This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
File:                     45FAD4649403F24502E9C3FA40103955BC3B5924.mft (raw, json)
Hash identifier:          pZ+iX8FaB6FLCKh4Ezf2bpg86+ThSJBGiI7gV48KHfU=
Subject key identifier:   A1:6D:E9:BC:74:15:76:BD:95:F0:28:61:88:AD:C4:D6:1C:89:FA:73
Authority key identifier: 45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24
Certificate issuer:       /CN=45fad4649403f24502e9c3fa40103955bc3b5924
Certificate serial:       19E607C2A7004A41C7305718582515898143E3B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
Manifest number:          03CC
Signing time:             Sat 27 Dec 2025 13:23:13 +0000
Manifest this update:     Sat 27 Dec 2025 13:18:13 +0000
Manifest next update:     Sun 28 Dec 2025 15:15:13 +0000
Files and hashes:         1: 45FAD4649403F24502E9C3FA40103955BC3B5924.crl (hash: wxhFye6DjcIej3Ud/SAhds3pt9kH4LAh4Mi9UWtulMQ=)
                          2: AS205848.asa (hash: B26kO7Xb7jywshCeazF2haISy3OkHcFpl7lXLMxTwNA=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e6:07:c2:a7:00:4a:41:c7:30:57:18:58:25:15:89:81:43:e3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fad4649403f24502e9c3fa40103955bc3b5924
        Validity
            Not Before: Dec 27 13:18:13 2025 GMT
            Not After : Dec 28 15:15:13 2025 GMT
        Subject: CN=A16DE9BC741576BD95F0286188ADC4D61C89FA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:21:a7:e4:fa:4a:e3:86:67:ed:8c:dd:19:
                    e5:e5:5c:90:26:52:87:27:3b:5e:fa:58:bd:46:54:
                    2a:67:39:32:09:2a:c9:e0:ad:6f:ef:1d:ea:19:dc:
                    55:9d:a1:3f:a5:14:42:6c:a3:b8:fa:30:97:49:a2:
                    87:55:38:dd:1a:e6:bd:58:f6:d3:3f:f8:2f:42:88:
                    75:7f:07:70:c3:b9:08:65:8d:86:05:76:26:f2:dd:
                    4f:d1:d2:cc:a0:6c:03:c0:60:c1:b2:c7:88:dc:43:
                    cf:0a:67:c5:e4:92:e3:4b:75:39:3d:5d:0d:7d:7e:
                    6c:ad:01:9a:fc:da:46:de:51:e3:bd:c6:21:64:2f:
                    c1:e8:88:7c:ad:5d:37:35:91:01:ae:51:bb:97:b7:
                    0a:f8:82:fe:99:2e:82:5d:d1:70:c1:46:84:a7:62:
                    cc:fe:c6:bb:ee:cc:27:7f:e6:18:f1:0a:dd:32:4d:
                    6f:e0:2f:3b:57:17:9c:63:51:f0:ff:fd:d8:72:2f:
                    ad:77:4b:50:f5:e9:7c:7c:62:b9:47:a9:dd:89:41:
                    74:5c:a2:11:4a:83:d1:0c:98:d0:b5:96:15:e3:0d:
                    a0:12:6a:69:91:a5:d7:ef:88:66:1e:49:e7:e3:3c:
                    56:df:e4:be:c4:82:3c:7a:6e:16:f1:dc:11:8f:14:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6D:E9:BC:74:15:76:BD:95:F0:28:61:88:AD:C4:D6:1C:89:FA:73
            X509v3 Authority Key Identifier:
                keyid:45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:e6:c2:f0:8d:49:b4:23:81:0f:2d:2a:1d:29:50:ed:66:
         f3:c9:25:e3:eb:3b:89:5a:4c:d5:28:1c:de:e6:52:d3:ad:40:
         d9:03:f6:13:de:ab:22:d4:96:54:40:f0:17:4b:1b:78:43:e0:
         c4:3c:84:02:be:d5:19:c5:11:7d:31:02:3f:d6:67:55:df:f5:
         74:39:7b:83:ad:ce:df:2b:b0:01:e2:ee:a0:f4:7f:8a:95:ee:
         a6:4f:2b:ab:15:8d:9a:d0:71:c1:8f:26:64:24:93:ce:9d:34:
         a4:47:e5:05:62:34:07:e8:20:b7:f0:61:b1:44:72:68:c7:8d:
         ea:76:0a:fc:73:40:b6:03:84:06:49:40:f3:9b:ad:5a:19:d7:
         63:54:48:2c:97:d1:6b:dd:93:dd:60:60:6a:64:d1:71:0a:4d:
         db:e5:5a:2f:d9:74:2b:ce:1a:ec:e6:9f:6e:26:9a:b0:41:a8:
         36:1b:fc:04:d4:8d:f7:6b:18:fa:04:09:e4:54:f3:58:e3:70:
         7c:44:ee:4f:a4:7d:c3:2c:f1:75:61:74:00:85:2a:b4:83:0f:
         04:9c:15:00:ca:b5:11:d4:5a:00:ae:06:48:10:4f:67:40:24:
         b0:2d:8e:36:18:29:03:2c:ff:65:63:4e:ec:16:11:1d:a9:b6:
         90:88:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:33:17 2025 by rpki-client