This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
File:                     0FD345FD541511795113609BA4AF5FFF60041AFC.mft (raw, json)
Hash identifier:          WCPI3VlvUxC5dB4HVBjvJQzQTqNgWvDa3i3040hBaX0=
Subject key identifier:   D4:16:41:E0:15:1C:91:6C:4C:2A:77:F2:88:7C:CE:29:0E:C5:A3:49
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       1A752CE9EDF87EFC67EB2234C06D9CCE7E3452AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
Manifest number:          0903
Signing time:             Wed 10 Dec 2025 05:45:24 +0000
Manifest this update:     Wed 10 Dec 2025 05:40:24 +0000
Manifest next update:     Thu 11 Dec 2025 06:22:24 +0000
Files and hashes:         1: 0FD345FD541511795113609BA4AF5FFF60041AFC.crl (hash: o04URwhYs0UHFZCDmrjjSf9GxK76XHdavanvsTiWNZc=)
                          2: 323630353a336134303a3a2f33322d3438203d3e2036323333.roa (hash: LZXlT8+qbhWLB4R7aL0iOQkfC3yXb7evUztfr+PQAWE=)
                          3: 323630353a336134303a343a3a2f34382d3438203d3e203530313331.roa (hash: RzjkAxKEK4AzIIC331yfD93Y/6cp8s5ioeAHm3UGZkY=)
                          4: 32332e3134352e34382e302f32342d3234203d3e2036323333.roa (hash: uXlZzQb/GMdt3YEz3sY/MFEPmz9iBW5IVTfYvD/qs/Q=)
                          5: 323630353a336134303a3a2f33322d3438203d3e20393439.roa (hash: E+dOUgJV/OeOw4Kzbv1jw1K0JUYLUp4JHjuHfY6RlYY=)
                          6: 323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa (hash: CrLSbNYhWqShKQZS+rblnI/KGAZSrgP87MDYyLQTzkw=)
                          7: 323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa (hash: QJiJAvZ9RjO6+SVqAcPaHB0JMXrWegoOev/9M4nuhM8=)
                          8: 32332e3134352e34382e302f32342d3234203d3e20323031313036.roa (hash: x9bUZiBzI11huUftDzGbjm53xfQdHsA7lKwmnqSwvo8=)
                          9: 32332e3134352e34382e302f32342d3234203d3e203530313331.roa (hash: ta3bBWXxY4qLWB10THmdI9XwgmXKENQbgYikvtaJzH0=)
                          10: 323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa (hash: MFRzUf+b99Mn6VGzftNoO4J6XD8RKulkMHJhjz9O5S0=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Dec 2025 06:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:75:2c:e9:ed:f8:7e:fc:67:eb:22:34:c0:6d:9c:ce:7e:34:52:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Dec 10 05:40:24 2025 GMT
            Not After : Dec 11 06:22:24 2025 GMT
        Subject: CN=D41641E0151C916C4C2A77F2887CCE290EC5A349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:86:2d:97:58:68:91:23:de:e3:75:f1:75:
                    93:08:da:2b:ad:f3:c2:70:50:7f:2d:e1:5e:77:66:
                    1d:c9:2c:cd:af:4b:d6:29:f7:d5:6c:71:80:4c:90:
                    e7:80:ba:5b:db:ce:27:5f:a4:6c:ef:74:ff:06:9b:
                    5c:67:c8:79:05:ae:9f:8c:f0:3d:0b:79:0e:2a:4c:
                    f5:b0:40:d7:53:3c:3e:4b:e4:af:90:be:ad:fb:72:
                    4c:02:e1:53:9b:f1:38:ec:9b:31:9c:01:07:ef:f8:
                    a3:6a:81:3f:3b:71:d1:02:5f:d4:dd:44:8b:1e:9f:
                    e3:fe:99:37:fd:f0:f4:06:7d:27:59:43:df:13:fb:
                    53:26:b2:e2:20:9a:2f:9f:b7:80:4b:31:85:04:3a:
                    cb:6e:80:ed:ec:11:d6:51:5b:8d:ed:c1:ea:4f:aa:
                    28:6c:16:a6:13:46:fa:1a:76:36:56:5d:fe:71:e5:
                    66:4c:5d:6c:41:84:af:d8:1f:ce:c1:6a:ad:39:92:
                    0e:58:5f:85:cb:94:08:77:5c:63:67:25:81:ce:d4:
                    b4:c4:2c:f1:6f:8c:07:22:08:6f:1c:41:4e:3f:71:
                    f3:69:2b:8e:9d:4c:de:3b:f9:bf:b0:ce:ce:d8:a0:
                    23:a2:fa:a5:6e:cc:df:56:a8:76:c3:f1:ba:2d:9d:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:16:41:E0:15:1C:91:6C:4C:2A:77:F2:88:7C:CE:29:0E:C5:A3:49
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:02:31:4c:9b:33:12:9e:81:8f:46:71:77:17:ad:c8:05:
         82:a5:03:16:3f:7e:a0:cb:3b:24:a0:71:10:2f:f1:d3:22:4e:
         43:1f:27:4a:ea:4c:37:d8:a3:b6:ab:87:13:8e:68:35:fb:fc:
         53:a3:cf:86:d1:22:2a:bf:47:81:66:ce:aa:92:00:6f:36:26:
         e5:85:d0:38:b9:9f:e9:cf:fc:a2:74:a9:0e:ef:76:6f:7d:02:
         76:ce:2f:6e:7f:e0:3c:ed:7a:00:e1:fd:1e:22:ea:33:c0:f3:
         84:bb:86:91:81:fa:38:0f:02:e7:87:2f:c6:25:e2:2a:e1:d8:
         f4:e0:2c:de:95:87:a8:4e:56:95:86:93:54:dc:3e:e6:ec:e9:
         e7:33:fe:57:b3:0a:27:29:d8:57:af:75:94:3c:e7:8b:5f:fe:
         f5:1c:a2:9b:c0:7f:e8:35:07:18:7d:20:23:21:24:5f:c2:c9:
         ba:41:f8:e2:2b:4e:a0:09:7d:ad:5e:db:49:bc:72:37:f9:6c:
         51:2b:13:65:d2:83:38:d7:46:b4:38:b7:19:ea:c7:3b:13:34:
         f1:e5:7b:3a:62:34:2b:44:72:79:37:51:ec:4d:7a:a8:e5:d7:
         6a:7e:d7:0f:af:61:4f:70:ac:28:d5:43:f6:6f:fb:a0:6d:ea:
         df:88:7a:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 10 10:05:17 2025 by rpki-client