This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
File:                     45FAD4649403F24502E9C3FA40103955BC3B5924.mft (raw, json)
Hash identifier:          zsOl2vH9ziSnbx/wZ6jS6guiWwAlQDOnkzGrDleDi3s=
Subject key identifier:   27:04:57:D2:09:0B:18:78:99:93:FD:6E:BF:3A:6F:BD:1E:B1:AE:B0
Authority key identifier: 45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24
Certificate issuer:       /CN=45fad4649403f24502e9c3fa40103955bc3b5924
Certificate serial:       6ED053159DCF9FCBE84008A4FCD2A047028E367B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
Manifest number:          03AF
Signing time:             Fri 05 Dec 2025 21:33:09 +0000
Manifest this update:     Fri 05 Dec 2025 21:28:09 +0000
Manifest next update:     Sun 07 Dec 2025 01:11:09 +0000
Files and hashes:         1: AS205848.asa (hash: B26kO7Xb7jywshCeazF2haISy3OkHcFpl7lXLMxTwNA=)
                          2: 45FAD4649403F24502E9C3FA40103955BC3B5924.crl (hash: hJu19XBoaD+aRcJEdynffnwdR5tMKUtKSJssQHVkGiA=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d0:53:15:9d:cf:9f:cb:e8:40:08:a4:fc:d2:a0:47:02:8e:36:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fad4649403f24502e9c3fa40103955bc3b5924
        Validity
            Not Before: Dec  5 21:28:09 2025 GMT
            Not After : Dec  7 01:11:09 2025 GMT
        Subject: CN=270457D2090B18789993FD6EBF3A6FBD1EB1AEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:a3:84:36:cc:69:da:25:da:62:d1:27:23:
                    31:16:a2:50:22:45:ec:32:e1:93:16:92:34:da:ff:
                    7a:20:76:20:77:7a:79:66:22:86:1e:69:ff:5b:7f:
                    d3:fc:b1:8c:5c:85:4f:24:d2:d6:23:9a:2d:8a:88:
                    4b:a9:53:8d:84:91:4b:a9:93:d4:1d:f0:8f:1f:cb:
                    22:ae:05:6d:75:47:8f:9f:d4:bf:0f:d6:36:11:71:
                    63:4e:04:8f:87:08:6b:55:ba:3b:67:bc:1c:ee:1d:
                    16:e2:d6:5b:14:64:fa:84:36:4d:fd:07:23:00:c3:
                    c8:49:05:4a:a5:ba:28:44:1c:55:75:d1:5e:4f:1e:
                    1f:bc:fb:4f:06:35:74:02:87:cf:78:b7:3b:d1:55:
                    24:da:05:9c:67:28:46:bc:5d:47:80:52:c7:b3:bc:
                    dc:db:d8:fe:3b:84:ef:e1:13:5d:50:00:34:a3:73:
                    c0:1c:f4:9e:62:32:34:35:b4:60:12:63:71:15:e4:
                    72:87:23:dd:0c:ce:86:bd:4c:07:6c:e6:a8:c6:af:
                    6b:71:cd:b7:5c:3b:6c:97:88:44:ac:74:06:63:c6:
                    8b:97:93:cc:2b:c7:e7:b6:5c:b8:41:6c:b9:37:71:
                    c4:3c:81:2b:37:61:4a:0a:75:1e:ef:86:a5:0f:a7:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:57:D2:09:0B:18:78:99:93:FD:6E:BF:3A:6F:BD:1E:B1:AE:B0
            X509v3 Authority Key Identifier:
                keyid:45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:12:74:85:53:85:fa:6e:fb:ab:23:d8:85:5e:57:3e:05:bf:
         aa:c1:ea:31:00:fa:d4:64:f1:2a:a2:c5:9e:5b:eb:e6:7a:5d:
         94:14:41:e5:12:28:8a:a6:35:cb:d0:28:08:15:aa:62:fd:31:
         77:25:70:18:76:54:19:82:bf:e5:c0:70:85:d5:c2:c2:8f:ac:
         4c:22:f8:37:2d:26:60:ef:88:76:e1:fe:a3:b3:af:6f:01:f8:
         0c:ea:13:04:60:9a:2a:3f:ca:5d:7e:7f:34:fa:df:5e:60:11:
         d0:76:82:21:56:70:0b:82:65:15:64:43:34:25:66:5a:ee:50:
         c9:b8:6e:7a:5d:54:8b:23:eb:78:8d:dd:09:82:21:a7:54:52:
         c8:4e:e0:0a:bf:33:62:29:28:d5:0b:73:92:bf:3f:84:c9:ad:
         6f:7d:e2:d3:a4:b1:dd:7e:2e:8e:40:a9:3a:e9:8f:41:62:7f:
         97:50:5a:74:56:17:a1:a6:b5:c8:58:10:b1:ad:0d:9f:93:cd:
         e8:a8:97:cc:cc:a5:dd:06:df:6c:e7:01:c2:76:17:58:bd:b7:
         21:fc:e4:9e:44:d3:d4:3b:33:50:79:ba:82:4f:ae:40:b4:38:
         17:ee:01:c5:10:a4:1e:7f:66:f2:a9:1e:bb:cd:39:fd:65:ed:
         df:c5:d0:a9
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUbtBTFZ3Pn8voQAik/NKgRwKONnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVmYWQ0NjQ5NDAzZjI0NTAyZTljM2ZhNDAxMDM5NTVi
YzNiNTkyNDAeFw0yNTEyMDUyMTI4MDlaFw0yNTEyMDcwMTExMDlaMDMxMTAvBgNV
BAMTKDI3MDQ1N0QyMDkwQjE4Nzg5OTkzRkQ2RUJGM0E2RkJEMUVCMUFFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeqOENsxp2iXaYtEnIzEWolAi
Rewy4ZMWkjTa/3ogdiB3enlmIoYeaf9bf9P8sYxchU8k0tYjmi2KiEupU42EkUup
k9Qd8I8fyyKuBW11R4+f1L8P1jYRcWNOBI+HCGtVujtnvBzuHRbi1lsUZPqENk39
ByMAw8hJBUqluihEHFV10V5PHh+8+08GNXQCh894tzvRVSTaBZxnKEa8XUeAUsez
vNzb2P47hO/hE11QADSjc8Ac9J5iMjQ1tGASY3EV5HKHI90Mzoa9TAds5qjGr2tx
zbdcO2yXiESsdAZjxouXk8wrx+e2XLhBbLk3ccQ8gSs3YUoKdR7vhqUPpw+3AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUJwRX0gkLGHiZk/1uvzpvvR6xrrAwHwYDVR0j
BBgwFoAURfrUZJQD8kUC6cP6QBA5Vbw7WSQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5zbi1wLmlvL3JlcG8vc24tcC1pby8x
LzQ1RkFENDY0OTQwM0YyNDUwMkU5QzNGQTQwMTAzOTU1QkMzQjU5MjQuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9SZnJVWkpRRDhrVUM2Y1A2UUJBNVZidzdXU1Eu
Y2VyMGwGCCsGAQUFBwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly9ycGtpLnNu
LXAuaW8vcmVwby9zbi1wLWlvLzEvNDVGQUQ0NjQ5NDAzRjI0NTAyRTlDM0ZBNDAx
MDM5NTVCQzNCNTkyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBANYSdIVThfpu+6sj2IVeVz4Fv6rB6jEA
+tRk8SqixZ5b6+Z6XZQUQeUSKIqmNcvQKAgVqmL9MXclcBh2VBmCv+XAcIXVwsKP
rEwi+DctJmDviHbh/qOzr28B+AzqEwRgmio/yl1+fzT6315gEdB2giFWcAuCZRVk
QzQlZlruUMm4bnpdVIsj63iN3QmCIadUUshO4Aq/M2IpKNULc5K/P4TJrW994tOk
sd1+Lo5AqTrpj0Fif5dQWnRWF6GmtchYELGtDZ+Tzeiol8zMpd0G32znAcJ2F1i9
tyH85J5E09Q7M1B5uoJPrkC0OBfuAcUQpB5/ZvKpHrvNOf1l7d/F0Kk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:05:34 2025 by rpki-client