This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
File:                     8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft (raw, json)
Hash identifier:          f5C6/qJqAn29t0ZNxrOPPOeV9laYc86QSamFnBhNfiw=
Subject key identifier:   9C:86:EC:17:89:C6:6E:B8:50:A5:ED:84:3C:CC:1D:E1:90:11:DA:60
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       47318CE66B632CE7BF41FA82D10A18CDACA0E54C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
Manifest number:          DC
Signing time:             Sat 06 Dec 2025 01:18:09 +0000
Manifest this update:     Sat 06 Dec 2025 01:13:09 +0000
Manifest next update:     Sun 07 Dec 2025 02:07:09 +0000
Files and hashes:         1: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: htr7q3jqwGtRhcinI8choYJGldgn6DHWcxEmRIqoS04=)
                          2: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: r2TeINFddDk6FLNy1P02Sojy5Y0A05B3sX9lm7yGZIc=)
                          3: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: DCknWSFkXEL9nevlPCXr7YdoenSsMMYUI7/Zj/O4jvs=)
                          4: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: Hbng6Qs3gtMCfgNOvlhVaZG81qH5D1zb+3kXz9K52lY=)
                          5: 326130363a313238323a3a2f33322d3438203d3e2030.roa (hash: vJ0qkMWpV2OnLAFXaBz+BxlK7kNKmj7zan157wdGWzQ=)
                          6: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: ONwiyOYFzhgKKPFJfWzCUzPFz/scs7X8q3Hvxa24A0Y=)
                          7: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: tycFKYP/anx2JiNOOjsQ3oPM2wjVx4azas7m8j+efRE=)
                          8: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: XXcmCcNAJFyusTP4fLJdInjZVJsyLkvh3OAm7Ll9RAg=)
                          9: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: ysQzKr2LfpHKgKtqaoHWNDP3ZdvLo0/OVzWjgd0/KDE=)
                          10: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: XIquqk5eatu7MDG7vJzzV3gWKxyFgt5TX70n+ScWh0Y=)
                          11: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl (hash: 7Bj6/XplD4Lt/77B53zbsjfbIc0irDcFRgLkuBCnzDY=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:31:8c:e6:6b:63:2c:e7:bf:41:fa:82:d1:0a:18:cd:ac:a0:e5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Dec  6 01:13:09 2025 GMT
            Not After : Dec  7 02:07:09 2025 GMT
        Subject: CN=9C86EC1789C66EB850A5ED843CCC1DE19011DA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:e5:d1:5a:49:f1:62:cf:dc:d3:47:86:61:
                    73:e8:48:a1:b4:27:cb:57:38:75:42:95:9f:87:3d:
                    82:71:1f:1c:73:4c:51:44:88:be:cb:6d:20:3b:37:
                    2b:90:65:39:d0:db:1e:33:36:2d:5b:2d:06:b6:cd:
                    8a:3f:d2:d8:2b:ca:7d:cd:c6:fa:5a:a7:33:2e:8d:
                    e7:51:f8:3f:05:6f:75:e3:86:20:1d:5e:4a:04:9d:
                    80:43:3c:74:b5:7a:4c:a8:12:86:f7:20:61:74:19:
                    56:96:3a:60:a6:67:85:21:3e:a2:91:4f:81:00:b7:
                    53:11:53:33:96:4a:7d:d8:a9:ee:e7:6f:95:de:73:
                    fc:32:71:ea:e4:11:ed:c5:f3:91:09:95:00:1d:9f:
                    32:47:4c:a6:93:d5:e5:8d:ec:9f:f3:a0:dd:53:62:
                    5f:9b:6e:8b:83:ae:ec:69:aa:1b:b8:22:14:4e:5c:
                    0b:f1:9c:97:13:0d:e3:b2:26:b2:1a:37:9d:84:a6:
                    e0:f3:84:e2:8a:5c:e9:89:2d:9a:45:76:f0:3a:33:
                    0c:95:98:ad:a2:61:33:e7:37:a0:a4:e4:9c:d0:35:
                    5d:b2:52:ee:55:fa:c0:af:28:6a:1d:d8:5e:91:cd:
                    11:0e:43:6a:66:7e:29:99:84:4f:dd:76:1a:2f:0a:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:EC:17:89:C6:6E:B8:50:A5:ED:84:3C:CC:1D:E1:90:11:DA:60
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:01:59:cc:df:28:95:a1:9a:2a:50:6c:b8:f2:48:73:98:6e:
         53:3d:32:50:3f:c8:ef:ab:3d:9b:1a:05:87:31:1e:3d:1b:c6:
         3c:05:db:6d:6d:fb:07:0b:96:37:68:65:88:fc:b9:17:86:aa:
         67:0d:b9:83:ac:d2:ab:3d:b9:63:3f:8f:17:2b:5b:93:8e:22:
         3a:f6:2b:e1:75:b5:64:71:22:9d:7a:5f:b9:f9:ed:7a:55:5b:
         ba:91:17:36:9a:40:ff:87:24:e1:2a:fd:d3:00:6b:8f:2c:5a:
         46:04:3b:dd:8c:03:a5:9e:c6:2f:69:0c:da:8d:06:4d:35:0d:
         dd:ce:aa:ed:3a:ed:13:88:1b:36:04:2f:8b:77:90:f8:96:34:
         af:7b:6d:23:90:d6:6d:fe:f8:ee:a3:18:13:eb:11:ca:a9:57:
         ed:73:f6:b0:95:6e:e2:3c:10:98:31:28:a4:a3:f9:86:61:91:
         e3:8c:41:ce:f8:db:4f:ea:6a:19:17:07:69:d9:84:03:8d:5f:
         71:77:f0:c3:3c:ab:26:fe:45:02:82:14:a8:51:9b:6a:34:a4:
         61:0f:ff:bf:9c:18:2f:3d:1d:ad:d9:fa:fc:70:cb:9a:31:f7:
         d9:55:79:c7:55:3b:ad:23:61:d3:74:1c:7f:49:9f:45:82:79:
         87:e6:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:03:56 2025 by rpki-client