This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
File:                     0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json)
Hash identifier:          4xEi0yt1CTI9ZRB/I5yOIyOv/KQVxTExpPWKW4m5w7k=
Subject key identifier:   67:D9:22:D5:14:79:7D:CE:F9:61:2C:D7:BF:13:2A:E3:F9:20:51:AC
Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Certificate issuer:       /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Certificate serial:       55E66E716EF9F12058591105123C39877146EC7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
Manifest number:          D2
Signing time:             Tue 23 Dec 2025 00:41:13 +0000
Manifest this update:     Tue 23 Dec 2025 00:36:13 +0000
Manifest next update:     Fri 26 Dec 2025 06:24:13 +0000
Files and hashes:         1: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: CIp4csGCE423bsdanxnuR7vVn6s1kfDOEstlRbG329k=)
                          2: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e6:6e:71:6e:f9:f1:20:58:59:11:05:12:3c:39:87:71:46:ec:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
        Validity
            Not Before: Dec 23 00:36:13 2025 GMT
            Not After : Dec 26 06:24:13 2025 GMT
        Subject: CN=67D922D514797DCEF9612CD7BF132AE3F92051AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:31:e8:86:dd:71:ce:19:30:a4:f8:d6:c9:
                    aa:8a:e4:81:6c:b6:23:4f:a4:ba:4f:75:7b:44:9e:
                    45:e0:ef:c8:fa:ec:c9:dd:30:70:49:aa:02:65:d5:
                    e1:55:f1:1e:5a:87:39:17:c0:ef:c4:0c:c7:82:5f:
                    59:95:a8:f1:6e:16:73:e5:36:5b:ee:6d:06:e6:aa:
                    28:01:be:17:e3:e7:77:ac:e8:7e:6f:cd:26:12:86:
                    3b:26:6a:69:7c:5b:2e:d4:b7:78:98:1b:f2:8c:a8:
                    f2:b4:4e:94:76:59:1a:d6:d6:69:c0:69:1b:6f:95:
                    1b:4a:0f:8a:81:11:d1:03:40:9f:9a:9a:9c:df:b9:
                    16:24:d7:fa:1f:49:9a:e8:1d:86:0e:7f:ad:9a:11:
                    13:01:ef:c7:58:25:d6:7f:18:af:fd:aa:74:c8:b1:
                    82:63:3c:c2:29:53:3c:31:5c:94:91:58:d9:00:2e:
                    d7:55:f5:3f:ed:90:35:fe:d3:50:dc:d6:e8:31:ab:
                    c8:ae:0e:38:a4:ae:10:4a:ad:ef:b8:4b:27:de:5c:
                    bb:5d:88:97:d8:d2:62:12:01:57:15:91:78:61:57:
                    db:67:f4:bb:c2:cc:ae:bc:bb:16:b0:95:63:4d:19:
                    40:19:59:4d:70:e6:ac:56:e7:3e:92:84:d1:be:76:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D9:22:D5:14:79:7D:CE:F9:61:2C:D7:BF:13:2A:E3:F9:20:51:AC
            X509v3 Authority Key Identifier:
                keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:58:fd:5a:f4:74:97:02:d2:02:c1:46:a7:07:eb:b8:ef:3b:
         fd:00:88:12:c2:76:f9:5a:94:43:c8:1b:5f:69:e3:83:1e:43:
         96:7d:5a:62:ca:96:49:a0:33:18:93:36:6d:14:da:e1:18:c6:
         92:f5:82:43:75:9a:d3:7a:c9:ae:dd:da:9f:91:4c:07:dd:0e:
         7a:4c:0b:34:4b:4a:ca:54:71:15:02:36:a0:12:83:fb:67:a5:
         b1:65:66:55:c7:80:96:dd:e4:b4:ba:b5:4c:df:7e:3f:1d:0f:
         6e:70:87:d3:de:88:c4:17:94:d0:bf:4d:da:1a:70:9c:5e:81:
         8b:bd:6f:3e:a0:55:74:33:3c:88:9b:4a:f2:d6:4f:91:9b:f3:
         e6:f3:2a:3a:0f:12:29:7b:45:31:21:da:7e:af:a4:11:53:1a:
         b9:cd:5a:ae:67:1d:69:72:4f:ea:07:8a:f1:ff:57:c3:fa:7c:
         db:0a:8f:0b:95:48:19:f7:fc:79:11:83:7e:d8:50:1c:25:ab:
         5a:a5:a2:92:f2:08:44:4d:cd:48:2d:5a:d8:35:69:a9:96:d2:
         34:2b:f3:46:d6:fc:16:16:99:6f:6e:c8:25:82:f1:d5:01:74:
         95:15:d6:ce:80:07:2c:22:86:d9:bb:8f:9e:52:ce:d3:f1:31:
         d6:ee:93:a3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVeZucW758SBYWREFEjw5h3FG7HwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4
M0ZCN0RDRDAeFw0yNTEyMjMwMDM2MTNaFw0yNTEyMjYwNjI0MTNaMDMxMTAvBgNV
BAMTKDY3RDkyMkQ1MTQ3OTdEQ0VGOTYxMkNEN0JGMTMyQUUzRjkyMDUxQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAzHoht1xzhkwpPjWyaqK5IFs
tiNPpLpPdXtEnkXg78j67MndMHBJqgJl1eFV8R5ahzkXwO/EDMeCX1mVqPFuFnPl
NlvubQbmqigBvhfj53es6H5vzSYShjsmaml8Wy7Ut3iYG/KMqPK0TpR2WRrW1mnA
aRtvlRtKD4qBEdEDQJ+ampzfuRYk1/ofSZroHYYOf62aERMB78dYJdZ/GK/9qnTI
sYJjPMIpUzwxXJSRWNkALtdV9T/tkDX+01Dc1ugxq8iuDjikrhBKre+4SyfeXLtd
iJfY0mISAVcVkXhhV9tn9LvCzK68uxawlWNNGUAZWU1w5qxW5z6ShNG+dtkpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZ9ki1RR5fc75YSzXvxMq4/kgUawwHwYDVR0j
BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy
MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC
N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj
YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1
QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAM9Y/Vr0dJcC0gLBRqcH67jvO/0AiBLCdvla
lEPIG19p44MeQ5Z9WmLKlkmgMxiTNm0U2uEYxpL1gkN1mtN6ya7d2p+RTAfdDnpM
CzRLSspUcRUCNqASg/tnpbFlZlXHgJbd5LS6tUzffj8dD25wh9PeiMQXlNC/Tdoa
cJxegYu9bz6gVXQzPIibSvLWT5Gb8+bzKjoPEil7RTEh2n6vpBFTGrnNWq5nHWly
T+oHivH/V8P6fNsKjwuVSBn3/HkRg37YUBwlq1qlopLyCERNzUgtWtg1aamW0jQr
80bW/BYWmW9uyCWC8dUBdJUV1s6ABywihtm7j55SztPxMdbuk6M=
-----END CERTIFICATE-----