This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: nSwZpp2pMhYlFyQugqxlruPb1aI1Uu+X1fDBfmXwobo= Subject key identifier: 21:09:C3:B0:8F:40:74:B8:23:BB:1D:A3:CF:45:56:4E:4D:27:90:96 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 2331BB5816D9D8895D2B80496E51D50DC4EB3BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 093A Signing time: Mon 26 Jan 2026 14:41:07 +0000 Manifest this update: Mon 26 Jan 2026 14:36:07 +0000 Manifest next update: Tue 27 Jan 2026 16:21:07 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 6: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: pF7bhW9z+KIsX9/fBeALWPR8zMRGSyQOAe7/ieOLp0Q=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:31:bb:58:16:d9:d8:89:5d:2b:80:49:6e:51:d5:0d:c4:eb:3b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jan 26 14:36:07 2026 GMT Not After : Jan 27 16:21:07 2026 GMT Subject: CN=2109C3B08F4074B823BB1DA3CF45564E4D279096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:ea:bc:c4:82:b5:3a:4c:f3:be:c8:25:40: 31:50:22:25:26:d9:13:b9:dc:77:4d:1e:2c:6c:ff: 9b:5a:c0:5c:8a:06:56:ce:f6:23:45:79:30:f5:96: 05:f2:8d:07:13:61:cd:68:96:67:e6:fb:53:17:a4: 6f:a9:c8:67:e4:f7:b3:9a:42:13:43:a5:dc:d0:55: e8:bb:a2:8f:3d:20:0f:1a:26:7e:bf:84:44:b8:13: 5a:88:cc:67:8f:52:8d:de:9d:ca:66:0b:57:21:c2: d9:cf:05:b8:49:d4:a6:cf:41:94:77:23:de:d3:eb: 44:1a:4b:40:a1:f1:f5:76:4c:7e:ad:d8:de:1c:61: 99:da:b2:cb:27:b2:91:57:76:a1:b0:6f:bd:32:54: b2:9a:07:f1:d9:c2:9f:9f:57:28:20:86:07:a8:73: aa:2e:55:d7:ba:e3:b3:e5:60:fb:3c:df:a3:8e:71: 24:36:12:85:d9:d7:cc:6c:04:cf:13:1d:c9:16:6c: 7c:cb:e5:a6:e0:f7:eb:38:6c:01:53:b9:c3:d7:0f: 4e:c1:65:5a:10:7b:e3:70:28:2c:41:6b:b8:69:b5: da:ef:3e:66:7e:42:c8:4b:4b:83:92:d4:fb:4a:ac: d7:c6:3e:22:c4:fe:e7:96:0c:d7:b4:97:87:8d:c5: 94:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:C3:B0:8F:40:74:B8:23:BB:1D:A3:CF:45:56:4E:4D:27:90:96 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:f9:fa:73:1d:1f:d7:c4:e6:6a:be:f4:0f:f6:bf:6f:00: e6:4d:01:42:12:a8:a3:33:23:f4:f1:a3:e3:b9:09:5b:94:68: f3:46:1c:63:b8:eb:76:55:8d:b7:bd:da:be:a3:61:de:44:02: 07:8a:28:c9:f9:87:59:ce:98:56:9e:1e:3f:e9:65:d9:18:71: ba:c6:0d:59:39:48:d3:0c:4a:76:09:c4:4e:69:7d:48:8c:5e: 7d:c3:10:ca:81:4b:34:94:97:56:14:3b:dc:25:04:bc:9f:0e: 57:60:be:05:77:70:4e:e3:84:a0:4b:cf:83:ed:ab:fe:fc:e5: 5e:7c:59:03:b9:f3:e2:81:2d:39:58:19:ce:34:f1:da:d3:89: 36:fb:00:c7:27:c4:79:64:6d:43:da:3b:b5:10:45:e5:1b:4d: 34:16:85:4d:ed:40:05:39:79:95:8f:b8:a9:48:f0:fb:f0:fd: f9:f7:51:00:2f:05:77:10:40:13:e1:62:f1:61:93:53:90:ee: 1f:81:ee:2d:81:06:66:c2:6d:50:d7:70:57:1d:03:52:76:1c: 8b:0e:b2:17:0a:45:49:14:92:17:d7:98:07:cb:65:86:44:e6: 95:3c:4f:6f:a7:f6:0a:40:00:16:55:e5:21:c7:ed:cb:4f:4c: bb:ac:b9:07 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUIzG7WBbZ2IldK4BJblHVDcTrO80wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDEyNjE0MzYwN1oX DTI2MDEyNzE2MjEwN1owMzExMC8GA1UEAxMoMjEwOUMzQjA4RjQwNzRCODIzQkIx REEzQ0Y0NTU2NEU0RDI3OTA5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMII6rzEgrU6TPO+yCVAMVAiJSbZE7ncd00eLGz/m1rAXIoGVs72I0V5MPWW BfKNBxNhzWiWZ+b7Uxekb6nIZ+T3s5pCE0Ol3NBV6Luijz0gDxomfr+ERLgTWojM Z49Sjd6dymYLVyHC2c8FuEnUps9BlHcj3tPrRBpLQKHx9XZMfq3Y3hxhmdqyyyey kVd2obBvvTJUspoH8dnCn59XKCCGB6hzqi5V17rjs+Vg+zzfo45xJDYShdnXzGwE zxMdyRZsfMvlpuD36zhsAVO5w9cPTsFlWhB743AoLEFruGm12u8+Zn5CyEtLg5LU +0qs18Y+IsT+55YM17SXh43FlG0CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQhCcOw j0B0uCO7HaPPRVZOTSeQljAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANR+fpzHR/XxOZqvvQP9r9vAOZNAUISqKMz I/Txo+O5CVuUaPNGHGO463ZVjbe92r6jYd5EAgeKKMn5h1nOmFaeHj/pZdkYcbrG DVk5SNMMSnYJxE5pfUiMXn3DEMqBSzSUl1YUO9wlBLyfDldgvgV3cE7jhKBLz4Pt q/785V58WQO58+KBLTlYGc408drTiTb7AMcnxHlkbUPaO7UQReUbTTQWhU3tQAU5 eZWPuKlI8Pvw/fn3UQAvBXcQQBPhYvFhk1OQ7h+B7i2BBmbCbVDXcFcdA1J2HIsO shcKRUkUkhfXmAfLZYZE5pU8T2+n9gpAABZV5SHH7ctPTLusuQc= -----END CERTIFICATE-----Generated at Mon Jan 26 17:48:49 2026 by rpki-client