This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: OOUEwE8N8NBDQk6k82ceN9CBGW3ronUwyJDtzbXyjac= Subject key identifier: 83:0B:4F:23:5F:0E:D2:F3:65:07:6C:6B:11:0D:EA:D1:4F:99:57:39 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 473147DAB10980FECE2D6736E0843D6C58216FD6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 084C Signing time: Sat 13 Dec 2025 19:53:16 +0000 Manifest this update: Sat 13 Dec 2025 19:48:16 +0000 Manifest next update: Sun 14 Dec 2025 20:37:16 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 2: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 3: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 4: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 5: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: tFnsA7sz2+UgV+1dzGgzV2Kwyrlzpphx9fGbJptX8nE=) 6: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Dec 2025 20:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:31:47:da:b1:09:80:fe:ce:2d:67:36:e0:84:3d:6c:58:21:6f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Dec 13 19:48:16 2025 GMT Not After : Dec 14 20:37:16 2025 GMT Subject: CN=830B4F235F0ED2F365076C6B110DEAD14F995739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:e0:a0:45:69:05:92:b7:92:43:d2:a0:56: 24:b1:ec:c7:a8:c6:af:8e:dc:89:8c:43:eb:df:c7: ed:e3:31:25:f7:57:f0:67:26:41:b3:37:6b:cc:98: d4:55:ef:50:41:65:8d:5a:e7:1b:2a:ea:b2:bb:9e: b5:dc:6c:08:d4:af:1a:54:60:f0:f3:71:0d:30:96: 02:6b:0a:9f:24:95:fd:61:48:e2:37:73:b2:2f:be: 0b:99:89:21:b7:f6:cc:5e:6e:c1:0a:54:9d:be:c7: 62:f8:40:5e:7a:35:f2:55:5b:40:91:e3:35:09:cc: 7f:3a:f1:f0:50:84:f0:c8:05:70:4f:e7:6c:5a:92: 65:d6:94:45:24:ee:80:e2:f1:99:07:e5:38:3a:45: 0f:7c:6a:01:77:26:54:94:58:44:e9:05:4e:01:70: 58:b9:ed:ed:17:41:15:1e:e6:d7:ac:18:ee:18:a3: b4:12:2d:38:f5:aa:c9:14:87:00:f4:0a:1f:b0:b4: 71:ae:4a:e9:8a:c0:d5:84:50:4c:72:84:b8:1e:ee: d8:e9:a2:80:a8:44:2d:8d:10:4e:c4:eb:fb:20:9d: 57:c0:2d:9a:e5:dc:76:08:b0:22:be:5b:6a:14:9b: 5e:f8:37:53:4d:27:fc:8d:fa:fb:4d:df:f0:51:3c: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0B:4F:23:5F:0E:D2:F3:65:07:6C:6B:11:0D:EA:D1:4F:99:57:39 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:91:c8:f1:f6:ad:00:c4:cb:64:41:2e:c5:c3:70:81:32:93: 46:b2:79:da:c4:12:32:aa:17:03:82:73:a4:57:27:22:3d:44: 4e:d0:00:60:cc:b8:73:d2:87:ce:e9:0b:eb:50:00:0d:0e:52: fb:f0:c9:14:1f:89:df:2f:f2:b8:ef:83:e7:60:44:6f:55:88: 3a:4d:fb:83:7a:b2:5a:1e:11:71:3a:de:d9:b9:ef:ce:bb:70: eb:c2:8f:2c:24:57:c3:49:ce:ed:5b:e5:af:33:64:a4:c0:ab: 1e:f0:79:e2:ac:dd:f2:df:e5:60:c6:9e:9f:58:da:2f:0d:8f: 59:f7:0b:96:11:8c:4f:1a:68:47:c7:df:ab:a8:50:bf:81:b2: 55:1f:43:7b:6e:29:77:91:ad:cd:10:10:c9:85:a5:17:f4:b4: ee:0f:a3:39:85:c6:8e:3f:1c:e6:3f:55:78:15:1a:ec:9d:a2: 46:e1:e8:64:8c:de:73:06:15:05:83:28:d2:e1:ca:53:aa:b8: dd:de:a2:45:56:ff:9d:9a:7c:a7:20:0f:22:4c:64:01:6f:d5: b7:7a:c5:92:74:7e:01:fb:07:9a:1a:b1:7a:08:ba:bc:1a:2b: 45:a9:bd:71:46:d1:e8:59:6b:79:1e:83:be:cc:38:e6:65:35: a5:20:eb:83 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIURzFH2rEJgP7OLWc24IQ9bFghb9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUxMjEzMTk0ODE2WhcNMjUxMjE0MjAzNzE2 WjAzMTEwLwYDVQQDEyg4MzBCNEYyMzVGMEVEMkYzNjUwNzZDNkIxMTBERUFEMTRG OTk1NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsTgoEVpBZK3 kkPSoFYksezHqMavjtyJjEPr38ft4zEl91fwZyZBszdrzJjUVe9QQWWNWucbKuqy u5613GwI1K8aVGDw83ENMJYCawqfJJX9YUjiN3OyL74LmYkht/bMXm7BClSdvsdi +EBeejXyVVtAkeM1Ccx/OvHwUITwyAVwT+dsWpJl1pRFJO6A4vGZB+U4OkUPfGoB dyZUlFhE6QVOAXBYue3tF0EVHubXrBjuGKO0Ei049arJFIcA9AofsLRxrkrpisDV hFBMcoS4Hu7Y6aKAqEQtjRBOxOv7IJ1XwC2a5dx2CLAivltqFJte+DdTTSf8jfr7 Td/wUTxLywIDAQABo4ICazCCAmcwHQYDVR0OBBYEFIMLTyNfDtLzZQdsaxEN6tFP mVc5MB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACeRyPH2rQDEy2RBLsXDcIEy k0ayedrEEjKqFwOCc6RXJyI9RE7QAGDMuHPSh87pC+tQAA0OUvvwyRQfid8v8rjv g+dgRG9ViDpN+4N6sloeEXE63tm57867cOvCjywkV8NJzu1b5a8zZKTAqx7weeKs 3fLf5WDGnp9Y2i8Nj1n3C5YRjE8aaEfH36uoUL+BslUfQ3tuKXeRrc0QEMmFpRf0 tO4PozmFxo4/HOY/VXgVGuydokbh6GSM3nMGFQWDKNLhylOquN3eokVW/52afKcg DyJMZAFv1bd6xZJ0fgH7B5oasXoIurwaK0WpvXFG0ehZa3keg77MOOZlNaUg64M= -----END CERTIFICATE-----Generated at Sun Dec 14 08:38:54 2025 by rpki-client