This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
File:                     8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft (raw, json)
Hash identifier:          EzwgfiuNb1BYS+eC+nUln+cgQs7x+UwEXACeSn/ETbk=
Subject key identifier:   3A:E0:89:A4:58:32:3B:BA:13:43:21:05:98:BF:67:B0:03:2C:35:79
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       2544E4924D08D8D6148DA6CA809191823A753CC2
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
Manifest number:          F1
Signing time:             Mon 22 Dec 2025 00:28:13 +0000
Manifest this update:     Mon 22 Dec 2025 00:23:13 +0000
Manifest next update:     Tue 23 Dec 2025 02:18:13 +0000
Files and hashes:         1: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: DCknWSFkXEL9nevlPCXr7YdoenSsMMYUI7/Zj/O4jvs=)
                          2: 326130363a313238323a3a2f33322d3438203d3e2030.roa (hash: vJ0qkMWpV2OnLAFXaBz+BxlK7kNKmj7zan157wdGWzQ=)
                          3: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: htr7q3jqwGtRhcinI8choYJGldgn6DHWcxEmRIqoS04=)
                          4: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: ysQzKr2LfpHKgKtqaoHWNDP3ZdvLo0/OVzWjgd0/KDE=)
                          5: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: tycFKYP/anx2JiNOOjsQ3oPM2wjVx4azas7m8j+efRE=)
                          6: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: ONwiyOYFzhgKKPFJfWzCUzPFz/scs7X8q3Hvxa24A0Y=)
                          7: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: XIquqk5eatu7MDG7vJzzV3gWKxyFgt5TX70n+ScWh0Y=)
                          8: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: r2TeINFddDk6FLNy1P02Sojy5Y0A05B3sX9lm7yGZIc=)
                          9: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: XXcmCcNAJFyusTP4fLJdInjZVJsyLkvh3OAm7Ll9RAg=)
                          10: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl (hash: 50m0r8BIxpIotupikCNMVnhGCGNZwHoJZQcvv4O6jZ4=)
                          11: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: Hbng6Qs3gtMCfgNOvlhVaZG81qH5D1zb+3kXz9K52lY=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 02:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:44:e4:92:4d:08:d8:d6:14:8d:a6:ca:80:91:91:82:3a:75:3c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Dec 22 00:23:13 2025 GMT
            Not After : Dec 23 02:18:13 2025 GMT
        Subject: CN=3AE089A458323BBA1343210598BF67B0032C3579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:24:68:b9:52:98:fc:73:8f:9b:5c:5e:7a:
                    f8:19:cb:ca:11:65:c5:53:c3:d2:12:b3:41:e9:3d:
                    9e:3e:f7:4b:a4:4a:cd:23:bf:3d:96:34:ac:6f:e2:
                    56:69:45:da:23:51:4f:2e:33:aa:43:71:05:d4:b5:
                    08:e7:ea:1d:f1:67:11:66:c5:1d:7e:93:af:e8:a3:
                    76:9b:97:4d:c7:30:8f:00:4a:ff:f4:9a:50:d0:b4:
                    13:2f:5a:d6:29:27:70:6e:65:bd:fe:ab:d3:13:70:
                    2c:c8:0b:9e:3f:d7:4b:30:e1:63:40:21:f5:25:1c:
                    1e:3e:cd:33:cd:f3:e3:8e:cb:40:ff:2e:0d:0e:26:
                    45:ed:62:be:0b:cf:25:5f:8f:1e:b1:45:d6:b3:be:
                    78:4a:90:96:1c:22:42:3c:0d:ea:ec:ce:1f:aa:dc:
                    20:71:bc:53:3d:18:a9:a7:ca:d2:a5:a9:0b:e6:51:
                    88:d4:01:b8:c7:cb:72:b8:37:8e:29:50:df:2b:db:
                    46:b4:41:77:ee:87:cb:2f:89:5f:17:19:e2:9f:2f:
                    9d:28:84:ce:d4:df:2b:2a:5b:62:e4:3d:a8:b4:b9:
                    c3:8e:25:52:ba:4c:c2:32:32:83:a1:3d:6f:a4:a1:
                    84:fc:15:14:dc:3c:23:75:2c:43:46:ee:61:48:03:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E0:89:A4:58:32:3B:BA:13:43:21:05:98:BF:67:B0:03:2C:35:79
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:19:cd:8c:f4:f2:e3:70:02:d4:3c:dc:73:2b:ae:e9:e4:9d:
         60:72:43:d6:58:f0:94:2b:aa:f0:c4:03:58:1d:00:b8:7c:c1:
         32:d1:ee:47:2f:17:0c:08:31:3d:0f:fb:e6:e1:a7:b4:dd:83:
         d1:ec:16:4a:1e:7e:42:f5:35:c1:db:a5:f2:a5:96:1b:26:e4:
         90:16:0f:39:84:6a:03:3f:bc:03:d0:a5:0a:b5:c2:64:83:d5:
         e6:8b:d5:bd:4b:65:d3:fc:5b:95:d2:e6:39:cc:2a:a1:81:b7:
         86:6f:fe:d1:c3:76:e1:78:91:f8:c8:86:2f:dc:e8:5a:4a:cc:
         b3:c8:3c:71:37:03:9f:95:7b:83:3b:90:07:ef:3a:cd:62:fd:
         66:cb:4d:0e:9a:4f:9c:25:17:e2:bc:97:6e:5b:dd:ce:60:d7:
         e3:df:51:e8:0d:b8:43:72:fe:20:be:5f:08:8a:56:1b:64:53:
         5c:60:21:cb:21:5e:de:c2:76:6d:c5:1a:52:5a:46:2f:b3:ad:
         b5:03:8c:e0:5d:1d:2c:09:5c:4d:4b:42:e2:a7:a5:94:e1:2d:
         4f:86:c5:6e:5c:d7:28:6e:ad:c7:28:94:10:8f:e7:57:d8:ab:
         77:eb:34:4f:32:00:d1:af:20:70:ef:e5:3c:85:8d:92:89:54:
         a7:b4:bc:5c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJUTkkk0I2NYUjabKgJGRgjp1PMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwRjlGN0FBOTNCQTE3MzVGNTlBMDA0RTM3NzEwQzUx
REZCQjU5MzAeFw0yNTEyMjIwMDIzMTNaFw0yNTEyMjMwMjE4MTNaMDMxMTAvBgNV
BAMTKDNBRTA4OUE0NTgzMjNCQkExMzQzMjEwNTk4QkY2N0IwMDMyQzM1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpCRouVKY/HOPm1xeevgZy8oR
ZcVTw9ISs0HpPZ4+90ukSs0jvz2WNKxv4lZpRdojUU8uM6pDcQXUtQjn6h3xZxFm
xR1+k6/oo3abl03HMI8ASv/0mlDQtBMvWtYpJ3BuZb3+q9MTcCzIC54/10sw4WNA
IfUlHB4+zTPN8+OOy0D/Lg0OJkXtYr4LzyVfjx6xRdazvnhKkJYcIkI8Derszh+q
3CBxvFM9GKmnytKlqQvmUYjUAbjHy3K4N44pUN8r20a0QXfuh8sviV8XGeKfL50o
hM7U3ysqW2LkPai0ucOOJVK6TMIyMoOhPW+koYT8FRTcPCN1LENG7mFIA2X7AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUOuCJpFgyO7oTQyEFmL9nsAMsNXkwHwYDVR0j
BBgwFoAUjA+feqk7oXNfWaAE43cQxR37tZMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5zbi1wLmlvL3JlcG8vc24tcC1pby8y
LzhDMEY5RjdBQTkzQkExNzM1RjU5QTAwNEUzNzcxMEM1MURGQkI1OTMuY3JsMIGT
BggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83LzhDMEY5RjdBQTkzQkExNzM1RjU5QTAwNEUzNzcxMEM1MURGQkI1OTMu
Y2VyMGwGCCsGAQUFBwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly9ycGtpLnNu
LXAuaW8vcmVwby9zbi1wLWlvLzIvOEMwRjlGN0FBOTNCQTE3MzVGNTlBMDA0RTM3
NzEwQzUxREZCQjU5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHEZzYz08uNwAtQ83HMrrunknWByQ9ZY
8JQrqvDEA1gdALh8wTLR7kcvFwwIMT0P++bhp7Tdg9HsFkoefkL1NcHbpfKllhsm
5JAWDzmEagM/vAPQpQq1wmSD1eaL1b1LZdP8W5XS5jnMKqGBt4Zv/tHDduF4kfjI
hi/c6FpKzLPIPHE3A5+Ve4M7kAfvOs1i/WbLTQ6aT5wlF+K8l25b3c5g1+PfUegN
uENy/iC+XwiKVhtkU1xgIcshXt7Cdm3FGlJaRi+zrbUDjOBdHSwJXE1LQuKnpZTh
LU+GxW5c1yhurccolBCP51fYq3frNE8yANGvIHDv5TyFjZKJVKe0vFw=
-----END CERTIFICATE-----
Generated at Mon Dec 22 15:59:51 2025 by rpki-client