This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: ybQP37Ll4udjCwtIR8iviY0X885MH8FRVURV7ApZRi0= Subject key identifier: 2F:58:F7:BB:D8:A1:23:53:AF:0F:5B:80:E0:03:77:54:D1:EE:5F:ED Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 6CC59ED98975082E1B9113EC8C7A2AA6686C2DCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 08F7 Signing time: Sun 07 Dec 2025 11:54:37 +0000 Manifest this update: Sun 07 Dec 2025 11:49:37 +0000 Manifest next update: Mon 08 Dec 2025 14:36:37 +0000 Files and hashes: 1: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: H0PVM9JVb1XlxtlPnnLDIGDhCNwudJtxmOwhaEaZfsI=) 2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c5:9e:d9:89:75:08:2e:1b:91:13:ec:8c:7a:2a:a6:68:6c:2d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Dec 7 11:49:37 2025 GMT Not After : Dec 8 14:36:37 2025 GMT Subject: CN=2F58F7BBD8A12353AF0F5B80E0037754D1EE5FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:6d:48:a0:cc:ec:b2:e5:75:7e:78:10:9a: 77:c0:a0:d3:de:a0:d7:56:7a:a6:80:5b:d8:a3:31: 91:69:c1:06:0d:36:54:a1:00:f2:43:3b:1b:0e:a2: de:df:40:f7:1c:54:b0:e3:9a:fc:06:41:c0:10:9d: 1c:d3:f3:bb:48:43:2c:d1:9d:34:ce:a9:47:e4:9f: dc:18:ee:56:25:7e:58:17:b3:8e:99:d7:17:29:3e: 4a:99:64:d5:92:0f:62:39:61:48:70:61:56:f9:e0: 97:c6:f3:f9:81:59:32:b3:72:8a:30:64:8f:7b:c1: c3:39:0e:50:aa:41:08:eb:d4:0c:40:1b:13:3c:28: ce:64:53:3c:60:39:24:c8:11:f4:31:ed:9c:16:b0: 03:13:0b:dd:1d:d7:47:78:63:f0:fd:32:30:55:20: b5:97:ec:70:4a:0f:e7:23:95:3d:6e:7b:81:bc:2f: de:96:ae:75:99:1b:6d:f9:9c:f6:fb:e4:e8:50:e7: 81:da:ed:6f:67:32:58:e8:19:f4:94:fa:3e:a4:0f: 88:c7:a1:44:0d:56:e7:5b:93:11:7a:66:e0:af:b0: ce:92:a0:f2:81:b7:6f:f5:5d:f7:4c:19:4b:8b:f6: 2a:25:97:0d:09:06:07:64:e5:3f:0e:df:22:b8:92: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:58:F7:BB:D8:A1:23:53:AF:0F:5B:80:E0:03:77:54:D1:EE:5F:ED X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1b:37:70:12:11:5e:01:ac:ec:1c:6c:ba:0b:73:d2:1c:ba: e1:22:b2:11:12:f5:5d:36:f1:50:5d:dd:32:3f:cc:4b:c4:35: df:a6:31:a9:80:45:1f:93:1b:21:40:e1:52:a0:b0:4b:07:39: 5c:98:66:23:8f:0b:6a:07:7a:2e:92:d3:23:1b:32:0f:0e:d4: dc:d1:34:67:3a:1d:38:5b:ac:6a:3e:34:a2:35:90:43:68:39: 45:11:5b:0f:5d:9e:8a:3a:22:a9:21:5b:02:d3:c3:a6:06:9b: 6c:b4:52:51:b8:41:f5:fc:b6:25:17:25:5f:42:07:97:42:f4: c8:02:70:f9:d3:37:62:cb:ff:97:17:c2:a5:ef:ab:ef:39:e3: 6e:ad:c7:d8:9f:8b:af:ab:9c:cc:72:28:fa:df:b1:aa:e9:9f: d6:34:3e:f5:58:19:e5:19:00:71:dc:d2:d1:d3:0b:3d:76:a8: 54:7a:05:fa:ab:0d:45:83:67:4d:91:78:a2:a4:76:50:51:0b: f8:c9:68:4f:86:23:95:23:be:ec:b1:03:48:ab:fa:63:92:40: 4a:51:3c:c0:00:b8:77:c9:9e:0d:74:45:9f:d4:33:1a:a4:40: db:c0:21:d3:0a:79:33:2f:42:fe:d4:07:de:0b:55:46:a8:2b: 42:41:27:83 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUbMWe2Yl1CC4bkRPsjHoqpmhsLcwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MTIwNzExNDkzN1oX DTI1MTIwODE0MzYzN1owMzExMC8GA1UEAxMoMkY1OEY3QkJEOEExMjM1M0FGMEY1 QjgwRTAwMzc3NTREMUVFNUZFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKapbUigzOyy5XV+eBCad8Cg096g11Z6poBb2KMxkWnBBg02VKEA8kM7Gw6i 3t9A9xxUsOOa/AZBwBCdHNPzu0hDLNGdNM6pR+Sf3BjuViV+WBezjpnXFyk+Splk 1ZIPYjlhSHBhVvngl8bz+YFZMrNyijBkj3vBwzkOUKpBCOvUDEAbEzwozmRTPGA5 JMgR9DHtnBawAxML3R3XR3hj8P0yMFUgtZfscEoP5yOVPW57gbwv3paudZkbbfmc 9vvk6FDngdrtb2cyWOgZ9JT6PqQPiMehRA1W51uTEXpm4K+wzpKg8oG3b/Vd90wZ S4v2KiWXDQkGB2TlPw7fIriSgU0CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQvWPe7 2KEjU68PW4DgA3dU0e5f7TAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYbN3ASEV4BrOwcbLoLc9IcuuEishES9V02 8VBd3TI/zEvENd+mMamARR+TGyFA4VKgsEsHOVyYZiOPC2oHei6S0yMbMg8O1NzR NGc6HThbrGo+NKI1kENoOUURWw9dnoo6IqkhWwLTw6YGm2y0UlG4QfX8tiUXJV9C B5dC9MgCcPnTN2LL/5cXwqXvq+85426tx9ifi6+rnMxyKPrfsarpn9Y0PvVYGeUZ AHHc0tHTCz12qFR6BfqrDUWDZ02ReKKkdlBRC/jJaE+GI5UjvuyxA0ir+mOSQEpR PMAAuHfJng10RZ/UMxqkQNvAIdMKeTMvQv7UB94LVUaoK0JBJ4M= -----END CERTIFICATE-----Generated at Sun Dec 7 19:44:01 2025 by rpki-client