This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          lRjqqlWjoki8MjMhxRRvega/crXjl5elD3U4bv6jqT0=
Subject key identifier:   FB:F7:64:16:63:16:9D:30:8F:64:00:6A:E6:14:64:21:29:41:AF:C7
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       523DA5DC7402F0B1D59DC86DAEA8A783D3F8F17B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          093B
Signing time:             Fri 19 Dec 2025 21:40:25 +0000
Manifest this update:     Fri 19 Dec 2025 21:35:25 +0000
Manifest next update:     Sun 21 Dec 2025 01:24:25 +0000
Files and hashes:         1: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=)
                          2: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=)
                          3: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=)
                          4: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=)
                          5: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=)
                          6: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=)
                          7: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=)
                          8: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=)
                          9: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=)
                          10: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
                          11: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=)
                          12: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=)
                          13: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=)
                          14: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=)
                          15: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
                          16: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=)
                          17: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=)
                          18: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=)
                          19: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=)
                          20: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=)
                          21: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=)
                          22: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=)
                          23: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=)
                          24: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=)
                          25: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=)
                          26: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: Mew4eYRHtcH72w1Roh+MrxZGyqy2fb7UERwxGqb3BIQ=)
                          27: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=)
                          28: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=)
                          29: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=)
                          30: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3d:a5:dc:74:02:f0:b1:d5:9d:c8:6d:ae:a8:a7:83:d3:f8:f1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Dec 19 21:35:25 2025 GMT
            Not After : Dec 21 01:24:25 2025 GMT
        Subject: CN=FBF7641663169D308F64006AE61464212941AFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:d5:e4:b9:c6:39:3e:e5:53:98:bc:e4:ed:
                    c6:77:0f:37:06:30:df:f7:b7:14:f5:33:93:81:22:
                    26:a7:6b:63:f4:c2:d5:11:dc:fd:5c:6d:f5:b9:93:
                    8e:8e:fa:1f:e5:4c:29:1f:de:1a:b7:7d:e2:ff:65:
                    f7:9a:65:5b:01:30:31:3a:4c:9d:89:54:ee:6f:98:
                    3f:13:a3:b6:1f:7b:05:99:3d:0c:09:ab:eb:cc:ce:
                    4c:9f:4d:28:8e:b5:a7:49:f7:7a:a0:9c:e6:1d:7c:
                    b9:b3:08:1a:d0:78:17:a4:1c:5b:eb:d5:d2:a1:cf:
                    ae:25:35:1e:df:2c:b1:e1:9c:40:4b:bf:f9:cd:14:
                    2e:43:c8:0b:f8:c4:0f:9a:ac:93:be:8d:85:c7:f7:
                    7c:95:4f:fa:31:f9:d6:62:cd:04:ac:96:aa:ae:36:
                    38:b3:ac:61:8a:61:ae:ed:b9:16:be:92:99:0b:ba:
                    21:4e:a1:41:3f:27:97:7f:f4:90:e5:7e:0b:76:58:
                    69:43:70:0c:07:cd:19:4d:53:c4:0c:78:4a:60:c7:
                    6a:79:6f:5b:68:6f:2e:db:fc:41:41:3d:82:57:c7:
                    7e:81:da:5e:9d:6e:fc:9c:44:b9:11:2a:f7:6c:81:
                    a0:2f:b0:5c:ab:8a:c2:22:e4:28:48:45:7e:0f:b5:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:64:16:63:16:9D:30:8F:64:00:6A:E6:14:64:21:29:41:AF:C7
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:b8:cc:41:d4:09:bf:f7:64:c7:7f:ed:12:8f:d8:e1:93:
         65:f3:f0:4b:37:f5:3c:20:d7:d9:d5:bb:d0:14:69:26:84:dd:
         cd:e1:93:d7:2e:0d:80:af:4c:d2:0a:31:76:cd:1e:02:8a:c6:
         f6:be:7c:14:34:70:ce:87:91:87:6e:fb:8b:73:25:a0:b2:be:
         35:c5:a3:34:6d:82:64:54:ab:6d:18:ba:c5:ba:1f:d6:eb:2c:
         0b:2f:8b:36:54:98:45:0f:a2:9b:16:05:a0:f3:6e:4f:63:2a:
         e1:ae:39:6a:e7:54:a0:08:55:a8:06:db:7c:ff:fd:28:7a:86:
         09:1f:5c:a2:96:46:71:60:93:86:84:ff:a8:d4:18:20:95:5f:
         77:b2:7a:5b:f7:c9:6c:4e:87:d5:30:58:27:f9:10:96:b8:bd:
         ca:4d:5f:8d:ac:42:3b:7f:f3:eb:63:85:2c:8d:ba:ae:7d:d8:
         85:72:ae:60:09:13:ab:c0:31:5d:fb:f0:da:ff:f0:dc:5f:f1:
         02:f3:e1:e2:94:c4:10:83:8e:60:8b:cd:8b:27:76:1c:d8:d9:
         17:5f:18:0f:b0:1d:a9:bf:85:8a:47:00:d3:5a:7b:a0:8f:e2:
         5c:80:dc:69:36:e4:64:0e:3a:47:6f:e1:fe:5c:8b:ab:e2:05:
         26:ca:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:17:57 2025 by rpki-client