This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
File:                     4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json)
Hash identifier:          7zhkf+LuYZWEx7LiS3q4N7BLzWGMgAEp2yFpe08s9Pw=
Subject key identifier:   B6:EF:A9:F8:F3:8A:E4:AB:31:75:0A:16:6A:63:18:BE:51:FB:5E:AE
Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55
Certificate issuer:       /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
Certificate serial:       770F1C64F5BEB295A796E484867E48F24F72978F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
Manifest number:          035F
Signing time:             Fri 09 Jan 2026 22:52:20 +0000
Manifest this update:     Fri 09 Jan 2026 22:47:20 +0000
Manifest next update:     Tue 13 Jan 2026 08:11:20 +0000
Files and hashes:         1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=)
                          2: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=)
                          3: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: Pj6Valg+8JurE95VLUHCOCCsjf4Taqvn9BRVijlMABw=)
                          4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl
                          rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 08:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0f:1c:64:f5:be:b2:95:a7:96:e4:84:86:7e:48:f2:4f:72:97:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
        Validity
            Not Before: Jan  9 22:47:20 2026 GMT
            Not After : Jan 13 08:11:20 2026 GMT
        Subject: CN=B6EFA9F8F38AE4AB31750A166A6318BE51FB5EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:9a:1f:bc:14:58:d7:d7:d3:9d:6f:3b:39:
                    29:ab:81:0e:61:e6:9c:68:e5:c2:48:28:6b:e6:d5:
                    d0:26:21:aa:14:f4:94:6c:e2:68:34:e2:04:d6:71:
                    fe:30:9f:26:fe:b4:b6:2b:72:79:64:00:35:5c:f8:
                    bc:e1:ef:1f:e5:fa:14:d7:32:4e:8e:ac:ae:ef:64:
                    7f:11:20:aa:da:35:b4:f1:c0:a4:ef:e5:03:4c:31:
                    3b:be:dd:93:b0:9c:39:38:bf:27:c7:a4:20:56:1b:
                    bd:b0:14:46:16:b4:a0:97:9e:1f:78:08:1a:a2:8a:
                    25:05:e3:8a:5a:33:fb:a9:a2:14:ef:e6:27:43:36:
                    c7:96:c8:83:3b:3e:84:22:e9:f2:2c:3e:3d:8b:74:
                    b6:4a:ef:18:80:14:87:fc:89:6f:26:ec:4d:78:e8:
                    ea:72:83:3a:50:f2:c0:94:9e:6d:48:e7:e2:30:7e:
                    98:d4:45:ca:ba:de:3a:c2:85:54:5c:34:85:95:02:
                    ab:75:e3:31:71:3e:f8:39:dc:df:74:e9:5c:19:1f:
                    69:bf:9f:2b:53:a5:ba:77:5b:24:b5:1b:a2:5d:02:
                    00:b5:e4:9e:ac:23:6e:23:bf:e4:a8:59:05:4a:bf:
                    eb:0c:6b:49:b6:96:8d:09:3d:c9:05:96:f5:cf:90:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EF:A9:F8:F3:8A:E4:AB:31:75:0A:16:6A:63:18:BE:51:FB:5E:AE
            X509v3 Authority Key Identifier:
                keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:cc:b5:0e:6e:40:f5:6d:fe:4f:4d:ff:49:91:a7:96:84:
         0e:2f:39:7e:2a:fe:60:b5:cf:c8:0d:28:2c:16:15:db:e5:80:
         e7:77:44:44:2f:96:de:7c:dc:87:c4:ca:a5:37:e9:b2:c8:ea:
         46:21:b2:c3:86:0c:ea:50:96:a9:02:9e:63:75:74:d5:6e:00:
         26:24:05:e2:e3:c9:39:c9:de:71:64:bb:4e:79:72:be:c2:c6:
         be:5c:94:a2:b9:07:c1:24:98:d0:03:8a:17:3c:32:18:6b:3c:
         9f:73:b4:11:38:2c:92:de:5d:cd:17:7c:45:cc:0b:bd:f5:12:
         4d:b7:c1:5e:70:c2:a3:00:30:23:74:f7:e1:d8:c1:3f:ec:fd:
         72:3d:21:3f:21:b7:34:d9:6c:12:10:45:c7:b8:1c:1c:c2:62:
         04:a7:6a:ed:9b:76:74:ac:e5:0c:41:1c:5c:81:86:9f:cb:3e:
         08:51:03:d6:5f:6a:ce:04:bb:32:f2:af:cb:18:eb:b6:0e:30:
         dc:57:a6:7c:51:9d:4a:c2:76:fd:d8:f9:a0:de:26:a0:2f:69:
         0d:56:c0:b5:05:37:8d:b6:00:41:7c:52:33:8b:a7:37:a6:73:
         d3:1c:46:95:76:ae:7c:f0:4d:df:81:e8:42:cb:98:e8:24:1c:
         38:d9:d9:11
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdw8cZPW+spWnluSEhn5I8k9yl48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy
NjFFQUE1NTAeFw0yNjAxMDkyMjQ3MjBaFw0yNjAxMTMwODExMjBaMDMxMTAvBgNV
BAMTKEI2RUZBOUY4RjM4QUU0QUIzMTc1MEExNjZBNjMxOEJFNTFGQjVFQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFn5ofvBRY19fTnW87OSmrgQ5h
5pxo5cJIKGvm1dAmIaoU9JRs4mg04gTWcf4wnyb+tLYrcnlkADVc+Lzh7x/l+hTX
Mk6OrK7vZH8RIKraNbTxwKTv5QNMMTu+3ZOwnDk4vyfHpCBWG72wFEYWtKCXnh94
CBqiiiUF44paM/upohTv5idDNseWyIM7PoQi6fIsPj2LdLZK7xiAFIf8iW8m7E14
6OpygzpQ8sCUnm1I5+IwfpjURcq63jrChVRcNIWVAqt14zFxPvg53N906VwZH2m/
nytTpbp3WyS1G6JdAgC15J6sI24jv+SoWQVKv+sMa0m2lo0JPckFlvXPkOWHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtu+p+POK5KsxdQoWamMYvlH7Xq4wHwYDVR0j
BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3
NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF
QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw
NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx
MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHm0zLUObkD1bf5PTf9JkaeWhA4vOX4q/mC1
z8gNKCwWFdvlgOd3REQvlt583IfEyqU36bLI6kYhssOGDOpQlqkCnmN1dNVuACYk
BeLjyTnJ3nFku055cr7Cxr5clKK5B8EkmNADihc8MhhrPJ9ztBE4LJLeXc0XfEXM
C731Ek23wV5wwqMAMCN09+HYwT/s/XI9IT8htzTZbBIQRce4HBzCYgSnau2bdnSs
5QxBHFyBhp/LPghRA9Zfas4EuzLyr8sY67YOMNxXpnxRnUrCdv3Y+aDeJqAvaQ1W
wLUFN422AEF8UjOLpzemc9McRpV2rnzwTd+B6ELLmOgkHDjZ2RE=
-----END CERTIFICATE-----
Generated at Sat Jan 10 21:15:46 2026 by rpki-client