This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft
File:                     CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json)
Hash identifier:          x1ZPERYpH8EVJr8/NilN4THTzGhEk4iNhuQYdeB2IBE=
Subject key identifier:   CE:C1:0C:39:DB:E3:13:49:14:D7:6A:F7:42:FC:A4:B4:DD:D4:14:70
Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5
Certificate issuer:       /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
Certificate serial:       1FCFF8FD68F713B3DE9F6991D05FF66D1F22B109
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft
Manifest number:          0237
Signing time:             Sat 31 Jan 2026 20:20:01 +0000
Manifest this update:     Sat 31 Jan 2026 20:15:01 +0000
Manifest next update:     Wed 04 Feb 2026 02:30:01 +0000
Files and hashes:         1: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: B5RNFxeLTDvTVTWpVLugmjQ4l4IMKf6iesjBx46D5qU=)
                          2: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=)
                          3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=)
                          4: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=)
                          5: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl
                          rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:f8:fd:68:f7:13:b3:de:9f:69:91:d0:5f:f6:6d:1f:22:b1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
        Validity
            Not Before: Jan 31 20:15:01 2026 GMT
            Not After : Feb  4 02:30:01 2026 GMT
        Subject: CN=CEC10C39DBE3134914D76AF742FCA4B4DDD41470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:77:88:a3:82:78:6a:1e:5a:96:ab:9d:34:
                    41:c6:56:98:ac:f7:e3:51:7c:7d:46:f4:24:69:32:
                    a3:c1:28:07:5d:33:ca:65:4b:2a:91:51:14:a5:15:
                    7a:82:a0:c4:99:6f:da:b1:f8:37:26:25:c8:90:8e:
                    23:bb:da:ae:db:2d:45:e9:06:f8:fb:0b:6c:57:27:
                    30:ba:a1:d6:7c:27:83:81:7b:81:d7:94:3d:33:0a:
                    0c:8d:86:7f:b8:ef:e1:57:8f:39:7f:0e:14:21:f9:
                    e4:63:ad:fe:36:00:de:b9:53:d3:cb:40:c3:2e:1e:
                    06:5f:4a:04:67:a7:9f:34:d7:cf:3c:04:34:04:78:
                    8d:44:50:ba:ce:e6:81:79:96:5f:c6:23:c3:bb:b8:
                    12:69:89:09:a1:db:47:22:d0:95:65:fa:3d:1a:d9:
                    6f:b7:2d:4b:6f:f5:b9:75:00:5d:1f:44:8d:19:02:
                    bc:91:3d:7d:86:98:39:f3:13:2c:7d:78:fb:10:97:
                    37:99:a8:aa:be:54:0b:11:3e:a3:fc:1a:16:ad:26:
                    01:dc:62:d3:02:88:a2:7b:ed:4f:86:55:01:63:ec:
                    c5:2f:05:ff:dc:6a:16:82:64:bc:60:4b:a8:6f:25:
                    8e:c4:6f:d8:ef:93:d9:e7:c5:0b:04:fa:b8:3e:d7:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C1:0C:39:DB:E3:13:49:14:D7:6A:F7:42:FC:A4:B4:DD:D4:14:70
            X509v3 Authority Key Identifier:
                keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:94:6e:a4:29:2a:ae:27:ba:83:35:73:36:82:52:ed:6f:
         e0:5b:9d:91:23:c8:07:60:57:81:32:e0:de:01:66:a8:b6:f4:
         52:24:3d:5d:6a:d2:5e:c7:2b:00:e4:91:6b:32:90:77:0b:f5:
         8f:f1:5e:7e:7c:2c:04:75:bb:73:2b:e9:e6:f2:63:8e:d0:78:
         2f:d5:b7:d4:05:6d:4b:94:6d:8b:4a:a9:f8:42:dd:3b:15:b2:
         3f:56:2e:b6:03:88:95:17:d9:45:54:9c:d4:f6:ca:e7:50:65:
         93:a2:9e:01:24:de:fb:92:96:da:5b:de:30:96:98:2d:80:d8:
         29:cf:67:02:c1:e4:01:68:57:6b:5e:63:03:ed:3b:c0:a9:37:
         be:b2:0f:07:4b:61:24:32:69:42:bf:cd:df:fe:62:71:0f:8b:
         17:fc:6b:fc:a4:2d:67:83:e2:40:11:cb:ae:9a:9e:06:fb:e5:
         e7:3a:7e:2f:ee:42:2d:dc:97:a8:0c:2d:26:d6:ac:ef:d6:02:
         ad:2f:1e:3d:db:4d:f7:95:db:4b:2a:84:b4:0d:25:b8:31:74:
         b0:0e:40:cf:d8:27:ce:81:77:fb:ee:de:8c:d6:61:5c:f9:b1:
         0f:c5:8a:c3:8c:37:ca:86:aa:2c:16:a3:b3:09:bf:f2:64:d8:
         ce:c7:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client