This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File:                     74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier:          ShQPFA5s3pzku1Kp1SdhoWScg1/xc5lDt3dKjyL4+Fo=
Subject key identifier:   C8:DB:33:E7:A2:3A:EF:8D:CA:35:CD:D7:40:0A:C0:7B:C7:BF:FE:5B
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       299BDA7037F30B2180AD76B3C55C8C6B144D059B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number:          085C
Signing time:             Sat 20 Dec 2025 15:50:25 +0000
Manifest this update:     Sat 20 Dec 2025 15:45:25 +0000
Manifest next update:     Sun 21 Dec 2025 18:19:25 +0000
Files and hashes:         1: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=)
                          2: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
                          3: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=)
                          4: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
                          5: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: GYE3s17KQIf+k/t+cJ3T61RKMopkIGuTWpdeb+gxQ1k=)
                          6: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9b:da:70:37:f3:0b:21:80:ad:76:b3:c5:5c:8c:6b:14:4d:05:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Dec 20 15:45:25 2025 GMT
            Not After : Dec 21 18:19:25 2025 GMT
        Subject: CN=C8DB33E7A23AEF8DCA35CDD7400AC07BC7BFFE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:d2:c1:39:39:d6:2b:ed:9f:e7:6e:55:db:
                    a6:66:08:7b:4a:7b:70:48:6d:5e:99:72:bf:c0:71:
                    21:f4:ca:f7:4f:ff:e0:e8:65:a8:01:d0:3e:a4:58:
                    c4:10:67:e3:e1:9b:e4:f4:10:01:72:1a:b4:6b:5c:
                    3e:60:09:2b:0b:e1:43:0b:c8:8c:c8:1b:e1:a7:b4:
                    9c:95:3e:a4:1d:f4:36:9c:cf:1c:8f:8b:3b:1f:6a:
                    3b:11:90:1b:93:c5:9b:0b:48:63:0a:f5:cf:ca:2e:
                    82:b9:09:21:fc:8a:10:7a:5a:c4:5f:aa:48:15:52:
                    ef:87:a8:e6:6e:fe:c7:ea:44:9b:f9:f0:13:e5:5e:
                    b4:51:28:0a:f9:b4:b1:eb:b8:35:ff:a2:88:7d:c5:
                    5b:76:4c:77:ec:19:35:e4:57:12:d5:c9:2f:fd:0d:
                    6c:5e:15:8f:2e:a4:43:15:a8:4c:53:c1:ca:7c:bc:
                    64:f9:44:6e:19:24:d4:05:c2:48:60:b2:36:6f:94:
                    d6:6a:65:fc:9f:38:58:6d:6d:41:d5:97:b2:ae:53:
                    83:31:7b:9c:76:48:d5:d6:d7:d4:be:b3:68:71:60:
                    98:6e:49:e6:aa:45:c3:ab:21:c8:80:22:c9:87:00:
                    78:d7:0f:f7:c0:34:9d:be:78:a2:c8:ed:be:a8:d4:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DB:33:E7:A2:3A:EF:8D:CA:35:CD:D7:40:0A:C0:7B:C7:BF:FE:5B
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d5:9f:53:5d:13:78:47:c5:57:f2:c3:b5:b3:40:b3:20:99:
         9b:53:51:63:4c:d0:5e:da:70:16:7e:11:9b:f9:97:76:17:3d:
         90:df:01:51:13:5a:e2:e5:f9:bd:f8:91:3d:04:90:71:ff:bc:
         6e:27:f1:6e:6f:a8:1e:86:7c:76:5c:c7:ff:95:ac:84:5e:98:
         2f:3f:b9:6f:ab:04:be:24:06:2b:65:47:b3:ef:56:83:02:88:
         8f:ee:de:82:18:a7:51:1f:fc:eb:27:98:b8:d2:95:bd:18:9b:
         cb:11:be:9b:09:c3:ac:aa:96:15:fa:57:bf:07:15:6c:9d:54:
         ea:ba:b8:dc:72:fd:21:30:a4:ea:1c:14:5d:74:14:15:ee:88:
         25:6b:1e:3c:3e:86:21:87:32:80:8b:23:8f:c0:86:fd:41:a5:
         3c:7c:74:e8:bc:97:31:df:f3:49:aa:7a:c6:f8:b7:17:db:8f:
         59:17:ac:77:e0:d8:77:6d:5f:80:98:d8:11:ea:46:c9:5f:86:
         20:94:d7:6d:0f:80:00:5b:1f:05:39:77:60:f5:71:f1:d3:55:
         9f:cf:df:c0:0c:e8:d3:30:7e:ad:2b:59:c4:b3:04:8a:09:8f:
         6e:dd:db:30:5f:2c:13:74:55:fe:05:54:a5:7a:df:c2:ac:8d:
         e2:ab:99:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:05:59 2025 by rpki-client