
Files and hashes:         1: 323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa (hash: hpNbvieiBxQCZ+RF4CfbUfbEcDLWbpQFtRZ8j1V9k6g=)
                          2: 323030313a3637633a6238383a3a2f34382d3438203d3e20323130373631.roa (hash: gCkKOnxFjxxQuyxsmkIuFDYUOSkhKIumzrDy3kvYaVo=)
                          3: CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl (hash: lsmbx84vpAsL3WWcYK1mn0FN6CePoQ5ITU2CTXQk4/I=)
                          4: AS56762.asa (hash: WmRRzlNJ90g6dNVVxEyUbBfbgxTGcH/JWVC9rCgurlg=)
                          5: 323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa (hash: nCM80PGcTZ8NfHgTx4k0jvV9j2He3nniamGJvbamKBc=)
                          6: 323030313a3637633a6238383a3a2f34382d3438203d3e203536373632.roa (hash: YWJxHIHWRUFPkTTQOOQtlfptKffGhKBP38j4lAddJyo=)
                          7: 323030313a3637633a6239303a3a2f34382d3438203d3e203437363839.roa (hash: rmFr1hAbwp39CaAvWfjI/9YJfehtGtyr7FIprJIz55E=)
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl
                          rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:13:33:1f:c0:04:82:5c:87:e2:11:32:14:24:4f:d5:34:cf:2c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
        Validity
            Not Before: Jan 24 23:32:32 2026 GMT
            Not After : Jan 26 01:25:32 2026 GMT
        Subject: CN=CA2EE26C725F8C7D29A4565D52B1F92978478F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ef:e4:81:df:d3:d9:97:bd:d3:56:2f:b0:3b:
                    a8:0f:da:a9:ac:7f:39:e0:2b:67:69:17:8b:c4:e5:
                    1e:2e:fc:c2:4b:ea:ea:e3:36:ae:45:a7:3d:0b:54:
                    6c:aa:f9:96:59:92:67:99:48:11:1e:92:13:80:33:
                    2d:e8:2a:cc:f8:4f:35:2d:bd:e7:24:83:f1:d4:14:
                    b6:77:94:ab:17:d0:fc:af:c6:dc:cb:df:d8:45:14:
                    4a:d2:0e:a6:29:7a:c6:94:d4:46:90:ea:0c:16:0b:
                    d4:60:89:71:c0:69:df:03:7c:cc:36:dd:c7:a6:87:
                    5b:5e:d1:42:14:e3:f6:66:05:6c:f3:be:18:84:a0:
                    d6:11:6c:f4:b7:5f:04:52:98:b8:98:7c:ca:52:2d:
                    b3:0a:1b:21:04:43:9c:fe:3f:a6:58:f4:3e:32:43:
                    70:f2:f9:fc:28:48:8f:2e:07:58:57:84:75:18:bc:
                    5b:7c:d4:ee:c8:6e:eb:1e:07:b9:bb:f8:23:29:1f:
                    80:0f:d4:aa:46:30:cd:a9:7b:fc:6b:b5:b9:59:45:
                    00:24:d1:38:35:fe:04:78:9b:8f:0c:de:89:97:cb:
                    f9:1f:6c:be:79:b5:34:e4:6e:34:38:f3:ec:34:de:
                    a8:d0:de:89:a2:c1:3b:8c:6c:d6:21:40:d7:58:94:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2E:E2:6C:72:5F:8C:7D:29:A4:56:5D:52:B1:F9:29:78:47:8F:69
            X509v3 Authority Key Identifier:
                keyid:CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:11:ed:49:8e:95:57:46:7a:f1:6f:6b:f0:ba:6d:f0:5c:0f:
         bc:4d:a4:7e:1c:99:a9:e5:75:c9:21:59:10:7a:57:02:da:f3:
         be:ba:33:26:5b:73:d4:a9:95:52:f9:cd:dc:77:5a:a7:52:a8:
         09:45:d9:64:93:0a:7b:29:be:3b:87:ba:64:0a:ec:4d:9c:54:
         0c:c1:ec:6f:99:5a:ac:6b:20:14:ef:a1:30:e2:01:35:ec:8b:
         01:9b:5d:0b:62:d3:9c:6f:7d:a7:d6:24:59:55:c0:32:06:2e:
         aa:57:f3:b1:53:ba:82:f8:28:99:1f:69:7b:60:99:a6:ee:4b:
         29:d2:cf:aa:e5:93:b1:c0:34:c2:b1:9e:1a:85:14:75:5c:a5:
         88:2f:3b:48:e5:99:f5:ce:76:c5:73:b2:b5:9f:0e:8c:aa:12:
         a4:e0:f5:32:50:36:fa:f7:46:3a:f4:54:56:0f:2a:5e:cd:8d:
         76:34:e8:81:09:e8:27:a3:b3:65:a5:8b:12:8c:3b:cf:4d:4c:
         d0:1c:78:53:28:8c:4c:1d:de:71:03:c8:72:0e:e1:41:69:4f:
         c5:d7:3e:07:b4:a4:ec:fe:c1:72:75:90:a7:40:0f:87:c1:1c:
         05:b6:d6:75:a7:22:db:a3:9d:21:e5:09:0e:97:c6:c7:7e:70:
         e1:91:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:25:58 2026 by rpki-client