This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          z8BGhy1iNCcAxhMHCq81e8HnEic5GFiEaqjySmslH1M=
Subject key identifier:   67:68:8D:A0:E3:F6:B2:8A:1D:27:1F:D9:A2:46:8D:DD:B4:FE:8E:BD
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       6B94F726D86486F06AFD4B37337611547A77E7C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          0555
Signing time:             Sat 31 Jan 2026 21:22:31 +0000
Manifest this update:     Sat 31 Jan 2026 21:17:31 +0000
Manifest next update:     Wed 04 Feb 2026 07:02:31 +0000
Files and hashes:         1: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
                          2: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          3: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
                          4: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
                          5: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
                          6: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: bVZjqwKxS7IeF/4uO536aEr7ldNYACnsfJUufSOP5rM=)
                          7: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
                          8: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
                          9: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          10: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 07:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:94:f7:26:d8:64:86:f0:6a:fd:4b:37:33:76:11:54:7a:77:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jan 31 21:17:31 2026 GMT
            Not After : Feb  4 07:02:31 2026 GMT
        Subject: CN=67688DA0E3F6B28A1D271FD9A2468DDDB4FE8EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:0b:9f:fb:af:a6:e9:bb:d5:f2:5b:b7:61:
                    5d:fb:7b:c3:fe:db:56:76:3a:5a:d0:99:5f:6a:9e:
                    cc:93:35:e2:08:b8:b5:2c:9c:0f:6d:77:c4:57:65:
                    51:d9:9f:26:12:33:cf:9b:6b:6f:28:8f:e7:95:8b:
                    23:b0:eb:51:ab:9f:e8:88:c6:9e:89:3a:57:1b:7c:
                    51:83:e4:ce:5e:97:7c:c3:4f:a9:df:ad:3b:2b:35:
                    54:10:a2:61:a6:01:10:af:f3:b3:55:54:04:29:50:
                    b0:4b:bf:fa:17:b9:38:32:e8:8e:31:78:25:60:62:
                    b5:bd:4d:81:d4:27:46:fe:6c:46:9f:43:fa:5c:f8:
                    4c:ed:b2:92:ff:a2:f1:5c:ac:2e:14:c1:72:ad:ad:
                    7b:65:7b:42:97:48:5c:fb:42:57:28:fe:94:bb:89:
                    a3:39:80:a2:6e:01:75:fc:92:64:2d:7b:07:a7:83:
                    71:7a:bf:02:dc:1f:5b:ef:d1:f3:f9:76:e2:1a:df:
                    02:df:1b:f3:54:1d:e2:94:17:3c:b3:c4:bb:b5:e4:
                    c7:01:f2:19:8f:f8:77:10:b6:d9:13:39:af:39:9f:
                    06:6b:0a:bf:13:10:4e:37:f6:cd:af:45:88:db:ce:
                    9f:86:48:a7:f6:be:10:7f:43:e6:b3:d6:f6:e1:3a:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:68:8D:A0:E3:F6:B2:8A:1D:27:1F:D9:A2:46:8D:DD:B4:FE:8E:BD
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:27:51:20:9f:48:0b:ac:ec:2f:8d:74:4d:fe:2f:ab:41:
         eb:3e:c3:c9:70:a5:c6:7d:ef:40:b0:30:11:67:9d:96:8b:d6:
         a6:4c:68:e4:02:d6:e6:5f:1c:5d:1e:f3:bd:3a:1e:e6:4d:b7:
         44:e7:f7:e4:55:a4:10:0d:00:0b:8f:0d:98:ac:c6:89:5e:5d:
         18:86:27:d3:79:55:3a:e2:29:6d:7d:f1:5a:17:1a:39:c5:74:
         86:57:a9:49:c4:85:a8:f1:04:ec:31:45:d7:79:66:de:2d:2e:
         a0:b5:ca:2d:c6:8f:d6:e2:b3:19:4e:38:9d:63:8c:60:d5:da:
         47:df:e4:10:48:f3:d2:ad:fc:82:25:0a:b8:93:20:21:99:65:
         31:23:f2:e4:27:48:ad:ac:e4:14:42:9e:03:26:e5:c6:1e:a9:
         90:da:16:ef:dd:5a:fb:8b:22:78:4e:5c:33:f5:11:35:2d:a4:
         eb:5a:3a:5a:ae:34:ae:ea:a8:d4:0e:c7:e4:fc:96:81:2e:72:
         72:6c:e2:fb:51:2a:6d:a7:b6:c2:74:a7:d6:7e:3c:ff:7d:ba:
         8d:24:47:f2:c5:3e:4a:e3:92:30:e7:26:e5:33:19:db:81:af:
         81:1d:e9:31:97:a1:82:40:0e:3f:81:ef:2d:ba:af:dd:eb:fb:
         9a:3a:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:01 2026 by rpki-client