This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
File:                     CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft (raw, json)
Hash identifier:          LOO8mSHJnJmlk/PrmcggbfRtX4GB1IHAdL8h0to9qoE=
Subject key identifier:   20:4D:DA:E8:A4:D9:72:67:30:05:AE:76:10:D6:60:23:8A:F4:11:AF
Authority key identifier: CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Certificate issuer:       /CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Certificate serial:       1986D982683CEF00AC97EF9CDB7A561E32778AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
Manifest number:          038A
Signing time:             Tue 09 Dec 2025 16:57:32 +0000
Manifest this update:     Tue 09 Dec 2025 16:52:32 +0000
Manifest next update:     Wed 10 Dec 2025 16:59:32 +0000
Files and hashes:         1: 323030313a3637633a6238383a3a2f34382d3438203d3e20323130373631.roa (hash: euqERIaydVEUOproacKsvcNALWGfqD3MIzlY2rRigCk=)
                          2: AS56762.asa (hash: z/f8SG2no254oa3H2iKxhhbZKCFLEwS03yF8In9fInM=)
                          3: 323030313a3637633a6239303a3a2f34382d3438203d3e203437363839.roa (hash: iKc4ECL2JmgsiMS1/8l/kZ4VwxF3G7vNp9tnnFsm2u0=)
                          4: 323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa (hash: x/hxHcA/aQlAo1iPgsy4Jh2r1BTX/Wthrb2Uj5QOozw=)
                          5: 323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa (hash: HDxF7hNoMhDooYDhqYU0gRysAV3DSlAetCZCA2P/OrM=)
                          6: CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl (hash: xomFw188T9IoJX9gdt6Gg9YNEh3HqFvYHnOmkwEHHek=)
                          7: 323030313a3637633a6238383a3a2f34382d3438203d3e203536373632.roa (hash: YWJxHIHWRUFPkTTQOOQtlfptKffGhKBP38j4lAddJyo=)
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl
                          rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 16:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:86:d9:82:68:3c:ef:00:ac:97:ef:9c:db:7a:56:1e:32:77:8a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
        Validity
            Not Before: Dec  9 16:52:32 2025 GMT
            Not After : Dec 10 16:59:32 2025 GMT
        Subject: CN=204DDAE8A4D972673005AE7610D660238AF411AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:52:51:89:ba:5c:44:a7:d2:77:0b:57:30:
                    c2:a2:b6:f9:40:bb:41:45:37:87:7d:86:79:6c:f4:
                    cc:2a:3f:ff:f3:98:dc:8b:cb:80:27:60:08:85:ed:
                    3b:ed:41:e3:04:f9:63:00:38:03:24:0a:8f:3c:56:
                    f0:a0:45:c6:9b:15:d6:93:fa:4c:22:e6:52:31:44:
                    d7:d2:1f:31:c8:3b:a1:c3:4f:54:88:fd:a6:45:20:
                    0f:a9:e3:f5:3c:3b:9d:f5:65:37:e7:6a:4b:9c:90:
                    3d:c8:c2:21:5a:a0:4c:b9:71:9d:ba:cd:34:28:9e:
                    4e:44:eb:35:40:40:9f:43:4e:2b:71:d6:21:e0:f0:
                    5f:c0:9d:be:af:7b:86:89:03:ae:65:56:5c:35:7f:
                    27:e9:85:98:2e:a5:f7:ca:47:db:b3:c5:0d:db:65:
                    6f:42:91:9d:ba:f7:21:de:78:ff:cf:f7:98:3b:eb:
                    37:6d:fe:6a:eb:3d:73:71:c0:c2:61:cb:21:f9:61:
                    da:d7:52:2f:7f:16:ed:23:2b:ad:12:2c:10:84:56:
                    90:bc:93:ac:eb:cf:f3:4e:08:07:8c:9c:1f:f1:bf:
                    86:39:5f:9f:7d:8e:b0:3b:e9:d8:09:12:d8:b1:8c:
                    bb:99:8c:2f:2b:66:3b:aa:87:a5:20:6b:ad:15:37:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:DA:E8:A4:D9:72:67:30:05:AE:76:10:D6:60:23:8A:F4:11:AF
            X509v3 Authority Key Identifier:
                keyid:CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:59:88:f9:d6:8d:88:5a:3f:6f:4b:2f:15:a2:fa:3e:27:8f:
         e9:ea:39:c2:cd:33:76:bd:dc:7e:5e:8e:11:e7:d4:50:62:09:
         8d:03:74:42:80:cf:42:03:6c:7e:e0:6b:83:60:e5:08:79:96:
         5a:e6:6e:e5:cb:27:9a:7d:ce:52:fd:7c:35:cd:0f:61:23:26:
         bc:d7:be:03:6d:44:be:da:c4:25:30:b8:8b:25:7a:ba:b9:c8:
         88:2b:87:61:a0:3b:82:7b:33:fe:51:1f:9b:f2:4b:57:cf:25:
         33:41:75:e4:ad:69:fb:e0:c3:8e:a8:ae:6e:a8:62:f1:ca:3c:
         6c:d2:dc:46:58:59:1d:2b:e5:bd:db:40:55:c3:17:43:25:6c:
         ec:ea:11:d4:be:3c:ca:28:5b:a6:1e:59:4e:98:04:5c:5a:d7:
         63:4b:2e:8b:6f:8f:36:94:77:79:9e:2a:bf:11:ff:d1:81:88:
         ae:34:25:61:1f:04:9c:0f:12:1f:85:73:b5:af:49:e6:1f:c2:
         87:73:64:e3:7a:16:f7:d3:eb:88:cc:39:46:8a:39:3e:7e:5a:
         69:c1:2e:04:22:5a:15:f6:a3:08:ac:8a:75:2f:af:aa:3e:ba:
         be:71:6e:3e:c4:15:19:09:ca:a3:32:12:0e:62:06:3c:70:21:
         ae:de:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:06:49 2025 by rpki-client