This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft File: 5577EED829CD0AC31399054DE74453562390C62F.mft (raw, json) Hash identifier: evoAphT1fDzmk7780hRWA3j91xKvExutE4zgYpX5fSg= Subject key identifier: B9:E6:BA:1E:02:F0:23:E3:D6:06:12:71:FB:50:ED:66:D9:48:38:42 Authority key identifier: 55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F Certificate issuer: /CN=A9124B5E0000/serialNumber=5577EED829CD0AC31399054DE74453562390C62F Certificate serial: 1F6B08380755FCEE9DA4B34DBBD6D270D26D0E98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft Manifest number: 1C Signing time: Fri 19 Dec 2025 07:40:25 +0000 Manifest this update: Fri 19 Dec 2025 07:35:25 +0000 Manifest next update: Sat 20 Dec 2025 08:03:25 +0000 Files and hashes: 1: 5577EED829CD0AC31399054DE74453562390C62F.crl (hash: fO96NViQjvMhvdWhuH0GRjABaw8R6d/2ZpCd97psJG8=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6b:08:38:07:55:fc:ee:9d:a4:b3:4d:bb:d6:d2:70:d2:6d:0e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=5577EED829CD0AC31399054DE74453562390C62F Validity Not Before: Dec 19 07:35:25 2025 GMT Not After : Dec 20 08:03:25 2025 GMT Subject: CN=B9E6BA1E02F023E3D6061271FB50ED66D9483842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:2d:41:6d:ca:4a:5a:ad:18:db:b3:99:01: 82:16:bf:a4:ba:26:80:dd:18:9a:e6:13:81:3e:d5: e4:8d:a8:14:72:d8:b5:c3:73:8a:14:35:a4:f5:ab: 50:2b:b1:4b:b1:c2:81:74:b7:d8:c1:27:3b:0e:e7: 90:1c:cb:ab:b2:84:94:50:53:41:f2:dc:1c:87:5e: 4a:03:a8:ce:6c:25:05:53:9d:7a:8a:d3:54:3f:43: a9:f9:72:cd:51:ca:d7:a5:96:73:7a:17:04:ee:c2: 3f:24:6c:5d:74:10:c8:aa:2b:9d:59:76:3f:1d:b0: 1d:9b:b3:6d:e0:97:1f:fd:ca:dd:3e:92:ef:2c:bd: 54:d4:e1:94:7f:70:8e:7d:2f:1d:c0:0c:87:d9:cb: 77:88:eb:fa:6e:67:5f:62:84:85:74:b7:6c:2e:d1: f1:89:53:d4:12:b4:ea:59:27:20:02:12:27:28:0b: 19:19:c9:27:44:04:73:26:91:a5:c7:2a:a7:70:d8: 9c:16:25:3d:81:50:72:aa:a8:1b:fd:5f:a0:5b:41: c3:3d:1b:12:f2:83:b9:8b:40:ab:b7:a1:23:b0:2d: 72:0e:42:f2:5c:b8:08:d3:a7:36:51:4d:31:c9:05: db:8a:34:5e:08:19:ea:aa:a8:2a:10:dd:f0:c3:4f: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E6:BA:1E:02:F0:23:E3:D6:06:12:71:FB:50:ED:66:D9:48:38:42 X509v3 Authority Key Identifier: keyid:55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:42:5e:48:c5:4d:c3:79:2a:11:40:a2:f4:61:5e:49:0f:a6: 3b:7d:05:70:52:e2:d3:26:98:bd:9d:ae:fb:5f:fe:c4:41:25: 01:28:89:4c:5b:47:0f:d1:5b:d8:76:ae:8f:a5:fe:f2:4d:3c: 9d:19:cc:08:1e:f6:44:99:75:83:2d:f3:9e:d8:ef:f7:29:1d: 03:1b:e6:1a:4d:fc:45:af:24:53:58:f9:7c:fa:4d:8f:5a:2d: 18:64:d3:13:45:58:92:e3:af:86:32:75:4d:e8:4a:67:2a:43: 14:09:46:08:7b:c2:ad:8f:b1:76:fb:55:44:ea:b1:7c:3d:88: 89:08:95:c2:63:a7:1d:a2:64:c1:d7:36:d3:df:49:9b:59:dc: 9d:29:b6:df:23:34:0f:25:2d:71:72:5f:33:eb:3b:59:f8:56: 4b:78:91:05:9c:f3:11:63:f2:33:22:67:8c:a8:f1:c6:f6:59: d6:30:71:f3:64:c7:00:94:c9:72:f3:fd:d7:4d:e7:77:96:a5: 67:a1:94:a7:2a:7e:f2:33:22:d3:c4:ef:79:b6:10:60:1b:9b: 38:24:fa:ad:32:31:d8:00:15:03:ef:e2:2f:59:bf:81:67:1f: c6:50:8e:38:26:e8:0e:c2:87:b5:4a:71:1b:b0:80:27:97:0d: c3:91:f4:1c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUH2sIOAdV/O6dpLNNu9bScNJtDpgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg1NTc3RUVEODI5 Q0QwQUMzMTM5OTA1NERFNzQ0NTM1NjIzOTBDNjJGMB4XDTI1MTIxOTA3MzUyNVoX DTI1MTIyMDA4MDMyNVowMzExMC8GA1UEAxMoQjlFNkJBMUUwMkYwMjNFM0Q2MDYx MjcxRkI1MEVENjZEOTQ4Mzg0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjHLUFtykparRjbs5kBgha/pLomgN0YmuYTgT7V5I2oFHLYtcNzihQ1pPWr UCuxS7HCgXS32MEnOw7nkBzLq7KElFBTQfLcHIdeSgOozmwlBVOdeorTVD9Dqfly zVHK16WWc3oXBO7CPyRsXXQQyKornVl2Px2wHZuzbeCXH/3K3T6S7yy9VNThlH9w jn0vHcAMh9nLd4jr+m5nX2KEhXS3bC7R8YlT1BK06lknIAISJygLGRnJJ0QEcyaR pccqp3DYnBYlPYFQcqqoG/1foFtBwz0bEvKDuYtAq7ehI7Atcg5C8ly4CNOnNlFN MckF24o0XggZ6qqoKhDd8MNP0uMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBS55roe AvAj49YGEnH7UO1m2Ug4QjAfBgNVHSMEGDAWgBRVd+7YKc0KwxOZBU3nRFNWI5DG LzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYxLzU1NzdFRUQ4MjlDRDBBQzMxMzk5MDU0REU3 NDQ1MzU2MjM5MEM2MkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1ZYZnUyQ25OQ3NNVG1RVk41MFJUVmlPUXhpOC5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjEvNTU3N0VFRDgyOUNEMEFDMzEzOTkwNTRERTc0NDUz NTYyMzkwQzYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVCXkjFTcN5KhFAovRhXkkPpjt9BXBS4tMm mL2drvtf/sRBJQEoiUxbRw/RW9h2ro+l/vJNPJ0ZzAge9kSZdYMt857Y7/cpHQMb 5hpN/EWvJFNY+Xz6TY9aLRhk0xNFWJLjr4YydU3oSmcqQxQJRgh7wq2PsXb7VUTq sXw9iIkIlcJjpx2iZMHXNtPfSZtZ3J0ptt8jNA8lLXFyXzPrO1n4Vkt4kQWc8xFj 8jMiZ4yo8cb2WdYwcfNkxwCUyXLz/ddN53eWpWehlKcqfvIzItPE73m2EGAbmzgk +q0yMdgAFQPv4i9Zv4FnH8ZQjjgm6A7Ch7VKcRuwgCeXDcOR9Bw= -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:40 2025 by rpki-client