This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier: bcaCd3LvYl0YFsoD/aXnVbkSox+PDtKoi3lgT30hC0o=
Subject key identifier: 32:F1:FC:CE:91:78:62:0C:3D:BA:06:90:68:1B:3A:C6:B8:EC:8F:25
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 073FFF4F1D2E9276051C2C025D47D5EA8A8E519D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number: 0858
Signing time: Wed 17 Dec 2025 17:15:55 +0000
Manifest this update: Wed 17 Dec 2025 17:10:55 +0000
Manifest next update: Thu 18 Dec 2025 17:33:55 +0000
Files and hashes: 1: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
2: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
3: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=)
4: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
5: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: H2D/zBwjcO7MK/Drusm9Enn0TB0RkOxGIMJH0VJVUWU=)
6: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 17:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3f:ff:4f:1d:2e:92:76:05:1c:2c:02:5d:47:d5:ea:8a:8e:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Dec 17 17:10:55 2025 GMT
Not After : Dec 18 17:33:55 2025 GMT
Subject: CN=32F1FCCE9178620C3DBA0690681B3AC6B8EC8F25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:6c:49:ca:15:30:6a:64:62:1a:39:7c:15:
77:71:80:9c:9b:11:e5:d5:8b:49:46:e8:4b:0e:b0:
22:a3:fe:f3:01:4c:74:8e:8a:dc:f3:90:0f:e0:42:
b7:df:6a:b5:cd:43:68:34:b9:8e:11:48:58:33:c7:
0a:82:5e:72:a7:cc:34:7c:c5:79:0c:61:8d:19:84:
3b:4c:4e:a7:bc:7a:1a:c7:7c:73:3d:2a:17:93:81:
3b:0d:7b:60:57:a8:98:5a:36:fa:f1:53:ae:86:42:
91:20:32:18:6e:b4:e3:9d:d6:ad:29:c1:99:dd:70:
bc:14:b4:dc:a1:75:ca:ba:39:9b:7b:27:74:40:44:
70:d1:d0:bb:b9:56:60:5d:38:ff:35:68:8d:23:a1:
30:83:08:ce:57:93:c8:cf:c8:65:42:44:37:93:9f:
a2:1f:ab:8d:f1:33:d0:52:58:9b:c0:4d:44:02:06:
3d:6d:e8:b3:6a:f1:61:de:c1:82:ab:af:e3:3c:de:
7a:b9:4f:45:ed:84:b5:cc:2c:05:f9:35:cd:cb:78:
b2:7f:64:3c:ae:33:c3:b4:eb:fb:b0:9e:e1:41:86:
d7:17:d7:8d:df:2d:7c:a9:de:98:0b:d5:a5:dd:7c:
a6:9c:fc:9c:25:7f:e2:2a:18:0f:17:00:e5:52:9e:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:FC:CE:91:78:62:0C:3D:BA:06:90:68:1B:3A:C6:B8:EC:8F:25
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d3:2f:81:d9:5f:34:9f:10:e4:f5:75:44:e2:21:48:8f:c4:
c6:57:a7:5b:cf:5a:5e:66:15:a5:9d:f8:0d:bb:60:35:36:de:
12:46:e2:9a:74:50:ed:05:2b:67:cb:42:0c:17:42:a1:55:58:
3c:c4:d4:de:d5:8e:c4:d1:d5:58:a8:42:2d:95:f9:7c:e6:27:
48:ea:51:18:79:54:8d:f1:a6:a4:34:68:95:0e:7a:56:60:cf:
94:6b:79:9c:7f:83:b7:38:43:6c:de:c7:c9:38:83:92:24:0f:
0e:65:ae:73:53:bc:c1:a3:2d:42:86:4d:c7:02:96:fb:be:dd:
b8:da:6a:51:73:40:d4:2e:65:dc:71:f5:d1:85:0e:cc:b9:47:
40:79:64:15:21:69:90:bb:89:60:fb:c2:62:09:7f:0a:5b:73:
d1:43:87:c9:a1:7c:98:93:c9:a7:9b:94:b5:93:8d:fa:43:2b:
45:62:a9:41:d5:30:9c:7f:64:3a:7d:0c:80:08:88:9c:7e:95:
b8:85:de:d1:7c:17:42:f8:cb:af:1d:1c:b5:9c:ae:4c:fa:9a:
71:99:cf:ab:b5:c2:ca:68:7e:be:4b:4e:1e:9e:08:43:f3:42:
38:83:96:a8:29:c3:30:95:35:64:a2:81:e6:bd:83:39:c4:1d:
27:b9:eb:80
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUBz//Tx0uknYFHCwCXUfV6oqOUZ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh
N2NmZjE3MzliMDI3YzY0MGIwHhcNMjUxMjE3MTcxMDU1WhcNMjUxMjE4MTczMzU1
WjAzMTEwLwYDVQQDEygzMkYxRkNDRTkxNzg2MjBDM0RCQTA2OTA2ODFCM0FDNkI4
RUM4RjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXhsScoVMGpk
Yho5fBV3cYCcmxHl1YtJRuhLDrAio/7zAUx0jorc85AP4EK332q1zUNoNLmOEUhY
M8cKgl5yp8w0fMV5DGGNGYQ7TE6nvHoax3xzPSoXk4E7DXtgV6iYWjb68VOuhkKR
IDIYbrTjndatKcGZ3XC8FLTcoXXKujmbeyd0QERw0dC7uVZgXTj/NWiNI6EwgwjO
V5PIz8hlQkQ3k5+iH6uN8TPQUlibwE1EAgY9beizavFh3sGCq6/jPN56uU9F7YS1
zCwF+TXNy3iyf2Q8rjPDtOv7sJ7hQYbXF9eN3y18qd6YC9Wl3XymnPycJX/iKhgP
FwDlUp65rQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFDLx/M6ReGIMPboGkGgbOsa4
7I8lMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4
MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw
MjdjNjQwYi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlB
REI1QTczMURERTJENUVBRTk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAnTL4HZXzSfEOT1dUTiIUiP
xMZXp1vPWl5mFaWd+A27YDU23hJG4pp0UO0FK2fLQgwXQqFVWDzE1N7VjsTR1Vio
Qi2V+XzmJ0jqURh5VI3xpqQ0aJUOelZgz5RreZx/g7c4Q2zex8k4g5IkDw5lrnNT
vMGjLUKGTccClvu+3bjaalFzQNQuZdxx9dGFDsy5R0B5ZBUhaZC7iWD7wmIJfwpb
c9FDh8mhfJiTyaeblLWTjfpDK0ViqUHVMJx/ZDp9DIAIiJx+lbiF3tF8F0L4y68d
HLWcrkz6mnGZz6u1wspofr5LTh6eCEPzQjiDlqgpwzCVNWSigea9gznEHSe564A=
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:26:25 2025 by rpki-client