This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File:                     74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier:          bcaCd3LvYl0YFsoD/aXnVbkSox+PDtKoi3lgT30hC0o=
Subject key identifier:   32:F1:FC:CE:91:78:62:0C:3D:BA:06:90:68:1B:3A:C6:B8:EC:8F:25
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       073FFF4F1D2E9276051C2C025D47D5EA8A8E519D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number:          0858
Signing time:             Wed 17 Dec 2025 17:15:55 +0000
Manifest this update:     Wed 17 Dec 2025 17:10:55 +0000
Manifest next update:     Thu 18 Dec 2025 17:33:55 +0000
Files and hashes:         1: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
                          2: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
                          3: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=)
                          4: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
                          5: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: H2D/zBwjcO7MK/Drusm9Enn0TB0RkOxGIMJH0VJVUWU=)
                          6: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 17:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:ff:4f:1d:2e:92:76:05:1c:2c:02:5d:47:d5:ea:8a:8e:51:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Dec 17 17:10:55 2025 GMT
            Not After : Dec 18 17:33:55 2025 GMT
        Subject: CN=32F1FCCE9178620C3DBA0690681B3AC6B8EC8F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:6c:49:ca:15:30:6a:64:62:1a:39:7c:15:
                    77:71:80:9c:9b:11:e5:d5:8b:49:46:e8:4b:0e:b0:
                    22:a3:fe:f3:01:4c:74:8e:8a:dc:f3:90:0f:e0:42:
                    b7:df:6a:b5:cd:43:68:34:b9:8e:11:48:58:33:c7:
                    0a:82:5e:72:a7:cc:34:7c:c5:79:0c:61:8d:19:84:
                    3b:4c:4e:a7:bc:7a:1a:c7:7c:73:3d:2a:17:93:81:
                    3b:0d:7b:60:57:a8:98:5a:36:fa:f1:53:ae:86:42:
                    91:20:32:18:6e:b4:e3:9d:d6:ad:29:c1:99:dd:70:
                    bc:14:b4:dc:a1:75:ca:ba:39:9b:7b:27:74:40:44:
                    70:d1:d0:bb:b9:56:60:5d:38:ff:35:68:8d:23:a1:
                    30:83:08:ce:57:93:c8:cf:c8:65:42:44:37:93:9f:
                    a2:1f:ab:8d:f1:33:d0:52:58:9b:c0:4d:44:02:06:
                    3d:6d:e8:b3:6a:f1:61:de:c1:82:ab:af:e3:3c:de:
                    7a:b9:4f:45:ed:84:b5:cc:2c:05:f9:35:cd:cb:78:
                    b2:7f:64:3c:ae:33:c3:b4:eb:fb:b0:9e:e1:41:86:
                    d7:17:d7:8d:df:2d:7c:a9:de:98:0b:d5:a5:dd:7c:
                    a6:9c:fc:9c:25:7f:e2:2a:18:0f:17:00:e5:52:9e:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:FC:CE:91:78:62:0C:3D:BA:06:90:68:1B:3A:C6:B8:EC:8F:25
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:2f:81:d9:5f:34:9f:10:e4:f5:75:44:e2:21:48:8f:c4:
         c6:57:a7:5b:cf:5a:5e:66:15:a5:9d:f8:0d:bb:60:35:36:de:
         12:46:e2:9a:74:50:ed:05:2b:67:cb:42:0c:17:42:a1:55:58:
         3c:c4:d4:de:d5:8e:c4:d1:d5:58:a8:42:2d:95:f9:7c:e6:27:
         48:ea:51:18:79:54:8d:f1:a6:a4:34:68:95:0e:7a:56:60:cf:
         94:6b:79:9c:7f:83:b7:38:43:6c:de:c7:c9:38:83:92:24:0f:
         0e:65:ae:73:53:bc:c1:a3:2d:42:86:4d:c7:02:96:fb:be:dd:
         b8:da:6a:51:73:40:d4:2e:65:dc:71:f5:d1:85:0e:cc:b9:47:
         40:79:64:15:21:69:90:bb:89:60:fb:c2:62:09:7f:0a:5b:73:
         d1:43:87:c9:a1:7c:98:93:c9:a7:9b:94:b5:93:8d:fa:43:2b:
         45:62:a9:41:d5:30:9c:7f:64:3a:7d:0c:80:08:88:9c:7e:95:
         b8:85:de:d1:7c:17:42:f8:cb:af:1d:1c:b5:9c:ae:4c:fa:9a:
         71:99:cf:ab:b5:c2:ca:68:7e:be:4b:4e:1e:9e:08:43:f3:42:
         38:83:96:a8:29:c3:30:95:35:64:a2:81:e6:bd:83:39:c4:1d:
         27:b9:eb:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:26:25 2025 by rpki-client