This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier: yIwExcI9Z4jG3ZdaP9h+vktX+vdmNhD6kThKxW9Bgko=
Subject key identifier: 2B:F9:B2:8C:91:A6:AF:99:AD:B0:0D:56:4C:0C:97:C8:0C:E6:6E:46
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 203CA9CFCE0C2BC445CE8A69247FD8E5A55C8B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number: 092B
Signing time: Mon 08 Dec 2025 02:34:49 +0000
Manifest this update: Mon 08 Dec 2025 02:29:49 +0000
Manifest next update: Tue 09 Dec 2025 02:41:49 +0000
Files and hashes: 1: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=)
2: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=)
3: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=)
4: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=)
5: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=)
6: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=)
7: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=)
8: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
9: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=)
10: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=)
11: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=)
12: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=)
13: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=)
14: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=)
15: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=)
16: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=)
17: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
18: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=)
19: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=)
20: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=)
21: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=)
22: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=)
23: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=)
24: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: lLDz/zLKaXc6C5CneWwPFOHZpUL5iTF0qoQqkEky06A=)
25: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=)
26: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=)
27: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=)
28: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=)
29: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=)
30: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Dec 2025 02:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3c:a9:cf:ce:0c:2b:c4:45:ce:8a:69:24:7f:d8:e5:a5:5c:8b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Dec 8 02:29:49 2025 GMT
Not After : Dec 9 02:41:49 2025 GMT
Subject: CN=2BF9B28C91A6AF99ADB00D564C0C97C80CE66E46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:cd:37:46:4f:ff:95:41:47:db:46:90:93:
b0:49:f1:2b:e4:6e:92:ee:48:09:3c:ca:78:f2:50:
ef:31:cc:87:36:b9:24:25:64:37:45:01:9a:14:66:
bd:66:49:a8:9e:d2:0b:12:f9:37:4b:c2:5b:cd:24:
3f:f3:a9:2e:1b:a2:b5:10:e2:00:a7:b6:44:78:b9:
53:5c:de:27:09:9b:23:6d:06:05:6a:78:3c:f0:a8:
81:56:ee:45:60:d4:28:c7:92:10:bc:6f:42:45:0e:
32:11:34:17:cc:ae:35:51:35:ae:e5:2d:d5:2b:5f:
9b:76:d3:d6:5d:9d:ef:ea:f6:a8:71:f4:86:6d:b3:
bf:30:d4:3b:22:13:e1:29:09:14:e7:19:93:94:c6:
6c:de:04:bd:7b:c0:cb:5a:18:8a:28:f7:9c:8e:a9:
66:ee:87:2f:34:ce:68:c2:8a:10:31:92:81:0f:ee:
a5:3c:cf:25:1c:5b:e4:fb:54:cb:1d:d6:ce:bb:ac:
4b:44:1a:94:2b:be:9d:3f:b8:40:4d:c5:d7:a8:7d:
1e:14:7e:5a:37:5d:24:1e:5a:0b:0f:f7:b4:49:82:
43:fc:67:f0:31:69:b6:62:29:5e:fd:97:7b:d5:15:
4b:1c:68:65:85:8f:43:7b:6a:0f:13:82:07:7a:f2:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F9:B2:8C:91:A6:AF:99:AD:B0:0D:56:4C:0C:97:C8:0C:E6:6E:46
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:89:bf:cb:97:a4:5f:67:6b:d4:bc:77:6a:26:b2:8e:db:32:
47:a3:50:54:d3:06:53:50:17:f3:ff:46:a0:d6:9a:77:db:96:
16:4e:64:27:f8:4a:2e:55:42:1c:8d:1a:23:f6:87:9f:5a:2c:
b6:b4:6c:b7:c0:e0:80:15:34:0b:25:18:72:01:da:80:e5:5f:
40:92:10:a3:9f:6e:5b:26:a5:71:32:55:61:dd:69:b7:36:df:
2e:84:25:1c:d0:f1:a3:46:55:35:1a:93:a1:c0:28:a3:e9:52:
93:8b:43:f4:af:e3:43:ee:b2:53:83:99:c7:c2:50:19:22:f0:
31:da:e0:29:4d:3d:c9:13:6a:33:2b:e1:39:97:3b:63:b0:e9:
93:65:d3:55:76:2e:0c:3d:04:74:cb:21:0b:98:57:8c:63:fc:
4c:22:2c:ad:4e:6d:3b:a9:36:45:93:85:ac:1d:61:5e:e2:3b:
a6:32:ed:76:4c:4b:6d:1f:de:2d:14:4b:8b:08:e1:5c:74:09:
b7:0b:53:a1:dc:e1:3a:fe:4a:8c:fe:2e:18:44:bc:29:8a:5e:
a9:40:bf:f9:04:f4:50:9f:18:40:1f:81:33:e9:ee:53:f0:e1:
ac:6a:58:66:a3:46:11:c6:6e:76:a1:72:47:b3:91:99:84:b2:
1f:c4:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 19:01:45 2025 by rpki-client