This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft
File:                     9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json)
Hash identifier:          jgSLkZ8Pd+1MpiSt7WU2qlpCVwhGnIaubHNP7AUuy4o=
Subject key identifier:   E9:ED:18:96:7E:55:1C:BA:80:29:15:6C:E2:34:D6:E1:5A:8B:7E:7A
Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94
Certificate issuer:       /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094
Certificate serial:       600B9F1FCE5EE6466CD8B06939BC792F9FEE7DB5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft
Manifest number:          034E
Signing time:             Sun 01 Feb 2026 00:41:48 +0000
Manifest this update:     Sun 01 Feb 2026 00:36:48 +0000
Manifest next update:     Wed 04 Feb 2026 09:19:48 +0000
Files and hashes:         1: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=)
                          2: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=)
                          3: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=)
                          4: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: rhB0pGNm7k0AZAFlzhOseHZQAE7FUb0YgXTOkqId60Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl
                          rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0b:9f:1f:ce:5e:e6:46:6c:d8:b0:69:39:bc:79:2f:9f:ee:7d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094
        Validity
            Not Before: Feb  1 00:36:48 2026 GMT
            Not After : Feb  4 09:19:48 2026 GMT
        Subject: CN=E9ED18967E551CBA8029156CE234D6E15A8B7E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:60:d8:de:a2:6a:f7:e4:dc:b6:b3:ff:e8:
                    36:2c:54:ba:72:9e:da:c4:5d:5f:d7:02:23:f2:a4:
                    ee:72:6e:a3:01:4b:e8:de:ca:01:b2:ad:0d:41:21:
                    00:0e:07:63:35:ac:f4:73:b1:0f:b5:ac:40:4e:89:
                    87:cc:64:e8:13:a8:af:76:06:ba:6e:07:5d:fd:63:
                    c9:bb:42:94:86:98:c9:ff:c9:02:c9:b1:0e:91:b5:
                    c0:2e:4f:16:e8:95:31:6b:72:f3:d4:25:2c:7d:e5:
                    ba:20:cd:25:f7:be:b2:a1:1e:64:98:a0:8e:31:12:
                    d1:b7:9a:1b:84:bc:02:99:dc:4c:d1:68:40:9f:fd:
                    85:8b:7f:aa:15:f4:e0:aa:23:d1:0c:f3:36:c7:ab:
                    31:4d:36:70:9f:26:fd:74:ab:84:ab:35:98:46:7a:
                    02:6a:9f:3f:58:6e:82:6e:9e:84:d7:d7:b5:c8:4c:
                    1a:3d:a4:9b:d2:d4:02:f3:e3:dc:c9:4c:db:e1:08:
                    ad:2d:63:1e:eb:9d:50:09:f6:ce:33:43:fd:41:dd:
                    3d:21:c9:6c:c4:29:d7:2d:b6:86:5a:63:27:34:3d:
                    30:1f:9d:f1:f2:17:b1:3a:62:df:98:d1:e4:4b:1a:
                    0d:a6:81:81:10:4a:0e:e8:42:b3:8a:86:0b:74:b9:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:ED:18:96:7E:55:1C:BA:80:29:15:6C:E2:34:D6:E1:5A:8B:7E:7A
            X509v3 Authority Key Identifier:
                keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:04:da:08:37:f7:b0:f6:f8:dc:39:57:c1:9d:81:85:e0:
         a6:90:20:4d:80:76:5e:88:00:8d:a1:61:d2:fb:65:78:25:d4:
         a5:32:68:a4:91:e5:8a:31:9f:4b:5e:b5:c0:f7:af:94:b4:d5:
         1e:0e:55:0f:82:bf:70:ce:9c:86:54:ea:1c:48:66:dc:e8:52:
         e6:f8:52:a1:d2:fe:9e:dc:5e:6e:72:13:cc:25:24:37:08:c5:
         6a:b5:9c:32:b6:ba:51:1c:f7:40:30:39:06:dc:e4:20:9f:e8:
         39:87:38:c6:b3:8d:16:44:13:6a:62:e5:98:1d:57:f5:82:9f:
         4c:21:fe:2c:ca:a0:47:91:97:da:c2:2f:b4:03:12:00:0e:b7:
         61:2f:28:66:2f:2c:6d:5d:5f:11:17:22:2f:52:59:0d:8c:97:
         55:19:b9:07:d6:6e:36:d5:cf:dd:13:8a:06:28:d9:e4:48:73:
         4e:74:d5:22:19:2e:52:d8:39:d0:04:18:67:02:69:79:5e:e8:
         77:85:fd:d0:2c:d4:f1:eb:24:73:0d:3d:16:96:aa:e7:d7:6e:
         c8:b5:f7:d0:a4:b9:91:43:72:d3:49:50:3b:14:1c:22:40:32:
         6b:9b:02:76:88:10:ef:cd:e3:a1:9d:7f:10:9c:03:a9:22:67:
         52:48:f8:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYAufH85e5kZs2LBpObx5L5/ufbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw
NTZERjA5NDAeFw0yNjAyMDEwMDM2NDhaFw0yNjAyMDQwOTE5NDhaMDMxMTAvBgNV
BAMTKEU5RUQxODk2N0U1NTFDQkE4MDI5MTU2Q0UyMzRENkUxNUE4QjdFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbmDY3qJq9+TctrP/6DYsVLpy
ntrEXV/XAiPypO5ybqMBS+jeygGyrQ1BIQAOB2M1rPRzsQ+1rEBOiYfMZOgTqK92
BrpuB139Y8m7QpSGmMn/yQLJsQ6RtcAuTxbolTFrcvPUJSx95bogzSX3vrKhHmSY
oI4xEtG3mhuEvAKZ3EzRaECf/YWLf6oV9OCqI9EM8zbHqzFNNnCfJv10q4SrNZhG
egJqnz9YboJunoTX17XITBo9pJvS1ALz49zJTNvhCK0tYx7rnVAJ9s4zQ/1B3T0h
yWzEKdcttoZaYyc0PTAfnfHyF7E6Yt+Y0eRLGg2mgYEQSg7oQrOKhgt0uVg3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6e0Yln5VHLqAKRVs4jTW4VqLfnowHwYDVR0j
BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3
Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE
RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw
Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2
OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIhPBNoIN/ew9vjcOVfBnYGF4KaQIE2Adl6I
AI2hYdL7ZXgl1KUyaKSR5Yoxn0tetcD3r5S01R4OVQ+Cv3DOnIZU6hxIZtzoUub4
UqHS/p7cXm5yE8wlJDcIxWq1nDK2ulEc90AwOQbc5CCf6DmHOMazjRZEE2pi5Zgd
V/WCn0wh/izKoEeRl9rCL7QDEgAOt2EvKGYvLG1dXxEXIi9SWQ2Ml1UZuQfWbjbV
z90TigYo2eRIc0501SIZLlLYOdAEGGcCaXle6HeF/dAs1PHrJHMNPRaWqufXbsi1
99CkuZFDctNJUDsUHCJAMmubAnaIEO/N46GdfxCcA6kiZ1JI+EQ=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:57 2026 by rpki-client