This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
File:                     9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json)
Hash identifier:          Bp/RK4IMKWDa+cCvRxCRlHUPvURR6bLPr+rHkmSnpQ0=
Subject key identifier:   B7:84:41:68:C4:23:AF:1F:A1:77:BC:B8:DA:69:34:22:4B:D3:AA:0F
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Certificate issuer:       /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial:       556EC897C274DDBE79351780FAB0455F6489826B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
Manifest number:          055B
Signing time:             Sun 01 Feb 2026 13:20:54 +0000
Manifest this update:     Sun 01 Feb 2026 13:15:54 +0000
Manifest next update:     Wed 04 Feb 2026 19:47:54 +0000
Files and hashes:         1: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: E3+NRC3VjXItTWrq3I3RCmXGmxhXv0rFF7yaUnokJmY=)
                          2: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: EMOuNCV6TClBYqmPb1XKNu9ullzThAIJLKtHBUMaIqw=)
                          3: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: z6RH1urHvz4DWcpVUdgKl8GebYPf5sPgLD/rSpRR2GM=)
                          4: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: qaFCPFspiQeiO/D4iLrD1q+n5cnqG21DWLl7U5yS6HU=)
                          5: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: VArGluacjPIXzb+nl1+PqiIKNzHKscV2RQj2F/IjCew=)
                          6: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: dZG8PuN4hDz7vnWbBJwf0vedp1FXcfJd17aOP8ITVq4=)
                          7: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: zV6VOfyU7gHl6iq1/boiJwTObcVc0Um3Mv8W2+pcczY=)
                          8: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: fmCDQtKS2ftUrbPcEbad1XBtr6cEi/QP2/W3MlVCX1c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
                          rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6e:c8:97:c2:74:dd:be:79:35:17:80:fa:b0:45:5f:64:89:82:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
        Validity
            Not Before: Feb  1 13:15:54 2026 GMT
            Not After : Feb  4 19:47:54 2026 GMT
        Subject: CN=B7844168C423AF1FA177BCB8DA6934224BD3AA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:fe:73:9b:31:f0:4f:a6:6f:e1:50:3b:fe:
                    73:61:48:53:fe:74:88:b0:18:4f:de:0d:75:ae:ac:
                    3f:c6:a6:6e:b3:ab:e8:e9:a6:63:6d:54:43:12:36:
                    bf:5e:25:5f:98:5b:9b:ef:53:2b:5e:71:6b:1d:76:
                    1a:e8:cd:a3:6c:fe:1c:de:66:fe:2c:82:4b:aa:f1:
                    e8:2b:6c:e5:26:2f:aa:b4:04:e7:5a:80:8b:80:62:
                    55:0d:8f:f4:ad:d0:24:00:e6:74:78:b2:5c:f9:5d:
                    6f:2e:ae:2f:47:26:b9:26:c8:2a:ef:21:44:20:ce:
                    74:5f:e2:92:71:4a:e7:19:58:5f:97:c4:22:ea:5e:
                    6f:11:df:2f:46:85:66:69:b6:5a:af:8b:c3:2e:08:
                    8c:f9:fa:f9:d9:59:2f:85:20:0d:35:c0:e1:46:92:
                    54:93:51:c8:cf:d6:5c:74:8b:94:4b:dd:ab:86:a3:
                    0e:97:ed:df:52:9f:96:38:2f:cb:90:c3:df:31:85:
                    e8:94:f5:94:7a:e4:50:3c:da:3e:49:52:1f:ba:a7:
                    33:29:d2:8e:65:a6:95:64:7d:4c:b6:ba:10:e3:48:
                    71:d2:9d:bd:e7:2d:a5:bd:fc:d7:42:9e:b9:34:dd:
                    91:84:b1:e3:ed:95:a5:09:9c:26:0f:b6:d9:89:3b:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:84:41:68:C4:23:AF:1F:A1:77:BC:B8:DA:69:34:22:4B:D3:AA:0F
            X509v3 Authority Key Identifier:
                keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:93:5a:9e:e0:60:12:06:05:42:e2:25:81:90:d1:d7:3b:
         2f:e2:b0:ea:92:ef:ce:4c:53:fe:2a:7c:43:59:56:80:04:c4:
         49:93:ee:3f:de:5e:51:0a:2a:03:17:17:c7:97:bc:6a:dd:42:
         96:df:c9:00:26:ba:c6:c2:8d:15:be:5d:08:68:b8:cb:01:7f:
         a9:1b:7a:68:f9:3c:dc:d6:3a:21:56:6f:0d:2f:b4:7e:81:a6:
         4f:69:80:10:2d:c9:c3:c6:5c:16:f9:87:fa:4b:3e:9c:58:b5:
         40:61:4f:d9:17:47:ee:8e:4f:ab:7a:5c:95:c8:28:f5:0c:75:
         1b:10:81:d4:87:60:13:87:82:7e:e0:bd:55:f2:c3:df:b2:4c:
         19:0c:1d:84:9d:39:72:d4:b5:f4:97:5c:4e:f4:59:59:d4:18:
         55:02:d1:e7:4f:54:d0:86:fa:ec:29:84:1e:26:93:52:60:43:
         cd:01:66:20:12:ff:3a:68:56:0a:8c:25:2a:88:34:9d:de:a4:
         5c:05:f1:7e:18:d2:92:68:ea:4d:53:cf:6c:4e:14:78:a9:45:
         14:b0:0e:39:3f:c3:be:6d:4d:9b:cf:11:3e:b3:8f:03:03:f0:
         02:86:87:0b:e4:96:d7:a8:6b:11:43:60:8f:fc:50:c1:8d:0c:
         ab:2a:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:24 2026 by rpki-client