This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: egVgXEbHdw1DWzePsJe2A/wl39T867qlUY+yKeyTweU= Subject key identifier: A9:0D:AD:2C:3B:51:E6:57:55:5F:19:CF:4B:7F:6F:18:FA:EA:30:17 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 0242B157669074F9C165309BD60DEFDDA1E9539C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 0908 Signing time: Sat 13 Dec 2025 16:23:16 +0000 Manifest this update: Sat 13 Dec 2025 16:18:16 +0000 Manifest next update: Sun 14 Dec 2025 19:36:16 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 2: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: TH9PWDdRil78WyF2JAoKx56fKbj5iN7gd+iHw1klPGU=) 4: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 5: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Dec 2025 19:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:42:b1:57:66:90:74:f9:c1:65:30:9b:d6:0d:ef:dd:a1:e9:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Dec 13 16:18:16 2025 GMT Not After : Dec 14 19:36:16 2025 GMT Subject: CN=A90DAD2C3B51E657555F19CF4B7F6F18FAEA3017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:ed:9d:b2:9a:15:3a:e8:71:3c:d6:33:7f: 99:24:d7:52:b2:b0:c7:bb:6b:4b:b5:ad:76:74:b7: db:e6:c8:3a:16:2d:6a:43:42:f3:fc:99:74:b6:70: 51:21:ce:14:85:ab:c1:54:1c:08:c8:33:00:c1:84: ee:95:27:48:9c:59:84:de:9a:90:69:0f:56:9f:4d: 37:0e:28:05:4b:c3:eb:94:c9:5a:28:27:32:23:a7: 83:a7:fc:18:81:07:3c:fd:31:1c:a7:3d:c2:73:c9: 64:17:23:b0:35:20:97:9c:63:b1:ce:61:f5:31:f5: 7d:9c:64:51:9f:e4:b8:7f:60:e9:6b:4d:8e:47:e6: 65:4a:54:d1:b0:df:c1:f9:39:5e:48:d2:4f:1b:1e: cf:02:9b:71:63:45:c7:ca:b5:18:d6:c1:23:78:b5: bb:42:be:34:05:53:5c:db:41:23:95:07:ef:bf:61: fe:c0:3c:ed:63:c7:ab:5a:1a:75:75:58:9a:28:01: a9:a7:40:e7:1d:61:a7:6e:b6:ca:4c:3a:f2:6a:20: 00:91:e0:1d:28:72:fc:9c:26:2c:39:a7:e3:ae:62: 4c:61:a8:00:46:43:6d:89:86:b0:3f:7d:3e:a8:80: cf:46:c1:f6:d9:df:7c:ac:a5:28:58:83:71:98:8c: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0D:AD:2C:3B:51:E6:57:55:5F:19:CF:4B:7F:6F:18:FA:EA:30:17 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8a:b8:ae:3a:13:e3:7d:4b:8e:16:6a:56:43:56:b9:2e:45: 14:6f:5a:5f:87:2f:29:2e:da:d8:33:2f:55:ed:10:8d:13:b6: 30:2a:f0:db:b3:45:34:c2:1c:eb:71:30:77:bd:1e:ca:c6:bc: 13:e1:51:91:06:93:5b:7e:6a:bd:6e:24:c9:48:1b:48:d5:f4: af:b8:5b:69:67:da:e9:f9:8d:9f:65:92:40:bd:3e:ef:b8:38: d6:2f:bd:5e:57:8c:fe:48:20:4d:f6:95:03:c2:58:13:bb:d2: c2:f8:5c:bd:f7:e3:84:b2:4f:92:19:79:c6:c5:42:4b:be:45: a8:cf:ce:e1:e1:34:da:4b:07:47:01:15:22:ed:ec:25:cc:ec: 95:d4:f0:77:bf:df:79:ff:4d:81:d3:81:d0:3e:e3:37:0d:19: b7:6c:43:52:63:af:a5:bf:19:1f:5b:63:ad:50:08:5b:e6:02: fb:05:4a:aa:eb:84:e1:dd:7b:1d:dc:77:ff:bc:f2:37:6a:5d: 68:d1:1a:c5:2f:e6:42:40:42:89:4b:91:13:7b:64:de:31:fe: 0e:53:b0:f4:43:f4:9b:c4:b9:14:59:d4:54:b8:cc:c7:bc:11: de:52:03:cf:68:f5:2f:49:b9:f9:1c:47:22:a6:f1:ae:94:b1: b0:8d:71:23 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUAkKxV2aQdPnBZTCb1g3v3aHpU5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUxMjEzMTYxODE2WhcNMjUxMjE0MTkzNjE2 WjAzMTEwLwYDVQQDEyhBOTBEQUQyQzNCNTFFNjU3NTU1RjE5Q0Y0QjdGNkYxOEZB RUEzMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D/tnbKaFTro cTzWM3+ZJNdSsrDHu2tLta12dLfb5sg6Fi1qQ0Lz/Jl0tnBRIc4UhavBVBwIyDMA wYTulSdInFmE3pqQaQ9Wn003DigFS8PrlMlaKCcyI6eDp/wYgQc8/TEcpz3Cc8lk FyOwNSCXnGOxzmH1MfV9nGRRn+S4f2Dpa02OR+ZlSlTRsN/B+TleSNJPGx7PAptx Y0XHyrUY1sEjeLW7Qr40BVNc20EjlQfvv2H+wDztY8erWhp1dViaKAGpp0DnHWGn brbKTDryaiAAkeAdKHL8nCYsOafjrmJMYagARkNtiYawP30+qIDPRsH22d98rKUo WINxmIzGwwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFKkNrSw7UeZXVV8Zz0t/bxj6 6jAXMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABKKuK46E+N9S44WalZDVrku RRRvWl+HLyku2tgzL1XtEI0TtjAq8NuzRTTCHOtxMHe9HsrGvBPhUZEGk1t+ar1u JMlIG0jV9K+4W2ln2un5jZ9lkkC9Pu+4ONYvvV5XjP5IIE32lQPCWBO70sL4XL33 44SyT5IZecbFQku+RajPzuHhNNpLB0cBFSLt7CXM7JXU8He/33n/TYHTgdA+4zcN GbdsQ1Jjr6W/GR9bY61QCFvmAvsFSqrrhOHdex3cd/+88jdqXWjRGsUv5kJAQolL kRN7ZN4x/g5TsPRD9JvEuRRZ1FS4zMe8Ed5SA89o9S9JufkcRyKm8a6UsbCNcSM= -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:24 2025 by rpki-client