This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json)
Hash identifier: tIA1wVpBGglY+mJSAZ84wCCL6EPVlGLeY8MAlj22tuc=
Subject key identifier: 04:7F:98:EE:DA:A2:58:26:2F:16:27:3B:D6:C7:60:25:6E:CA:4E:2F
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial: 5186A42E2BADDC7CEB6A49DA7941A5032506AA43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
Manifest number: 0941
Signing time: Sun 25 Jan 2026 15:00:56 +0000
Manifest this update: Sun 25 Jan 2026 14:55:56 +0000
Manifest next update: Mon 26 Jan 2026 15:18:56 +0000
Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=)
2: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=)
3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: NeXlu8ojV6LlUNzNvg6dO3o7t7sC66Y9XlpXROw1Jj0=)
4: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=)
5: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 15:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:86:a4:2e:2b:ad:dc:7c:eb:6a:49:da:79:41:a5:03:25:06:aa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Validity
Not Before: Jan 25 14:55:56 2026 GMT
Not After : Jan 26 15:18:56 2026 GMT
Subject: CN=047F98EEDAA258262F16273BD6C760256ECA4E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:87:7f:44:2f:f8:58:33:99:b5:b0:a5:3f:
c5:e1:5b:7b:29:cf:1d:74:59:c3:33:9c:50:64:ca:
00:a3:a7:bc:33:9b:02:3f:3b:bd:a2:f4:fd:a1:08:
ee:e8:84:ae:47:c8:15:19:f2:14:c2:58:ea:69:49:
e3:44:41:a6:7c:33:dc:41:71:1e:df:fe:53:f9:e6:
ee:c8:08:a0:84:40:23:66:b6:20:6b:32:15:81:28:
87:1a:9b:f2:04:c6:e1:ec:c8:67:e7:4e:5d:08:75:
77:29:4b:9f:e7:b6:93:24:e3:87:fe:d8:53:e8:1c:
01:54:33:3b:3f:08:6a:8b:0d:8f:c3:24:61:db:e8:
d9:ac:c7:27:45:a0:be:c4:62:51:41:cc:6a:45:60:
75:bb:60:ca:72:eb:f5:bd:17:02:fd:be:3f:b3:6b:
de:50:97:e4:fe:26:72:23:1c:f3:ad:f8:4a:6c:65:
35:ee:9d:3d:63:7d:72:5e:c2:78:83:e1:22:b5:6c:
c0:94:95:9b:1f:13:1a:6b:ae:fd:15:f8:60:49:e4:
9a:90:9a:b5:f7:8e:f9:37:df:c1:11:6b:f6:92:a0:
93:c3:5a:09:7a:a8:07:02:f2:b8:b9:ea:07:d0:09:
7a:3d:7d:9c:16:bc:17:28:5c:6c:10:0e:fd:94:52:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7F:98:EE:DA:A2:58:26:2F:16:27:3B:D6:C7:60:25:6E:CA:4E:2F
X509v3 Authority Key Identifier:
keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:28:ea:70:3a:1f:f4:90:ba:32:4e:46:81:03:93:4e:f8:9e:
d6:b6:bd:c9:28:7e:1c:45:d2:61:4c:fc:fe:ab:cd:07:26:bc:
4c:ca:a1:9c:0a:6d:8b:27:cb:30:05:37:dc:40:7c:00:f0:da:
8f:b2:93:95:64:6e:b7:63:06:9f:b5:23:7a:5d:60:41:85:26:
3a:49:82:5c:fd:94:63:1d:10:b3:8f:78:ac:e6:bd:37:f3:fa:
0a:b8:9a:18:f1:cf:96:7c:3a:7d:a3:60:00:5f:e1:d7:5e:13:
4e:22:f4:69:b2:14:6f:5d:9a:dd:7c:c0:fe:bc:45:8b:00:fc:
3a:c2:e4:f8:10:59:45:1e:6f:28:f7:db:09:96:51:7b:01:f9:
d4:75:b0:57:35:e4:b7:99:da:35:36:f7:54:df:c9:0b:fd:c7:
14:aa:53:e7:cc:6f:36:e4:f3:fc:f0:18:34:41:ce:fb:7d:1d:
1c:e4:22:66:6b:e4:44:e3:51:41:6f:cc:04:70:50:b2:ad:8e:
f2:38:75:4b:71:51:23:58:62:d1:dd:c2:82:e7:b3:a7:4f:3f:
b3:2a:bd:a5:4a:bd:9b:f3:3a:ff:ab:53:38:03:04:42:2a:04:
0d:b8:96:41:91:ec:3b:aa:cf:68:b3:d3:1b:a6:b0:83:98:b2:
27:b7:32:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:42:48 2026 by rpki-client