This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
File:                     0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft (raw, json)
Hash identifier:          cCj1v7lI+aSQeXTlHMc9/Ra0GsID7xNLQ6Gf0G3d5Zo=
Subject key identifier:   E3:C7:F6:63:7A:9A:EE:BF:4A:F3:2F:32:2A:8A:EF:F6:E2:28:B2:E8
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       7C5476F97134B976D6D1E3839DD8DFDC67EA81C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
Manifest number:          0837
Signing time:             Sat 13 Dec 2025 17:58:16 +0000
Manifest this update:     Sat 13 Dec 2025 17:53:16 +0000
Manifest next update:     Sun 14 Dec 2025 21:41:16 +0000
Files and hashes:         1: 323630343a653034303a3a2f33322d3438203d3e203632353939.roa (hash: IdEEceodCPU49DNjgQA+YXFPjEWoYAGxzDpAi94+xYU=)
                          2: 0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl (hash: JC+febCz4l4dKXyLrW+Y9Plvv6dDCYMy/tQqqQDSDtw=)
                          3: 32332e3133392e3232342e302f32342d3234203d3e203632353939.roa (hash: aMDk5M+bc1frV0ppgn/NfzktLrif6fzryiE5H3//RU8=)
                          4: 323630343a653034303a3a2f33322d3438203d3e20393439.roa (hash: iXfj2zkeKxyW481izim0ILvlPX92QHffH91jozS9TaQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
                          rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 21:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:54:76:f9:71:34:b9:76:d6:d1:e3:83:9d:d8:df:dc:67:ea:81:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Dec 13 17:53:16 2025 GMT
            Not After : Dec 14 21:41:16 2025 GMT
        Subject: CN=E3C7F6637A9AEEBF4AF32F322A8AEFF6E228B2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:ad:e7:37:7b:83:25:12:00:4b:d7:1a:5f:
                    cf:35:35:94:03:a3:48:17:0c:4f:ed:92:52:a6:3e:
                    05:d5:6c:06:a1:6f:b9:e8:83:83:1f:84:16:47:a8:
                    f6:1f:ee:47:9e:ee:93:de:1f:de:10:42:90:39:e5:
                    f3:42:1b:5f:c8:9a:ad:50:df:ad:40:ad:bd:2d:db:
                    d5:99:52:03:15:29:23:f1:ee:f2:63:ed:89:1f:9b:
                    b1:47:d1:0b:7c:26:25:a9:ff:38:40:ad:a8:3b:33:
                    15:df:16:67:ce:17:47:60:96:3a:8c:91:44:03:95:
                    a9:c9:ec:3a:ec:a0:ad:48:82:f9:46:6b:77:3e:1f:
                    16:4c:c6:91:af:c7:98:a2:83:50:1a:8c:80:75:34:
                    06:0c:32:7f:31:3d:0f:55:40:8d:2e:11:9a:35:0a:
                    25:80:54:ee:65:b1:ac:91:a9:67:ec:ad:23:d5:43:
                    bd:04:33:aa:58:ce:66:27:45:e0:df:a3:f7:b0:29:
                    d1:22:47:7d:0d:4c:7b:28:59:fa:d9:be:72:34:a4:
                    6d:e2:f4:16:ce:97:19:f3:2f:85:5f:1b:5f:f7:e2:
                    34:32:89:e7:68:4f:ed:19:ff:0d:cd:b7:63:f6:f2:
                    69:6a:7a:c4:b5:0c:4c:d0:1d:43:c4:a4:c7:ad:ef:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:F6:63:7A:9A:EE:BF:4A:F3:2F:32:2A:8A:EF:F6:E2:28:B2:E8
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:06:ae:8b:ed:71:26:97:cf:04:d0:a1:81:26:57:7b:05:52:
         25:be:e7:54:0d:2f:37:17:aa:b9:7d:45:88:71:bc:4b:5c:49:
         e6:e4:37:de:27:ed:41:13:0f:e0:1c:a5:cc:8c:0a:f5:5c:8c:
         8d:e4:06:84:cf:e7:ae:6a:fe:72:e4:4d:8c:ba:70:72:6b:87:
         fb:00:d4:54:bd:2c:58:ff:b5:94:3e:7e:1f:0f:ed:95:74:72:
         cc:2a:73:83:2d:b2:18:75:a2:c8:b8:ba:d3:6e:db:87:43:a1:
         ed:61:82:b5:c3:18:73:d9:76:26:11:6e:a3:72:8d:2a:0b:9b:
         27:42:8c:aa:15:5a:ac:fe:74:bd:7c:61:40:92:9f:74:ea:ce:
         8f:ae:16:29:bb:54:6e:02:ad:5d:08:10:59:a1:53:e0:f1:95:
         e5:2b:fa:0c:8b:4b:ff:12:4e:a1:7a:86:1b:10:57:77:c0:b1:
         43:98:aa:8b:18:d5:9e:e1:90:62:f2:08:ae:4c:47:8e:c9:38:
         f9:c9:e1:8e:e9:31:bd:80:30:e9:27:01:e9:3a:2c:61:61:91:
         66:4f:c1:05:62:e8:8f:f5:d7:4a:d4:e0:cb:0b:81:04:52:7f:
         bd:a3:a1:fe:9b:8a:1c:bf:f6:d6:c7:83:59:0f:1b:7d:b0:86:
         34:23:3a:41
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUfFR2+XE0uXbW0eODndjf3GfqgcgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj
ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjUxMjEzMTc1MzE2WhcNMjUxMjE0MjE0MTE2
WjAzMTEwLwYDVQQDEyhFM0M3RjY2MzdBOUFFRUJGNEFGMzJGMzIyQThBRUZGNkUy
MjhCMkU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtat5zd7gyUS
AEvXGl/PNTWUA6NIFwxP7ZJSpj4F1WwGoW+56IODH4QWR6j2H+5Hnu6T3h/eEEKQ
OeXzQhtfyJqtUN+tQK29LdvVmVIDFSkj8e7yY+2JH5uxR9ELfCYlqf84QK2oOzMV
3xZnzhdHYJY6jJFEA5Wpyew67KCtSIL5Rmt3Ph8WTMaRr8eYooNQGoyAdTQGDDJ/
MT0PVUCNLhGaNQolgFTuZbGskaln7K0j1UO9BDOqWM5mJ0Xg36P3sCnRIkd9DUx7
KFn62b5yNKRt4vQWzpcZ8y+FXxtf9+I0MonnaE/tGf8Nzbdj9vJpanrEtQxM0B1D
xKTHre9L7wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFOPH9mN6mu6/SvMvMiqK7/bi
KLLoMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw
Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3
YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5
NzUxMmM0Mi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFB
QzZEOEUyQ0Y4M0FEMjJBQzcwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIQGrovtcSaXzwTQoYEmV3sF
UiW+51QNLzcXqrl9RYhxvEtcSebkN94n7UETD+AcpcyMCvVcjI3kBoTP565q/nLk
TYy6cHJrh/sA1FS9LFj/tZQ+fh8P7ZV0cswqc4Mtshh1osi4utNu24dDoe1hgrXD
GHPZdiYRbqNyjSoLmydCjKoVWqz+dL18YUCSn3Tqzo+uFim7VG4CrV0IEFmhU+Dx
leUr+gyLS/8STqF6hhsQV3fAsUOYqosY1Z7hkGLyCK5MR47JOPnJ4Y7pMb2AMOkn
Aek6LGFhkWZPwQVi6I/110rU4MsLgQRSf72jof6bihy/9tbHg1kPG32whjQjOkE=
-----END CERTIFICATE-----
Generated at Sun Dec 14 14:41:56 2025 by rpki-client