This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: Ob7+Spg3qui96cTYl19nnm3gd/HjvWvKnShxkNsgeDw= Subject key identifier: C0:33:E6:3D:C5:E9:AB:EA:A6:C4:36:D9:44:29:64:36:51:88:85:9E Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 0F40E260957F72C01149503705516D5FE1C57180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0909 Signing time: Sat 20 Dec 2025 12:05:25 +0000 Manifest this update: Sat 20 Dec 2025 12:00:25 +0000 Manifest next update: Sun 21 Dec 2025 14:13:25 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 4: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: 5HU34sBqiCmZ5zULeGUMFPUrOnRe5er6KaADsPvfk8A=) 5: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:40:e2:60:95:7f:72:c0:11:49:50:37:05:51:6d:5f:e1:c5:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Dec 20 12:00:25 2025 GMT Not After : Dec 21 14:13:25 2025 GMT Subject: CN=C033E63DC5E9ABEAA6C436D9442964365188859E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:57:af:3a:1d:52:f7:3d:46:b2:57:1a:d3: 1d:ae:c3:5d:db:39:99:0e:7a:85:e5:e6:b5:cf:de: 5e:98:85:0a:cb:b6:a6:1a:47:54:1c:c9:e3:ee:83: 44:a4:7b:2c:44:40:f6:1a:4f:b3:c5:87:4f:38:d0: 7a:85:ae:43:e7:73:5b:6e:5c:99:ec:17:5f:d7:fd: 0d:8f:b3:4f:a6:27:ae:6b:0b:af:03:08:89:30:d7: ac:da:6a:3b:5f:85:4c:af:fd:af:87:47:b7:2f:94: 43:e0:41:6d:11:57:ff:9e:e4:b7:9f:83:da:d5:62: eb:9f:5d:a4:d9:60:cd:ce:f3:af:61:5a:d6:0a:44: 7e:bf:f4:90:ee:18:f8:a0:b9:b0:6f:c1:51:74:7c: a7:84:46:a8:d1:da:d4:27:5c:a5:c7:11:3a:84:d5: d8:a1:83:8b:fb:cc:d5:6e:ef:f0:9a:77:89:9c:51: 5f:25:9a:5b:df:7d:bc:a2:17:f2:37:9d:06:6f:8d: f8:dc:d9:2e:a5:27:88:db:aa:ec:6e:87:33:e4:55: bb:d1:3d:03:2b:49:a8:4f:8e:75:5c:21:a0:e6:cc: 0a:6a:8d:cc:86:38:cb:25:f3:f7:40:62:8b:f8:e0: d1:4a:70:da:3f:16:95:c0:c3:73:81:b0:eb:44:00: 43:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:E6:3D:C5:E9:AB:EA:A6:C4:36:D9:44:29:64:36:51:88:85:9E X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:58:cf:57:e1:0b:7b:ec:e4:5e:c0:0d:0d:eb:58:93:47:2f: fc:bb:0e:0b:89:e4:ec:ca:cf:d4:ac:46:26:79:3f:45:c3:26: d5:db:ba:08:66:e4:d0:8b:b1:12:f5:8d:45:ab:ae:00:4a:53: 58:84:0e:c6:fa:f1:be:a7:16:f5:2f:c2:ea:85:e2:70:5b:c9: d6:7e:d1:47:e2:23:bd:ea:93:a0:18:b6:70:73:54:5f:0a:e5: 21:44:a2:aa:c5:7e:17:46:6e:2a:e6:61:82:ee:1d:0d:c2:b4: 48:f5:ed:70:e3:35:dd:8a:bf:bd:5b:ec:93:8e:df:f2:7d:0b: 51:67:ca:49:79:ed:96:c6:59:0e:b5:a6:24:95:47:3a:4b:be: 86:7a:ac:6d:b5:08:76:5a:fd:16:da:01:8d:8b:22:65:03:ad: 39:b2:e0:2f:69:1e:d3:54:c8:69:6a:34:39:94:3b:d4:07:52: c2:1f:cc:f7:43:5d:4a:c6:78:b8:1c:51:40:74:21:5d:21:ca: 24:16:f2:00:86:38:82:8e:94:2f:2f:05:94:d8:95:3c:ed:6b: 43:0c:42:05:73:75:e8:54:16:22:38:dc:75:e2:ce:ee:0f:5e: 4f:2f:e2:f7:d4:03:d5:5d:90:74:c4:14:5f:32:d4:6d:78:ff: 60:28:b5:b8 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUD0DiYJV/csARSVA3BVFtX+HFcYAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MTIyMDEyMDAyNVoX DTI1MTIyMTE0MTMyNVowMzExMC8GA1UEAxMoQzAzM0U2M0RDNUU5QUJFQUE2QzQz NkQ5NDQyOTY0MzY1MTg4ODU5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJu7V686HVL3PUayVxrTHa7DXds5mQ56heXmtc/eXpiFCsu2phpHVBzJ4+6D RKR7LERA9hpPs8WHTzjQeoWuQ+dzW25cmewXX9f9DY+zT6YnrmsLrwMIiTDXrNpq O1+FTK/9r4dHty+UQ+BBbRFX/57kt5+D2tVi659dpNlgzc7zr2Fa1gpEfr/0kO4Y +KC5sG/BUXR8p4RGqNHa1CdcpccROoTV2KGDi/vM1W7v8Jp3iZxRXyWaW999vKIX 8jedBm+N+NzZLqUniNuq7G6HM+RVu9E9AytJqE+OdVwhoObMCmqNzIY4yyXz90Bi i/jg0Upw2j8WlcDDc4Gw60QAQxMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTAM+Y9 xemr6qbENtlEKWQ2UYiFnjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlYz1fhC3vs5F7ADQ3rWJNHL/y7DguJ5OzK z9SsRiZ5P0XDJtXbughm5NCLsRL1jUWrrgBKU1iEDsb68b6nFvUvwuqF4nBbydZ+ 0UfiI73qk6AYtnBzVF8K5SFEoqrFfhdGbirmYYLuHQ3CtEj17XDjNd2Kv71b7JOO 3/J9C1Fnykl57ZbGWQ61piSVRzpLvoZ6rG21CHZa/RbaAY2LImUDrTmy4C9pHtNU yGlqNDmUO9QHUsIfzPdDXUrGeLgcUUB0IV0hyiQW8gCGOIKOlC8vBZTYlTzta0MM QgVzdehUFiI43HXizu4PXk8v4vfUA9VdkHTEFF8y1G14/2Aotbg= -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:35 2025 by rpki-client