This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
File:                     FFD09495181408CBE83FD333EACEF29FBCDAD633.mft (raw, json)
Hash identifier:          fWSfi7JFGa+AG1cp4bq1BKkj8+TSeRwWQAAM98anDgM=
Subject key identifier:   42:93:54:A7:EC:5F:AF:09:C3:C2:10:C9:19:14:BF:75:8D:34:7E:0F
Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33
Certificate issuer:       /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
Certificate serial:       7DDAA0E94344AB80E4DA9E600BC64324EFE03499
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
Manifest number:          27
Signing time:             Sun 01 Feb 2026 23:21:48 +0000
Manifest this update:     Sun 01 Feb 2026 23:16:48 +0000
Manifest next update:     Wed 04 Feb 2026 23:28:48 +0000
Files and hashes:         1: 3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (hash: P1YBvGHSMw2KSmorZM6GVpNPSOsIMTGTDkbnAUEcz4U=)
                          2: 3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa (hash: 2dbUHoYqjRohW3IHxlUvKZf6dq91UB5nDLAXnYGv67o=)
                          3: 3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa (hash: 9dGh3Dmwfr7Qg1VTty4nQgm98lmd64c7x7uG+kRxXvs=)
                          4: 3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (hash: /NCGV+SwtDLnV3TMTVLORuZVELyx2f18pHCo9yoVgIU=)
                          5: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (hash: nEvjJAuLU5NVHyPCkT4t36RWeV+PULX/Gg0P3xFzBdA=)
                          6: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (hash: 5LnPe1qqPi1/xX5VnvEUwwekWCcAbF1I2gMcXgA6ERo=)
                          7: 3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (hash: EFxWA7vxSgHBwram8ylJUW5n68a3XpYhbkZqHyGTFPU=)
                          8: FFD09495181408CBE83FD333EACEF29FBCDAD633.crl (hash: rsjPTFGINJ1a1ib5VM1qT2uL46l9yLhaJY6a+RkGQU8=)
                          9: 3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (hash: bD3z2MHh1z8AA6G7X+ZWEL+ijpSpYsmo1zxz1oUdyZ4=)
                          10: 3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (hash: xioTUNg3YtC13S6Cj3SPOGks7jmJZPc/QomqvXyPDT0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl
                          rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 23:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:da:a0:e9:43:44:ab:80:e4:da:9e:60:0b:c6:43:24:ef:e0:34:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
        Validity
            Not Before: Feb  1 23:16:48 2026 GMT
            Not After : Feb  4 23:28:48 2026 GMT
        Subject: CN=429354A7EC5FAF09C3C210C91914BF758D347E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:9c:ec:3a:98:a2:0a:b2:6d:fb:ba:91:78:
                    6e:a8:80:3c:bb:51:f6:d5:49:6f:88:06:9c:e2:8c:
                    7b:1f:62:83:b4:c1:50:34:c6:51:eb:a5:b2:d4:7a:
                    fe:ec:c9:0b:42:4f:fc:05:84:34:49:c1:59:d4:a5:
                    f3:99:fb:9f:f9:02:9d:54:fc:ab:d7:5f:79:ce:f9:
                    35:c6:96:1e:79:55:c8:c6:e9:23:f0:fc:8b:43:32:
                    dd:43:e3:8f:b9:b6:db:d4:f4:e6:df:f2:5c:8f:54:
                    2b:d7:5e:19:26:36:6f:7c:db:d2:fc:aa:aa:39:b7:
                    ea:02:aa:f8:86:39:94:c0:6e:cd:49:b8:da:d3:e1:
                    e9:6f:81:35:4d:b4:7b:69:c8:dd:49:60:ec:35:39:
                    52:77:a0:2a:56:e8:9a:87:47:58:56:1a:71:97:d0:
                    8d:c6:71:e3:ca:83:2f:8f:5f:f7:3c:a8:e5:2d:3c:
                    65:f3:06:25:49:fb:37:52:f8:8a:5e:7f:9b:20:9f:
                    89:1a:60:82:8e:a7:fb:65:c6:0e:13:e1:c4:ff:1f:
                    06:46:f9:53:77:56:0e:71:e1:37:92:7d:df:ec:bf:
                    88:fe:ea:94:f5:8b:4f:58:da:62:82:f3:e8:b5:2b:
                    a8:d4:5f:06:44:05:2a:2d:17:3f:3b:0e:26:20:16:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:93:54:A7:EC:5F:AF:09:C3:C2:10:C9:19:14:BF:75:8D:34:7E:0F
            X509v3 Authority Key Identifier:
                keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:26:fe:1a:2f:29:e0:0d:07:0d:01:0e:07:e6:3c:5b:50:fa:
         68:21:ac:6e:dd:eb:4a:1a:f8:65:95:01:f5:11:e4:8a:93:dd:
         b4:79:a4:c5:95:9c:f8:ae:c7:14:f7:bf:dc:f0:0e:5f:e1:f0:
         f6:49:b9:4d:d5:2e:43:b8:af:61:56:d7:fa:bc:da:0b:15:9b:
         90:1c:62:de:02:d7:40:8d:b1:86:94:7f:70:01:15:9e:d1:5a:
         c4:81:ac:45:87:46:f0:d5:ba:35:0c:3e:13:b0:82:76:fa:37:
         40:f9:8f:1a:51:72:09:fe:06:2b:a1:0a:5b:ab:9c:0e:c2:e7:
         68:9f:14:ae:19:a1:34:7d:73:1b:c0:07:d4:63:54:02:b8:90:
         f7:61:49:97:f9:75:c0:c7:d7:3d:e3:1b:97:c3:64:1d:d1:66:
         1b:c5:a3:18:2e:d6:8f:b6:b4:37:b5:78:b2:dc:ee:eb:43:ec:
         5d:4b:b8:1a:9a:23:7d:c0:bb:29:2c:1a:2f:0f:0d:8f:bb:f8:
         20:4b:0a:14:df:cc:c7:37:bc:15:f7:d2:eb:e9:92:31:46:f6:
         f6:ad:c2:06:1f:f1:f5:88:cf:7b:cd:28:da:bb:1d:f5:ab:13:
         70:f2:bb:5e:ba:aa:6c:33:9f:8f:c2:3f:1e:3b:3c:9e:9c:55:
         3c:f5:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:50 2026 by rpki-client