This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
File:                     E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json)
Hash identifier:          8OVF1dR+Zz4dX+vpsMbz/IVRURIglc4caAM984cBcA0=
Subject key identifier:   E7:BD:2E:57:3D:3B:38:9C:5B:75:26:AC:92:EF:CB:92:0D:05:F0:7F
Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90
Certificate issuer:       /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
Certificate serial:       45FB467FC0A48F928FDABB4278913AC44EE7A5DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
Manifest number:          0937
Signing time:             Sat 24 Jan 2026 07:55:56 +0000
Manifest this update:     Sat 24 Jan 2026 07:50:56 +0000
Manifest next update:     Sun 25 Jan 2026 10:04:56 +0000
Files and hashes:         1: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: N5js4JcXQVw6Yg4ajc75st9t9qe6hiU0KY9IRBaYySA=)
                          2: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=)
                          3: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=)
                          4: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=)
                          5: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=)
                          6: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl
                          rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 10:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fb:46:7f:c0:a4:8f:92:8f:da:bb:42:78:91:3a:c4:4e:e7:a5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
        Validity
            Not Before: Jan 24 07:50:56 2026 GMT
            Not After : Jan 25 10:04:56 2026 GMT
        Subject: CN=E7BD2E573D3B389C5B7526AC92EFCB920D05F07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:fb:e0:2a:71:45:ec:04:cc:cc:ea:e8:6b:
                    a9:29:fa:f0:97:fb:f8:e3:10:6f:29:b3:0a:fe:0e:
                    7b:ad:c8:ff:01:50:7a:79:06:75:8a:98:f2:ae:9a:
                    89:5e:1a:d4:72:60:54:42:e3:fc:5a:a1:40:f3:7f:
                    30:9e:2d:d6:a2:19:86:16:02:22:ca:43:45:e0:36:
                    d6:85:cd:01:71:ed:bf:fa:c2:7d:32:d5:40:aa:3d:
                    a5:2f:41:02:97:9f:63:02:8a:4b:60:8b:96:ae:af:
                    68:c1:99:ca:36:37:a4:43:3d:05:ab:c9:42:79:75:
                    bb:42:9f:b9:22:31:9f:b6:d8:95:01:d7:ad:9c:ad:
                    91:b5:2d:8f:3d:1e:20:b3:36:21:ec:62:db:ba:09:
                    6a:24:21:9f:de:46:ca:b0:69:cc:96:cf:21:36:3d:
                    2f:df:35:d3:43:50:c3:41:25:41:57:b5:84:54:5d:
                    0e:31:b1:7b:cc:09:50:15:0b:66:11:47:0d:a7:a8:
                    1f:c8:e7:fe:f0:35:70:1e:77:2e:7c:e6:6e:7b:0a:
                    e8:1d:2c:0b:2a:2d:77:13:b1:00:49:84:0b:84:a4:
                    f3:e2:74:aa:ed:31:bc:77:97:87:50:46:66:68:7c:
                    7e:71:69:73:39:04:9c:0f:db:75:06:31:18:5e:fa:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BD:2E:57:3D:3B:38:9C:5B:75:26:AC:92:EF:CB:92:0D:05:F0:7F
            X509v3 Authority Key Identifier:
                keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b8:98:61:65:01:69:58:a8:68:24:d7:9d:30:c1:82:70:4b:
         b0:b0:bb:70:31:88:11:60:f8:39:fe:48:68:e8:65:ac:53:a7:
         95:13:59:03:5f:97:84:38:d7:17:2c:4b:cf:aa:fb:2c:aa:0c:
         43:a3:14:48:a4:5c:ea:f9:08:33:87:e8:47:ee:7b:61:2b:4a:
         3f:52:50:63:91:68:3f:bc:b7:d0:13:2e:7b:41:29:7c:2a:4d:
         a5:f2:e0:d5:ef:7a:8f:ff:09:e9:cd:96:12:24:54:cf:4c:70:
         29:ea:cd:0e:b5:76:bf:a8:74:1c:24:ef:78:4d:73:b7:67:5b:
         b3:1f:b0:7c:96:92:ca:73:fc:f3:52:da:84:f4:97:79:5a:61:
         26:af:48:af:4f:48:5a:fe:46:42:24:60:d4:59:1c:20:6d:d9:
         52:59:e4:94:6a:f0:7d:8f:4e:66:7e:37:9a:e9:2a:d2:84:65:
         f0:75:f2:1c:ef:19:a1:f1:81:7c:27:6b:f7:1a:46:3e:9c:3c:
         ca:08:ea:ac:c7:ea:6d:10:f5:46:31:2f:fb:7c:c9:2f:d5:55:
         92:3a:a4:66:2c:93:2f:04:3f:29:2d:65:e4:d1:70:16:aa:3d:
         56:5d:13:0c:c5:f5:00:75:04:61:02:2a:8e:43:7c:6d:90:40:
         de:1b:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:07 2026 by rpki-client