This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: drywIYNiSupAQd9F6bsA9RZ364ZaCzi7J7J2TCeuwHY= Subject key identifier: A4:43:61:1D:BD:42:24:71:EC:20:97:AA:5D:7A:EF:62:F5:35:87:D0 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 3BE54D49D9425259106F87C733B2E3E9314A013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 08F5 Signing time: Fri 05 Dec 2025 23:09:37 +0000 Manifest this update: Fri 05 Dec 2025 23:04:37 +0000 Manifest next update: Sun 07 Dec 2025 03:08:37 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 5: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 6: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: /H+DUibkYwWVJ4MdFcIbFVkvwwXFJDLKtMtDtbfXWKo=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 03:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e5:4d:49:d9:42:52:59:10:6f:87:c7:33:b2:e3:e9:31:4a:01:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Dec 5 23:04:37 2025 GMT Not After : Dec 7 03:08:37 2025 GMT Subject: CN=A443611DBD422471EC2097AA5D7AEF62F53587D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:0b:a8:9e:dd:d2:1c:be:84:65:9d:53:66: be:44:ab:0c:78:c9:f3:b9:44:cf:59:be:b8:63:a2: 73:55:77:85:12:7b:1a:54:6d:4c:b7:a2:79:b1:47: 66:f1:13:b8:58:8a:c4:23:da:75:e1:bd:98:4c:ff: 81:73:4d:09:e3:ea:67:f8:7c:b7:e0:d0:a2:ef:a9: 1f:3b:0b:e5:be:42:89:fb:53:5c:ce:d7:55:94:7d: 93:9d:2f:db:9d:d6:9c:9b:21:82:85:8a:2c:59:32: 84:1d:66:44:8c:b9:20:b2:01:c8:62:cf:64:70:f2: a4:bd:20:2a:2a:15:e5:ae:3e:2c:31:98:40:ac:c0: fc:69:2f:c5:35:c0:b3:a3:db:87:a2:89:46:b7:1c: 95:d7:8d:d1:2b:3d:69:2c:fb:b2:16:f5:76:8a:fb: 03:ce:71:8a:99:1d:fe:6f:fb:81:a3:cb:77:c4:de: c5:08:91:d5:2f:e2:4f:78:8a:b4:9e:ca:70:a6:0b: 58:5d:20:ae:b3:94:ee:77:6d:90:c2:ef:ba:f9:05: 2c:7c:99:31:3d:14:f5:f0:52:2a:45:f8:d9:78:04: 4d:4e:be:ba:10:71:c8:32:18:e6:ff:ca:a9:a1:2d: 61:45:90:ab:05:f0:2b:f1:5f:09:43:b7:ed:8d:d8: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:43:61:1D:BD:42:24:71:EC:20:97:AA:5D:7A:EF:62:F5:35:87:D0 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2f:87:e9:85:1b:20:3a:f6:19:16:8f:b5:0e:52:9e:75:14: 0c:a6:e5:fa:63:00:c6:31:8a:0d:60:f5:cb:01:09:01:22:d1: 55:8a:38:96:bd:52:a9:ac:a0:05:20:69:e7:26:29:74:89:2d: 2c:5d:37:0d:3f:40:15:b3:bb:0d:8b:6c:62:dd:4a:35:88:45: 80:4a:35:fd:a1:c9:5b:4e:b9:6d:ab:cd:19:fd:0d:c5:96:82: 95:f3:7b:39:fa:17:04:50:b6:66:8b:a4:91:10:87:c0:1d:cd: 85:06:c3:76:8b:07:ad:84:51:a8:3a:66:87:4d:5c:0b:45:bb: e1:7c:f0:b4:8b:9c:cc:c2:63:72:8c:86:0f:59:a2:f5:07:91: 1e:fe:17:f4:05:aa:70:9f:66:b5:34:b2:7e:28:09:68:12:4c: 86:ba:ca:54:6a:33:84:1c:8b:76:49:bb:96:c7:68:ab:ee:f4: 75:5e:cc:4a:c9:ef:a5:09:f8:0e:d3:1f:53:5c:b2:e6:c4:13: c9:56:bd:21:27:d2:51:9d:01:da:c7:39:f5:91:4b:a8:62:cf: 36:21:cf:e8:6d:66:b0:98:81:1c:a9:cb:5e:25:df:e0:04:00: 2b:08:43:96:d2:f5:a4:94:f8:81:61:0a:f6:f8:e9:69:88:c2: b3:3b:f3:4a -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUO+VNSdlCUlkQb4fHM7Lj6TFKAT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MTIwNTIzMDQzN1oX DTI1MTIwNzAzMDgzN1owMzExMC8GA1UEAxMoQTQ0MzYxMURCRDQyMjQ3MUVDMjA5 N0FBNUQ3QUVGNjJGNTM1ODdEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbaC6ie3dIcvoRlnVNmvkSrDHjJ87lEz1m+uGOic1V3hRJ7GlRtTLeiebFH ZvETuFiKxCPadeG9mEz/gXNNCePqZ/h8t+DQou+pHzsL5b5CiftTXM7XVZR9k50v 253WnJshgoWKLFkyhB1mRIy5ILIByGLPZHDypL0gKioV5a4+LDGYQKzA/GkvxTXA s6Pbh6KJRrccldeN0Ss9aSz7shb1dor7A85xipkd/m/7gaPLd8TexQiR1S/iT3iK tJ7KcKYLWF0grrOU7ndtkMLvuvkFLHyZMT0U9fBSKkX42XgETU6+uhBxyDIY5v/K qaEtYUWQqwXwK/FfCUO37Y3Yd30CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSkQ2Ed vUIkcewgl6pdeu9i9TWH0DAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4vh+mFGyA69hkWj7UOUp51FAym5fpjAMYx ig1g9csBCQEi0VWKOJa9UqmsoAUgaecmKXSJLSxdNw0/QBWzuw2LbGLdSjWIRYBK Nf2hyVtOuW2rzRn9DcWWgpXzezn6FwRQtmaLpJEQh8AdzYUGw3aLB62EUag6ZodN XAtFu+F88LSLnMzCY3KMhg9ZovUHkR7+F/QFqnCfZrU0sn4oCWgSTIa6ylRqM4Qc i3ZJu5bHaKvu9HVezErJ76UJ+A7TH1NcsubEE8lWvSEn0lGdAdrHOfWRS6hizzYh z+htZrCYgRypy14l3+AEACsIQ5bS9aSU+IFhCvb46WmIwrM780o= -----END CERTIFICATE-----Generated at Sat Dec 6 14:38:40 2025 by rpki-client