This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft
File:                     2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json)
Hash identifier:          lh1zfspFZXfIxeu5xxl1GVIa9lucV5SVK1HzgI1e/Y0=
Subject key identifier:   31:6F:D3:0C:A4:D1:3C:AF:38:55:2E:BC:4A:DD:A8:4D:57:5B:7F:C0
Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF
Certificate issuer:       /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF
Certificate serial:       3F468CAB6F7DF8958AF948495418585A5164AD20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft
Manifest number:          026E
Signing time:             Sun 01 Feb 2026 05:22:24 +0000
Manifest this update:     Sun 01 Feb 2026 05:17:24 +0000
Manifest next update:     Wed 04 Feb 2026 12:49:24 +0000
Files and hashes:         1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: 7XsR3XY6kcwciDR4FFtSNTV9lXf9Y4uOj4u0ukygAHc=)
                          2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: NML/79jB4zZF/SxB4ZqIyV4CbjHtpeNZ0f57zrhrbmM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl
                          rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 12:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:46:8c:ab:6f:7d:f8:95:8a:f9:48:49:54:18:58:5a:51:64:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF
        Validity
            Not Before: Feb  1 05:17:24 2026 GMT
            Not After : Feb  4 12:49:24 2026 GMT
        Subject: CN=316FD30CA4D13CAF38552EBC4ADDA84D575B7FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:77:5e:59:0a:a9:48:93:ee:78:6a:17:84:
                    1a:a4:d3:57:27:64:7f:c4:13:8d:53:b7:d9:c0:52:
                    65:0e:a2:54:c1:52:34:7d:32:b4:cd:0d:73:4f:b4:
                    a7:96:66:2a:53:3b:8e:65:5f:7a:90:5b:65:57:cf:
                    89:79:6d:28:84:a3:0f:c9:55:37:fd:db:2d:f6:4f:
                    82:b3:b0:48:87:e9:c6:58:41:63:3a:b6:db:10:be:
                    b4:21:e1:fd:1e:d4:b9:da:18:56:5f:21:bf:17:a5:
                    d9:44:7a:9c:ac:41:1f:8a:f3:64:1a:2f:84:87:9f:
                    b3:87:05:ad:f8:97:51:dd:17:4c:25:fb:8f:89:f4:
                    69:01:94:85:19:28:44:55:11:7c:8f:36:bf:11:76:
                    6f:ae:d0:8d:d5:58:1b:33:d3:cd:12:29:c6:ec:5f:
                    f5:37:a6:39:61:96:75:59:91:6b:6f:75:59:57:ac:
                    6d:2d:ee:77:09:cf:e8:9f:95:3d:fb:95:cf:0a:0d:
                    0d:56:10:c7:34:7e:0d:bc:22:b4:a2:1d:dc:f4:c8:
                    e3:4c:65:02:9a:0c:cd:7b:95:81:46:0b:3f:2e:72:
                    2a:dc:b5:1d:15:4e:8a:91:14:28:db:98:ba:0a:bd:
                    af:41:43:6d:68:4d:60:5e:a7:c5:6e:02:cf:61:6e:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6F:D3:0C:A4:D1:3C:AF:38:55:2E:BC:4A:DD:A8:4D:57:5B:7F:C0
            X509v3 Authority Key Identifier:
                keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:eb:81:a3:fb:ea:b4:05:66:3a:39:a8:14:3f:e2:e7:2d:
         64:86:70:f7:42:0f:b1:8d:8f:7a:96:75:10:6c:b5:c3:e4:94:
         8b:e6:c8:62:b9:2c:ee:e0:dc:cc:50:cd:78:cb:0a:51:52:e5:
         ae:77:e8:bf:32:67:de:db:de:09:82:1e:05:7d:09:89:a9:39:
         98:62:7a:cb:fd:fd:32:7f:fb:40:70:93:f3:74:a4:c9:28:d0:
         b5:59:8c:ab:dc:1c:2a:9e:05:db:9b:57:f3:26:eb:c6:8a:50:
         10:84:50:b2:e7:e4:fc:0d:bf:08:16:28:54:7c:99:0b:db:9b:
         e3:0d:82:7e:d0:7e:57:21:09:48:bd:e9:b4:52:99:c5:cc:4b:
         33:f1:cc:7b:19:d3:14:bc:88:bf:8d:ba:7c:f2:87:69:ba:3e:
         1a:e9:0b:2f:9b:87:1d:a4:a6:03:4e:80:12:88:ae:d2:39:ec:
         eb:3c:00:80:29:d5:8d:bb:87:a3:1c:75:04:a0:b1:28:98:8f:
         d5:e2:88:8c:70:9b:d2:b6:00:b5:77:a2:20:f7:9f:aa:be:3c:
         ab:31:df:66:a8:bd:41:11:9b:39:32:45:07:b3:ee:f1:eb:8f:
         8f:cf:0b:a0:d3:05:79:a3:de:d4:50:15:8b:0c:15:13:cc:65:
         ec:cf:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:22 2026 by rpki-client