This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: d1c8puq/blSzPXYzkeHrLnKbjSXV9NfE+jufMKiLK04= Subject key identifier: CD:51:38:89:DD:93:01:C8:6C:21:F3:52:71:FB:3E:B9:C5:66:20:A6 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 447EB15E63DCC174DD9188764CC6C47A61646509 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 0855 Signing time: Sat 20 Dec 2025 17:10:25 +0000 Manifest this update: Sat 20 Dec 2025 17:05:25 +0000 Manifest next update: Sun 21 Dec 2025 20:09:25 +0000 Files and hashes: 1: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 2: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 3: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: KLdYJSV2mg5kXPQdrtNsFdr3YrpVG8n31tbxZ/ZHcxo=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 5: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:7e:b1:5e:63:dc:c1:74:dd:91:88:76:4c:c6:c4:7a:61:64:65:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Dec 20 17:05:25 2025 GMT Not After : Dec 21 20:09:25 2025 GMT Subject: CN=CD513889DD9301C86C21F35271FB3EB9C56620A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c5:4e:04:57:c9:8e:f2:3d:1b:bf:5f:df:af: 33:5b:7f:87:89:6d:be:0f:72:63:68:db:12:25:9a: 50:ca:98:c8:71:6c:7e:65:48:40:91:76:05:71:1b: fc:d0:d3:6a:46:75:df:54:25:90:53:8f:9f:77:f0: af:eb:41:eb:3b:87:5b:54:01:99:5f:d6:cf:73:bb: d9:33:1b:0a:12:5c:25:79:11:c8:f6:a9:4e:1d:26: f1:2a:d8:06:71:61:61:3a:26:d9:67:c3:b7:56:37: b8:0f:ec:fd:75:73:a9:31:83:a0:e1:d3:27:7e:87: 5a:9e:5e:34:33:09:e7:6e:a3:3a:18:30:96:a9:bf: 33:c4:fc:6c:5f:d9:3a:cd:01:5f:42:ef:06:34:48: f5:a0:f2:c8:b1:4c:e6:94:cd:95:5c:8e:af:93:3a: fc:17:81:5e:93:77:31:9c:cf:3d:7a:f5:2e:80:f0: c5:ba:2f:ce:8f:7b:2a:ef:30:63:aa:8e:5a:3e:4a: ef:ca:43:f8:b4:ae:df:25:38:a0:08:53:d1:a2:e3: ba:c5:d0:bc:2b:b3:c8:07:69:6e:a5:5a:f8:79:bd: 37:d0:fa:42:3c:51:58:60:fe:b4:67:31:05:e6:91: a5:1a:23:2c:9e:d1:06:3c:49:21:bd:5d:a8:9d:bd: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:38:89:DD:93:01:C8:6C:21:F3:52:71:FB:3E:B9:C5:66:20:A6 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:de:8b:f8:ef:10:c6:e1:b4:f9:6b:00:79:44:a6:d4:c0:48: d0:b7:63:c2:54:71:3b:8b:c7:42:09:23:5f:b1:27:eb:11:fa: f9:d9:8c:66:e2:23:59:fd:b9:29:e7:ea:54:03:49:dd:40:b6: 81:96:f1:79:91:ed:ad:13:29:a2:41:64:93:a6:23:ce:31:9c: 1b:cf:f3:4b:c1:96:02:2e:8a:0b:dd:a0:26:58:90:63:f8:e3: 7c:51:8f:e4:02:ed:ce:ba:b4:a1:fc:7a:2f:ac:f3:1a:82:db: dc:88:d8:ad:be:e8:e8:f3:ca:06:c9:76:e2:87:41:c0:c1:00: a9:0b:f1:7a:0e:dd:36:ff:7b:8b:9c:dd:a4:ee:c7:db:e1:0f: dc:bc:9d:ed:c7:be:32:b3:3b:fe:dc:47:b4:53:eb:9a:0f:7e: e1:4c:04:60:92:f0:29:a9:da:b6:f4:f0:54:33:c0:da:bb:c5: 54:bb:e7:41:36:4d:e8:05:bf:52:87:fa:ec:9c:19:17:8a:1e: 13:2b:88:3b:b4:e2:08:b7:6a:a1:42:52:80:73:2e:3f:8b:99: bf:6e:2c:d7:c7:3e:91:f0:0d:ad:74:9c:48:cd:10:88:8a:52: f7:9d:38:87:bb:8b:1e:de:ac:3e:9f:49:f4:21:74:72:7f:1a: ef:ff:b8:f8 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIURH6xXmPcwXTdkYh2TMbEemFkZQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUxMjIwMTcwNTI1WhcNMjUxMjIxMjAwOTI1 WjAzMTEwLwYDVQQDEyhDRDUxMzg4OUREOTMwMUM4NkMyMUYzNTI3MUZCM0VCOUM1 NjYyMEE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38VOBFfJjvI9 G79f368zW3+HiW2+D3JjaNsSJZpQypjIcWx+ZUhAkXYFcRv80NNqRnXfVCWQU4+f d/Cv60HrO4dbVAGZX9bPc7vZMxsKElwleRHI9qlOHSbxKtgGcWFhOibZZ8O3Vje4 D+z9dXOpMYOg4dMnfodanl40MwnnbqM6GDCWqb8zxPxsX9k6zQFfQu8GNEj1oPLI sUzmlM2VXI6vkzr8F4Fek3cxnM89evUugPDFui/Oj3sq7zBjqo5aPkrvykP4tK7f JTigCFPRouO6xdC8K7PIB2lupVr4eb030PpCPFFYYP60ZzEF5pGlGiMsntEGPEkh vV2onb0LPwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFM1ROIndkwHIbCHzUnH7PrnF ZiCmMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAILei/jvEMbhtPlrAHlEptTA SNC3Y8JUcTuLx0IJI1+xJ+sR+vnZjGbiI1n9uSnn6lQDSd1AtoGW8XmR7a0TKaJB ZJOmI84xnBvP80vBlgIuigvdoCZYkGP443xRj+QC7c66tKH8ei+s8xqC29yI2K2+ 6OjzygbJduKHQcDBAKkL8XoO3Tb/e4uc3aTux9vhD9y8ne3HvjKzO/7cR7RT65oP fuFMBGCS8Cmp2rb08FQzwNq7xVS750E2TegFv1KH+uycGReKHhMriDu04gi3aqFC UoBzLj+Lmb9uLNfHPpHwDa10nEjNEIiKUvedOIe7ix7erD6fSfQhdHJ/Gu//uPg= -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:01 2025 by rpki-client