This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft
File:                     0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json)
Hash identifier:          i7Ay8XrG2qC9i4jAGAvv9Gn6/UocRG6OFBvU3OJlwwc=
Subject key identifier:   1C:EC:79:97:35:94:97:1A:13:0F:7B:FB:D3:99:D6:B8:F8:23:62:E2
Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C
Certificate issuer:       /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
Certificate serial:       1893FB4D6DB17BA93E022319793BBFE4E3E9E0BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft
Manifest number:          0179
Signing time:             Sun 01 Feb 2026 14:11:54 +0000
Manifest this update:     Sun 01 Feb 2026 14:06:54 +0000
Manifest next update:     Wed 04 Feb 2026 19:46:54 +0000
Files and hashes:         1: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: ki0hIXEeGo8cU77Xr7lKfx7zoFMhB4mSH2tdcqcaUcQ=)
                          2: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: RiJQOn+iteWsGaHDQ7CJgxTOw5x3cmMgsW4Cbj99H/E=)
                          3: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: xkzw7u6Xv8ZEUZW6FBvMNjt4pGJyWw7PjBKEoExzFnM=)
                          4: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: dQqh/UiHoQw/70mJd+ZId7SvE382IQVHD0RnWmbxwtI=)
                          5: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 3qwvc0M9032XGDH7vraV4T7cy4QhAdHQHEpVds7HICk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl
                          rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:fb:4d:6d:b1:7b:a9:3e:02:23:19:79:3b:bf:e4:e3:e9:e0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
        Validity
            Not Before: Feb  1 14:06:54 2026 GMT
            Not After : Feb  4 19:46:54 2026 GMT
        Subject: CN=1CEC79973594971A130F7BFBD399D6B8F82362E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:39:09:c6:23:e7:c4:66:7b:c8:1f:06:0c:
                    c0:e9:1a:43:86:ef:0c:f0:4f:0e:79:7b:7d:08:35:
                    3c:3d:56:9c:cc:b2:66:3e:c2:a9:9b:60:c7:78:b8:
                    e6:c6:c0:b5:ec:93:47:2d:ae:1f:06:6a:24:4e:d7:
                    66:ca:6f:cd:f9:9b:d3:04:79:9a:f8:51:cb:69:27:
                    dc:4d:4a:97:6f:7e:31:27:e0:fe:d9:b0:a9:e7:2d:
                    09:3a:db:0b:79:f4:02:14:e4:23:b2:70:ef:57:31:
                    84:01:72:61:69:0d:ad:0b:84:fb:0f:0b:07:4d:8e:
                    a6:6c:aa:e5:02:f9:7a:95:04:e0:d6:fc:02:9b:5d:
                    7b:39:f2:97:ca:44:5a:8b:4e:ff:39:0d:d6:50:54:
                    50:a3:c8:72:3a:3f:49:c4:19:c9:bd:99:67:29:f3:
                    f7:b3:87:31:81:22:67:39:a8:c5:0e:dc:0c:5b:86:
                    9a:f6:9d:7b:60:e5:27:23:d5:d2:a4:a6:6f:a9:b4:
                    93:83:b7:76:9f:f1:aa:ea:96:61:0b:02:4a:a6:b2:
                    9c:d3:f1:86:14:83:60:d2:79:de:b9:f6:59:90:4c:
                    ea:db:31:c1:74:af:77:b5:a3:a2:df:f2:4b:57:a3:
                    63:11:e9:87:b5:f6:14:a8:89:31:36:d5:18:10:44:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:79:97:35:94:97:1A:13:0F:7B:FB:D3:99:D6:B8:F8:23:62:E2
            X509v3 Authority Key Identifier:
                keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:06:8d:2f:5d:7a:6e:56:1d:73:2f:32:83:f4:27:de:b5:03:
         9f:c7:c0:5d:66:a8:c5:e6:c7:76:52:95:dc:af:e8:83:af:21:
         ed:95:a5:41:98:17:da:02:97:e1:08:c0:82:92:cd:f4:d2:1d:
         c5:a1:90:a4:ad:c7:1c:1d:5c:6b:9f:4e:12:eb:5b:35:a6:89:
         6b:3d:85:d3:81:22:64:f3:fe:44:a3:8a:96:f8:74:c6:fd:78:
         19:26:e7:1f:9b:44:f2:fa:88:f2:29:66:dd:c8:6c:75:fb:85:
         25:69:a7:b3:1e:23:79:6d:03:30:c9:c7:79:1a:e2:5d:3c:bb:
         49:86:62:c1:73:cb:03:02:ac:3b:75:56:0a:f8:ae:68:2c:8a:
         a5:da:6c:a3:43:82:e0:d6:8c:15:e1:b5:c6:ca:62:71:47:57:
         16:5c:6f:9c:d3:bf:0d:6e:19:f4:92:7c:2e:e8:08:33:b6:48:
         3c:a9:5e:b6:75:39:48:89:6c:1c:85:b8:60:5a:6e:8e:b5:10:
         e0:08:18:1a:be:0b:67:b6:10:24:ff:7b:d8:e5:50:b6:8c:04:
         ce:99:b4:8d:e6:e7:71:51:aa:fd:c8:ea:aa:49:3f:2b:80:d0:
         d7:d7:47:d7:dd:b7:be:0c:9f:4a:c9:dc:df:6d:43:c3:a8:33:
         86:68:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:49:52 2026 by rpki-client