This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          sKyl6oEik85JvnWa+zbW3/EQunPZzAuNuFqUp8zS8ac=
Subject key identifier:   F4:BA:48:3A:8E:63:2D:BB:00:97:8D:71:58:37:49:A6:4C:9F:0A:15
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       4CA2BB235D3CC607C91B9EA8E6FDF5E5589DE526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          091D
Signing time:             Sat 20 Dec 2025 16:40:25 +0000
Manifest this update:     Sat 20 Dec 2025 16:35:25 +0000
Manifest next update:     Sun 21 Dec 2025 16:42:25 +0000
Files and hashes:         1: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
                          2: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
                          3: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          4: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          5: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          6: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          7: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          8: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          9: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          10: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          11: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          12: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          13: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          14: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          15: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          16: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          17: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          18: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          19: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          20: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          21: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          22: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          23: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          24: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: NWFGLlcprob4hbz5Zq6rAwY28wpM2WGFof7n/j1jt48=)
                          25: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          26: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          27: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          28: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          29: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          30: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
                          31: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          32: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          33: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 16:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a2:bb:23:5d:3c:c6:07:c9:1b:9e:a8:e6:fd:f5:e5:58:9d:e5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Dec 20 16:35:25 2025 GMT
            Not After : Dec 21 16:42:25 2025 GMT
        Subject: CN=F4BA483A8E632DBB00978D71583749A64C9F0A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:ee:b8:96:4e:79:49:a7:dc:77:ed:0a:7a:
                    1a:5f:64:0b:37:73:a8:d0:81:7f:bc:26:2d:17:af:
                    0f:57:20:3e:4f:de:e5:14:67:b4:5e:9e:73:7a:7b:
                    f8:a5:77:80:06:ae:9a:f6:4b:c0:fb:32:96:49:71:
                    0c:db:5c:d5:09:26:b6:b3:21:37:31:c6:22:61:7f:
                    ba:22:1a:0e:59:ed:c7:72:56:6e:17:a0:fa:06:05:
                    aa:de:4d:e0:55:64:29:84:01:2f:f4:76:59:2c:85:
                    72:22:e2:41:7a:0e:c9:4e:ca:d1:b2:57:92:f1:92:
                    8e:b8:ad:a1:44:7d:27:c3:fb:33:4c:d8:1c:04:47:
                    d5:d7:99:f8:c5:1e:ba:d2:a9:6e:22:25:33:8d:36:
                    81:c2:4a:6c:f5:7d:36:59:35:bc:16:64:64:71:99:
                    da:23:c5:84:00:9c:87:9d:e7:0d:94:a0:eb:52:8f:
                    71:f4:82:a9:b3:41:51:b8:58:89:da:45:7f:c9:ef:
                    13:bd:da:ad:c5:90:29:08:d7:10:e4:e6:9a:8e:c6:
                    58:c2:07:9f:18:74:9a:e9:91:1e:e9:81:c9:e2:31:
                    81:07:a1:73:df:90:cb:c0:14:6d:35:86:52:c7:99:
                    36:1c:85:fd:ec:11:11:bd:b5:db:d5:33:ec:a1:4f:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BA:48:3A:8E:63:2D:BB:00:97:8D:71:58:37:49:A6:4C:9F:0A:15
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:63:1e:b5:76:0c:20:93:c8:0d:fd:83:2e:a6:ae:6f:4c:cf:
         96:87:e5:ec:26:a4:30:99:83:a8:fb:e1:7c:62:84:be:03:20:
         65:d4:be:a7:32:ca:f6:6d:06:fe:8b:d8:1f:8a:33:9f:fd:1f:
         77:6e:05:fd:27:8b:72:1e:4e:57:b9:72:17:50:4a:94:cd:37:
         95:f0:ea:b7:10:c4:5b:3e:3d:e2:9a:75:60:32:8e:59:e5:c5:
         1d:de:c6:21:61:ca:e8:c6:7c:e0:af:59:c3:e4:62:8d:8c:12:
         69:28:98:ac:ed:5d:2e:3b:03:79:84:b7:99:b2:eb:34:40:f5:
         4b:dd:40:cf:c7:39:32:d3:21:d7:e8:97:9a:05:16:fb:d9:88:
         5c:ee:c4:80:99:4a:ed:65:5b:d5:44:92:d8:7a:20:ff:06:51:
         7f:6b:b7:31:3a:37:2f:d5:ce:65:f8:a3:67:5f:4f:dc:7a:bd:
         99:16:c9:39:e6:19:f2:ea:c3:f6:09:15:4c:17:94:bf:ff:4a:
         49:0a:6b:fa:a1:c1:d3:56:14:93:20:57:84:53:a9:84:56:6c:
         04:b3:e1:7d:7a:5b:90:df:39:bc:49:0e:42:88:d1:59:93:a7:
         77:e9:72:08:ad:e2:2f:fe:64:09:d9:2f:d0:e6:2d:3c:3f:97:
         6f:d8:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:11:43 2025 by rpki-client