This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft File: 0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft (raw, json) Hash identifier: cMM/CAqz5x/TTF8lnTKj5KKnFOx8Bz+XzVwRtdQZSBw= Subject key identifier: 5B:C3:3E:7D:DF:1F:67:57:EC:CC:61:6A:E5:26:C1:D8:A6:F7:78:5C Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 09C9883ACCA5F2DCA6A550859BA51B1280DC4004 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft Manifest number: 0840 Signing time: Sat 20 Dec 2025 12:50:25 +0000 Manifest this update: Sat 20 Dec 2025 12:45:25 +0000 Manifest next update: Sun 21 Dec 2025 16:18:25 +0000 Files and hashes: 1: 32332e3133392e3232342e302f32342d3234203d3e203632353939.roa (hash: aMDk5M+bc1frV0ppgn/NfzktLrif6fzryiE5H3//RU8=) 2: 323630343a653034303a3a2f33322d3438203d3e20393439.roa (hash: iXfj2zkeKxyW481izim0ILvlPX92QHffH91jozS9TaQ=) 3: 0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl (hash: gKY+lXkxhkv4aHi4vPyT+7+mmnMyM5Mtl0y+Ao4frMo=) 4: 323630343a653034303a3a2f33322d3438203d3e203632353939.roa (hash: IdEEceodCPU49DNjgQA+YXFPjEWoYAGxzDpAi94+xYU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 16:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c9:88:3a:cc:a5:f2:dc:a6:a5:50:85:9b:a5:1b:12:80:dc:40:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Dec 20 12:45:25 2025 GMT Not After : Dec 21 16:18:25 2025 GMT Subject: CN=5BC33E7DDF1F6757ECCC616AE526C1D8A6F7785C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f2:75:19:94:dc:71:aa:88:08:4d:3a:5c:73: a5:e1:90:ed:18:4d:76:e0:21:ff:94:34:80:2b:b6: 69:8f:86:be:ab:8d:c5:b4:c6:0c:02:3e:1c:0d:c3: c8:a0:fd:39:9c:86:e1:3b:b8:0e:32:2c:7e:40:94: eb:19:88:48:d7:bc:96:71:7f:ad:0d:ea:74:eb:67: 90:5a:17:67:96:54:b8:ea:53:cb:70:df:b4:fe:ad: 8a:cc:65:1a:bc:4e:e0:e4:4a:83:4a:cc:ba:d6:f2: e2:87:67:02:54:9f:da:0b:35:14:7e:10:e3:79:fc: 6f:45:ce:9f:c3:1b:b0:3f:cf:29:0b:ab:8f:d1:e2: 5d:d1:e0:bb:7c:fb:c8:f7:95:3c:ad:43:cc:14:2a: c5:90:df:56:cc:09:1d:bc:82:b9:3a:be:da:11:5d: 91:56:9b:36:df:ca:c6:43:1a:e1:cc:8c:13:c2:8c: b4:eb:ed:57:50:01:a5:de:8a:f5:27:29:79:30:8a: ba:87:c4:51:84:c6:21:27:fc:df:02:6f:79:79:1c: 65:3e:a6:f5:3b:8a:77:3c:da:e1:cc:7e:73:12:4b: 81:a2:63:6d:66:14:c1:b9:78:0e:94:2d:fa:b8:2f: f9:e6:6d:4e:02:43:b0:6c:3a:c7:c1:bc:47:14:3b: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C3:3E:7D:DF:1F:67:57:EC:CC:61:6A:E5:26:C1:D8:A6:F7:78:5C X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c4:15:93:65:4f:d0:cf:02:4d:99:61:61:dd:43:61:a6:df: 75:f5:bd:39:18:cc:c1:e1:7f:24:bd:04:6a:e1:90:49:09:51: 83:2b:61:01:93:63:55:1b:0d:cd:8b:7e:e1:ee:e0:eb:31:8b: 3c:13:f6:e5:73:11:9b:e5:fd:25:8c:99:38:db:2e:ea:25:cf: 4d:e1:b7:fc:c3:fd:25:5c:26:52:00:f2:a8:e7:70:c1:89:7f: f3:62:c4:69:ae:46:88:42:de:a1:e4:b8:39:e5:25:be:e7:31: 30:bc:1d:ab:0f:e2:a0:a1:ae:4c:dc:e9:cb:12:b8:f2:f6:ea: 56:89:20:94:bb:dd:47:78:d4:7e:99:07:b7:03:a1:8f:c9:e1: 24:b3:52:cc:e4:95:98:3f:dc:20:82:58:f5:d6:79:df:69:7f: 43:84:dc:90:3a:47:9e:c9:7f:68:89:8c:52:20:28:40:53:70: 15:6c:4d:33:b9:5c:2a:f3:57:4d:78:b8:57:3e:8f:0e:56:0e: 6e:31:2d:ad:77:8c:2f:d0:18:06:c5:f6:b2:34:5e:e8:3a:d6: 34:36:01:9e:95:51:3e:81:b0:b9:14:9b:40:ea:00:7f:86:92: 02:19:ec:74:54:5e:b2:1e:51:da:d3:cf:a9:37:30:9c:b2:6e: 6e:c6:ce:ac -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUCcmIOsyl8tympVCFm6UbEoDcQAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjUxMjIwMTI0NTI1WhcNMjUxMjIxMTYxODI1 WjAzMTEwLwYDVQQDEyg1QkMzM0U3RERGMUY2NzU3RUNDQzYxNkFFNTI2QzFEOEE2 Rjc3ODVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fJ1GZTccaqI CE06XHOl4ZDtGE124CH/lDSAK7Zpj4a+q43FtMYMAj4cDcPIoP05nIbhO7gOMix+ QJTrGYhI17yWcX+tDep062eQWhdnllS46lPLcN+0/q2KzGUavE7g5EqDSsy61vLi h2cCVJ/aCzUUfhDjefxvRc6fwxuwP88pC6uP0eJd0eC7fPvI95U8rUPMFCrFkN9W zAkdvIK5Or7aEV2RVps238rGQxrhzIwTwoy06+1XUAGl3or1Jyl5MIq6h8RRhMYh J/zfAm95eRxlPqb1O4p3PNrhzH5zEkuBomNtZhTBuXgOlC36uC/55m1OAkOwbDrH wbxHFDvamwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFFvDPn3fH2dX7MxhauUmwdim 93hcMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFB QzZEOEUyQ0Y4M0FEMjJBQzcwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADDEFZNlT9DPAk2ZYWHdQ2Gm 33X1vTkYzMHhfyS9BGrhkEkJUYMrYQGTY1UbDc2LfuHu4OsxizwT9uVzEZvl/SWM mTjbLuolz03ht/zD/SVcJlIA8qjncMGJf/NixGmuRohC3qHkuDnlJb7nMTC8HasP 4qChrkzc6csSuPL26laJIJS73Ud41H6ZB7cDoY/J4SSzUszklZg/3CCCWPXWed9p f0OE3JA6R57Jf2iJjFIgKEBTcBVsTTO5XCrzV014uFc+jw5WDm4xLa13jC/QGAbF 9rI0Xug61jQ2AZ6VUT6BsLkUm0DqAH+GkgIZ7HRUXrIeUdrTz6k3MJyybm7Gzqw= -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:56 2025 by rpki-client