This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
File:                     8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json)
Hash identifier:          IBseAtk7oGygrOz384+9zZhe2c5OE777QDKBnsJAEg8=
Subject key identifier:   B2:68:D4:7B:4E:6F:0B:82:D9:47:D6:E0:56:EA:82:58:37:80:F6:59
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       68533CE994F00659738EF882B1B9AECCC0BB4604
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
Manifest number:          0911
Signing time:             Sat 20 Dec 2025 11:05:25 +0000
Manifest this update:     Sat 20 Dec 2025 11:00:25 +0000
Manifest next update:     Sun 21 Dec 2025 13:22:25 +0000
Files and hashes:         1: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=)
                          2: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=)
                          3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: QdGrj+aHXWIbPaSzJ2KIDs7KLiBgQZqY9zM9TIK4rYs=)
                          4: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=)
                          5: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 13:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:3c:e9:94:f0:06:59:73:8e:f8:82:b1:b9:ae:cc:c0:bb:46:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Dec 20 11:00:25 2025 GMT
            Not After : Dec 21 13:22:25 2025 GMT
        Subject: CN=B268D47B4E6F0B82D947D6E056EA82583780F659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:e1:c7:e1:7d:41:7f:45:34:47:09:6d:e7:
                    1b:c7:7a:f6:00:f4:3a:da:a8:f0:b0:4a:7d:e0:55:
                    22:48:a0:a5:37:23:9d:23:0b:f9:64:35:a4:8e:b4:
                    86:a2:b9:2a:c2:6e:af:b0:af:2b:bc:be:02:a0:fc:
                    1b:3d:53:68:fa:ff:7a:a8:25:09:43:ed:28:69:a5:
                    ee:27:19:f1:fb:f3:3a:b6:f5:e4:1f:12:51:83:19:
                    25:eb:16:aa:3c:30:84:5a:94:ab:f6:8e:c5:d5:4d:
                    58:f1:c1:25:19:85:ee:77:80:78:d7:23:be:6e:fb:
                    db:7c:2d:38:fe:7e:1b:a2:2d:c1:12:79:7f:08:8c:
                    7e:61:42:9b:29:35:9f:e7:9f:1a:61:1e:8a:42:29:
                    b1:58:7f:05:a3:6b:f7:cf:2f:a5:f5:c4:86:cd:e9:
                    9d:69:2a:49:e3:3c:3a:d1:5e:4d:90:a4:c6:b9:03:
                    f1:a4:26:61:00:c9:26:35:60:c2:53:04:f5:18:76:
                    73:8f:91:31:78:e2:8e:a0:67:f4:2d:a1:d2:65:45:
                    56:58:87:9a:88:3a:f7:7b:43:66:93:0f:21:73:04:
                    b0:af:e9:46:f0:6b:00:c6:e6:16:fd:42:a9:c9:3c:
                    ee:d9:03:1e:92:e2:0f:f8:23:d1:c2:88:1c:ad:89:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:68:D4:7B:4E:6F:0B:82:D9:47:D6:E0:56:EA:82:58:37:80:F6:59
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:79:24:df:9b:dd:34:84:64:d0:99:89:46:e1:fd:d3:43:c7:
         da:fa:7a:93:23:f8:09:b8:1b:7a:c2:a4:49:c3:5d:62:af:0c:
         52:cc:80:20:6e:9c:3e:24:f9:f3:95:89:81:70:60:f0:9a:8b:
         35:d6:93:a2:c1:57:16:cb:63:64:04:25:72:6a:47:bd:1c:bd:
         69:73:f1:5e:bc:4f:24:c4:02:50:b5:39:c8:80:d0:7a:06:01:
         47:9d:09:2c:0f:ef:a8:b5:e7:58:8d:b9:b3:f6:01:43:6c:33:
         4a:f9:d7:48:7e:d1:64:07:ef:77:d7:00:11:76:40:62:69:63:
         6b:89:3a:eb:51:69:9a:d0:b2:2b:a1:84:79:0a:22:de:f7:40:
         83:36:7e:75:63:27:23:8e:ad:27:2f:0f:38:8f:1f:5a:2c:1e:
         36:a4:88:6e:e7:bf:63:a2:f0:4b:b0:8c:e1:53:d0:ad:86:f7:
         96:48:d0:a6:20:99:ed:e9:35:ab:14:36:b5:a0:6f:3b:2e:35:
         11:e5:86:b5:89:5e:86:4d:e7:60:fb:2e:dd:4f:e7:03:36:e6:
         cf:40:eb:ec:43:59:63:bb:89:5b:80:81:0c:f9:a9:47:4d:52:
         84:c7:ab:e6:35:b3:5a:da:9c:d9:ce:c8:4c:5e:0f:df:9c:db:
         82:27:3c:ba
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUaFM86ZTwBllzjviCsbmuzMC7RgQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2
ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUxMjIwMTEwMDI1WhcNMjUxMjIxMTMyMjI1
WjAzMTEwLwYDVQQDEyhCMjY4RDQ3QjRFNkYwQjgyRDk0N0Q2RTA1NkVBODI1ODM3
ODBGNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPXhx+F9QX9F
NEcJbecbx3r2APQ62qjwsEp94FUiSKClNyOdIwv5ZDWkjrSGorkqwm6vsK8rvL4C
oPwbPVNo+v96qCUJQ+0oaaXuJxnx+/M6tvXkHxJRgxkl6xaqPDCEWpSr9o7F1U1Y
8cElGYXud4B41yO+bvvbfC04/n4boi3BEnl/CIx+YUKbKTWf558aYR6KQimxWH8F
o2v3zy+l9cSGzemdaSpJ4zw60V5NkKTGuQPxpCZhAMkmNWDCUwT1GHZzj5ExeOKO
oGf0LaHSZUVWWIeaiDr3e0Nmkw8hcwSwr+lG8GsAxuYW/UKpyTzu2QMekuIP+CPR
wogcrYnlaQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFLJo1HtObwuC2UfW4Fbqglg3
gPZZMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw
Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz
YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4
MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5
NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABN5JN+b3TSEZNCZiUbh/dND
x9r6epMj+Am4G3rCpEnDXWKvDFLMgCBunD4k+fOViYFwYPCaizXWk6LBVxbLY2QE
JXJqR70cvWlz8V68TyTEAlC1OciA0HoGAUedCSwP76i151iNubP2AUNsM0r510h+
0WQH73fXABF2QGJpY2uJOutRaZrQsiuhhHkKIt73QIM2fnVjJyOOrScvDziPH1os
HjakiG7nv2Oi8EuwjOFT0K2G95ZI0KYgme3pNasUNrWgbzsuNRHlhrWJXoZN52D7
Lt1P5wM25s9A6+xDWWO7iVuAgQz5qUdNUoTHq+Y1s1ranNnOyExeD9+c24InPLo=
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:07:50 2025 by rpki-client