This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
File:                     8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft (raw, json)
Hash identifier:          iWUJoTP6i9Jw6mVF5vyB95GiuU/IRAhQ7YmnxwFb05s=
Subject key identifier:   4E:BE:C8:F2:C8:F3:0B:92:55:7A:8F:57:CD:DD:9D:59:1B:6A:BB:52
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       63CC0EB3A44F608941F68824CF985D489C991D4D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
Manifest number:          CA
Signing time:             Sat 22 Nov 2025 10:13:08 +0000
Manifest this update:     Sat 22 Nov 2025 10:08:08 +0000
Manifest next update:     Sun 23 Nov 2025 12:13:08 +0000
Files and hashes:         1: 326130363a313238323a3a2f33322d3438203d3e2030.roa (hash: vJ0qkMWpV2OnLAFXaBz+BxlK7kNKmj7zan157wdGWzQ=)
                          2: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: ysQzKr2LfpHKgKtqaoHWNDP3ZdvLo0/OVzWjgd0/KDE=)
                          3: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: tycFKYP/anx2JiNOOjsQ3oPM2wjVx4azas7m8j+efRE=)
                          4: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl (hash: m13QNHtO9JOoiHAdmqBxOAhCCMcXuIhVNFZY70yCm5g=)
                          5: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: ONwiyOYFzhgKKPFJfWzCUzPFz/scs7X8q3Hvxa24A0Y=)
                          6: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: DCknWSFkXEL9nevlPCXr7YdoenSsMMYUI7/Zj/O4jvs=)
                          7: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: Hbng6Qs3gtMCfgNOvlhVaZG81qH5D1zb+3kXz9K52lY=)
                          8: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: htr7q3jqwGtRhcinI8choYJGldgn6DHWcxEmRIqoS04=)
                          9: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: XXcmCcNAJFyusTP4fLJdInjZVJsyLkvh3OAm7Ll9RAg=)
                          10: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: r2TeINFddDk6FLNy1P02Sojy5Y0A05B3sX9lm7yGZIc=)
                          11: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: XIquqk5eatu7MDG7vJzzV3gWKxyFgt5TX70n+ScWh0Y=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cc:0e:b3:a4:4f:60:89:41:f6:88:24:cf:98:5d:48:9c:99:1d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Nov 22 10:08:08 2025 GMT
            Not After : Nov 23 12:13:08 2025 GMT
        Subject: CN=4EBEC8F2C8F30B92557A8F57CDDD9D591B6ABB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:c2:d9:7a:bb:54:ab:a4:3a:63:f9:7f:16:
                    57:c2:82:7c:a8:bc:d9:d2:dc:9a:e4:ea:79:f5:5b:
                    c5:81:3b:f8:5f:0a:cc:ae:31:e3:c1:f1:65:0a:1d:
                    4d:b7:35:18:1b:f5:e4:da:e5:55:f3:bb:77:a0:9e:
                    65:7a:c6:89:83:d7:d5:27:af:4e:2d:7e:8c:31:2a:
                    0b:f8:45:f1:94:f2:a8:43:8e:c7:49:42:ed:b5:9c:
                    51:2b:5f:95:26:f0:14:dc:86:86:60:fa:98:48:9a:
                    52:1c:ff:d0:d1:01:68:d6:7e:2e:3a:fb:24:7d:a8:
                    f8:39:2a:34:92:15:eb:26:95:e5:60:43:a8:cd:0d:
                    ae:59:a4:40:b7:cc:ea:90:7a:ae:0f:0d:b7:d5:5f:
                    56:d4:37:0d:e2:ae:1a:9d:3b:ee:fd:e0:9d:bf:48:
                    3f:d4:bc:60:2e:b9:07:0a:0a:9e:c8:76:d0:3e:cb:
                    d3:d6:75:9b:6a:82:55:21:42:9f:4b:8d:ef:ca:05:
                    91:c6:16:d3:62:6d:62:9f:74:4c:57:b7:69:c0:e2:
                    2d:90:56:76:6e:54:03:f7:c3:5e:3e:e2:ef:7b:c9:
                    e3:ee:e3:f8:b1:33:12:24:19:a4:c7:41:95:10:a6:
                    64:13:51:3d:bd:fc:2a:a3:ff:4c:aa:1e:c3:3e:ae:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BE:C8:F2:C8:F3:0B:92:55:7A:8F:57:CD:DD:9D:59:1B:6A:BB:52
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:34:10:c4:7b:4e:4e:8c:72:f0:42:43:14:ce:5f:95:d5:29:
         ca:4c:9e:06:17:c7:bc:9c:6c:33:59:dc:59:d1:1b:18:d5:58:
         d2:e7:8a:49:50:cf:bb:b2:ee:eb:68:6c:52:93:54:f8:ee:41:
         45:1b:fd:06:7f:d8:1c:57:22:28:e8:78:99:26:dc:2d:c8:e8:
         a1:26:51:52:0d:e5:cd:e6:9d:f3:f1:e2:50:14:a3:09:85:e2:
         e8:79:50:88:32:d1:f2:7a:16:ed:4b:41:b7:5b:aa:62:21:7c:
         24:91:96:84:6e:7a:45:bb:a6:a2:ec:3b:c1:af:0a:4e:ab:3b:
         b2:b9:b3:3d:ae:5a:95:66:60:ba:57:9e:4d:9a:f5:bc:f6:01:
         58:3a:e1:93:e0:ff:27:3f:02:46:41:59:3d:3f:6f:f5:30:3b:
         5a:9c:a8:d9:97:ea:0c:51:8b:a2:96:12:cb:75:fd:ff:bf:3b:
         83:dc:c1:3f:6a:30:52:d0:91:20:e8:8a:93:e0:d0:e1:ee:7f:
         c6:3f:9a:bf:ac:fb:bd:10:7c:73:50:12:90:5a:99:b1:68:78:
         e5:12:71:2b:a3:81:b4:c2:e8:7c:1e:fb:fe:59:33:ee:22:dc:
         bd:42:a6:1c:33:1a:0b:b5:67:ee:4f:cd:52:e7:35:44:9a:c1:
         f1:6e:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:38 2025 by rpki-client