This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
File:                     A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json)
Hash identifier:          ZA9jICamRIBANgLPGI159eaRn89SCQxc4Mi2CLMyoL8=
Subject key identifier:   A2:EC:D2:E3:0F:4F:92:3C:EA:CB:C5:18:D5:F5:CB:61:26:AB:6C:71
Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB
Certificate issuer:       /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB
Certificate serial:       598AA4CFD4645FF8C072E682C8C8448ED21AE0B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
Manifest number:          DD
Signing time:             Sun 21 Dec 2025 15:21:02 +0000
Manifest this update:     Sun 21 Dec 2025 15:16:02 +0000
Manifest next update:     Wed 24 Dec 2025 20:56:02 +0000
Files and hashes:         1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=)
                          2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: WWVfOgVjN3Qm7T00cJdjVw5il6seH/rOmpaDj4X1wWs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8a:a4:cf:d4:64:5f:f8:c0:72:e6:82:c8:c8:44:8e:d2:1a:e0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB
        Validity
            Not Before: Dec 21 15:16:02 2025 GMT
            Not After : Dec 24 20:56:02 2025 GMT
        Subject: CN=A2ECD2E30F4F923CEACBC518D5F5CB6126AB6C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:76:fc:9a:e0:bf:7e:3b:e9:5d:73:1e:9e:
                    7c:a4:aa:8f:63:6b:fe:b4:42:43:22:c7:f7:10:1f:
                    da:6b:74:33:a4:db:e3:8b:a8:5e:6e:7f:a7:4c:86:
                    36:a1:74:44:5c:0d:5d:0b:c6:02:31:88:25:05:a9:
                    f0:bc:93:35:c3:1f:36:84:48:6c:69:88:c5:48:21:
                    ba:93:90:1a:0a:f3:7f:82:fa:9f:c8:85:02:7f:66:
                    58:f2:94:07:2b:97:2d:4f:70:c1:b0:10:5f:7a:3e:
                    2d:e2:f9:52:4d:d4:9b:bf:f5:a2:95:c4:c4:14:71:
                    01:cf:80:9d:da:fd:cb:7d:30:83:2c:1a:f8:2c:84:
                    f3:06:89:c5:80:19:1f:d0:e6:cf:32:6b:ff:e5:20:
                    05:9a:2e:4b:aa:7b:55:f1:e9:77:9b:91:ac:69:2c:
                    6f:03:12:de:fc:62:66:1b:9f:f7:87:b9:ea:51:44:
                    c2:93:49:fb:1f:df:6b:4b:5b:c3:86:83:bc:7d:bd:
                    47:fb:1f:c9:8e:a4:8c:4b:23:32:18:0d:53:8e:d2:
                    0d:43:43:a4:1e:01:20:35:d0:72:95:75:c6:2c:7a:
                    7f:6e:b1:2b:5b:ac:f9:cf:90:39:72:28:69:84:82:
                    0f:c8:c0:21:31:5a:ed:dd:27:b4:b6:34:0a:9e:8e:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EC:D2:E3:0F:4F:92:3C:EA:CB:C5:18:D5:F5:CB:61:26:AB:6C:71
            X509v3 Authority Key Identifier:
                keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:83:1a:c5:15:2f:36:2d:b3:c2:f8:f1:9b:39:da:14:10:
         6c:29:13:f0:b5:ff:e1:69:de:33:16:91:2a:d3:a9:a6:b9:6e:
         dc:6a:47:49:a0:d4:2c:58:9b:16:35:ce:66:12:77:27:89:30:
         e1:ce:30:dd:61:c2:f0:55:37:73:0e:d8:1d:a8:8e:23:f0:5f:
         ab:1d:fe:a6:55:0c:aa:86:bc:5a:a9:9d:58:d5:b3:9a:b5:75:
         a1:bb:eb:bc:84:f8:fa:37:9f:ec:78:ea:f2:7e:13:a5:5d:b8:
         d4:9f:10:82:13:ef:a5:ad:ff:97:15:28:49:57:4e:fa:7c:2e:
         fd:19:34:b8:0c:ef:c4:df:8a:4a:fc:69:fe:53:8c:3b:58:89:
         71:7a:1f:ad:7e:f7:25:9d:58:39:5a:29:e9:f2:e6:1d:8a:c1:
         cf:b9:0e:3e:3b:08:ac:d3:a6:68:e9:b3:7a:c2:4d:af:72:60:
         5e:fe:d6:75:de:c2:2f:af:a7:47:05:11:9a:06:d3:63:22:5c:
         a3:2f:7c:4d:48:59:49:ea:ae:64:cf:16:aa:41:36:3e:cb:ee:
         8c:78:a0:7d:cb:1e:8a:67:41:be:68:bf:33:2f:c6:95:c5:29:
         df:e2:dc:a1:7d:f1:90:e0:8d:36:cd:4b:11:12:ec:eb:62:6f:
         07:b2:2c:c3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWYqkz9RkX/jAcuaCyMhEjtIa4LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1
RTUyRThFQjAeFw0yNTEyMjExNTE2MDJaFw0yNTEyMjQyMDU2MDJaMDMxMTAvBgNV
BAMTKEEyRUNEMkUzMEY0RjkyM0NFQUNCQzUxOEQ1RjVDQjYxMjZBQjZDNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vXb8muC/fjvpXXMennykqo9j
a/60QkMix/cQH9prdDOk2+OLqF5uf6dMhjahdERcDV0LxgIxiCUFqfC8kzXDHzaE
SGxpiMVIIbqTkBoK83+C+p/IhQJ/ZljylAcrly1PcMGwEF96Pi3i+VJN1Ju/9aKV
xMQUcQHPgJ3a/ct9MIMsGvgshPMGicWAGR/Q5s8ya//lIAWaLkuqe1Xx6Xebkaxp
LG8DEt78YmYbn/eHuepRRMKTSfsf32tLW8OGg7x9vUf7H8mOpIxLIzIYDVOO0g1D
Q6QeASA10HKVdcYsen9usStbrPnPkDlyKGmEgg/IwCExWu3dJ7S2NAqejvU3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUouzS4w9Pkjzqy8UY1fXLYSarbHEwHwYDVR0j
BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy
Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy
RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1
MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB
ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAbggxrFFS82LbPC+PGbOdoUEGwpE/C1/+Fp
3jMWkSrTqaa5btxqR0mg1CxYmxY1zmYSdyeJMOHOMN1hwvBVN3MO2B2ojiPwX6sd
/qZVDKqGvFqpnVjVs5q1daG767yE+Po3n+x46vJ+E6VduNSfEIIT76Wt/5cVKElX
Tvp8Lv0ZNLgM78Tfikr8af5TjDtYiXF6H61+9yWdWDlaKeny5h2Kwc+5Dj47CKzT
pmjps3rCTa9yYF7+1nXewi+vp0cFEZoG02MiXKMvfE1IWUnqrmTPFqpBNj7L7ox4
oH3LHopnQb5ovzMvxpXFKd/i3KF98ZDgjTbNSxES7OtibweyLMM=
-----END CERTIFICATE-----