This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
File:                     FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json)
Hash identifier:          UmHEQjzbJKN3hZZtylHerZaS+cl/z0L/GkiF1T/goKg=
Subject key identifier:   07:1D:5E:B1:F8:4A:87:76:13:CE:95:0A:26:62:1F:B2:20:71:0B:84
Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4
Certificate issuer:       /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4
Certificate serial:       474BE92A5F08EF7B2833885C26A4215863EB7F21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
Manifest number:          024A
Signing time:             Sun 01 Feb 2026 13:52:26 +0000
Manifest this update:     Sun 01 Feb 2026 13:47:26 +0000
Manifest next update:     Wed 04 Feb 2026 17:01:26 +0000
Files and hashes:         1: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: eVU8bSPPi8Zfhh12P+TwANS8bw5bo6+lmKsb1UaAJ9k=)
                          2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=)
                          3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=)
                          4: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl
                          rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 17:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4b:e9:2a:5f:08:ef:7b:28:33:88:5c:26:a4:21:58:63:eb:7f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4
        Validity
            Not Before: Feb  1 13:47:26 2026 GMT
            Not After : Feb  4 17:01:26 2026 GMT
        Subject: CN=071D5EB1F84A877613CE950A26621FB220710B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:ee:ac:65:2e:14:fc:5b:9f:39:6a:13:d8:
                    4e:07:ac:dd:98:66:d2:09:37:ed:36:37:a8:13:90:
                    61:03:47:a9:62:73:83:46:8e:1f:4b:c6:74:75:9d:
                    80:27:c1:2b:58:a8:6d:5d:7d:a5:d3:f2:6a:3b:24:
                    28:2f:b0:f4:f6:84:10:5a:c1:d7:dd:c6:0c:7c:0e:
                    94:3e:45:db:8b:a9:e8:9e:81:5a:56:0e:73:6e:2c:
                    f8:ad:d2:d1:db:ae:48:13:93:64:8f:e7:ab:b9:bb:
                    11:3f:17:f6:ba:95:9b:02:3a:8c:4e:88:32:63:6f:
                    8f:36:42:34:94:88:98:18:37:ec:f4:ca:e1:60:29:
                    c5:64:1b:19:51:ce:52:73:fa:14:8c:2c:d2:af:93:
                    41:f9:12:52:af:87:4b:7a:58:81:9b:c6:f9:cc:d8:
                    e7:6c:28:fe:9c:02:c6:d3:48:a8:ed:e9:c8:f8:e8:
                    5a:00:64:d7:c8:57:c2:6a:ce:79:48:3c:49:b7:e1:
                    7f:c6:c3:9a:17:25:6a:22:7c:0a:48:fb:14:fe:d3:
                    66:51:d1:1a:1a:bd:57:af:48:3e:17:b7:ff:12:fc:
                    20:cc:58:58:ed:9c:fb:29:fe:76:b9:ec:a3:f1:50:
                    b8:1e:d8:59:a4:e7:61:80:42:77:c3:c8:3e:02:6d:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:5E:B1:F8:4A:87:76:13:CE:95:0A:26:62:1F:B2:20:71:0B:84
            X509v3 Authority Key Identifier:
                keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d5:70:e3:58:03:c3:77:0f:0b:2e:49:f0:98:90:de:ad:0d:
         24:0f:77:ff:bd:98:69:2d:de:5b:1a:69:eb:da:e3:94:d6:07:
         38:83:0a:bd:8b:e3:c6:10:2f:38:17:6b:81:ca:d7:24:8a:3a:
         5f:dd:8f:1a:cb:ed:f2:48:d9:5f:94:3f:ba:46:a5:bb:63:7e:
         25:44:07:5c:ae:4c:39:a9:85:c1:c6:7c:5f:af:96:06:1a:76:
         f8:f1:5e:08:c5:58:43:48:b1:72:6d:c7:80:f2:2d:4c:ab:dc:
         61:d7:f5:3b:b9:eb:38:13:7e:a9:fc:a1:b0:12:8d:b9:b6:e1:
         2b:cf:b1:d2:a2:b5:96:80:6e:3d:25:3c:12:9d:24:ad:af:dc:
         40:e7:14:02:38:45:4f:67:b4:6b:dc:ac:2d:6c:83:ae:7e:40:
         82:22:2a:7b:fc:1c:e6:03:4f:c6:38:c4:ee:8c:bc:39:5b:16:
         0d:96:57:c1:d9:a0:de:22:7b:e3:9f:d6:eb:a5:7c:54:03:57:
         79:9c:fb:a1:e1:18:0e:40:28:3c:c4:29:21:e2:7b:4f:0f:70:
         b2:6c:9b:10:63:e5:ee:63:ca:c4:b3:ac:20:ad:3e:18:1f:d2:
         81:d7:c8:87:83:37:4b:84:24:5b:10:93:54:df:2a:c1:63:3b:
         9e:1b:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:08 2026 by rpki-client