This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
File:                     8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json)
Hash identifier:          0+2Jy27uNVJU9S7Mc059rOTYyUZShU9AHY7VCLyPiLk=
Subject key identifier:   C7:78:EA:8A:D1:6B:55:80:4D:27:CE:4E:5E:C8:98:B6:E3:AA:16:1D
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       31725E50461EFE41481571CFC085B1B17910B8C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
Manifest number:          08FE
Signing time:             Sat 06 Dec 2025 16:59:37 +0000
Manifest this update:     Sat 06 Dec 2025 16:54:37 +0000
Manifest next update:     Sun 07 Dec 2025 18:46:37 +0000
Files and hashes:         1: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=)
                          2: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=)
                          3: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=)
                          4: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=)
                          5: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: Toit2Kzz5BfB99vpF0Pjh16pwO0m54cu1+wT4kkHBsQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:72:5e:50:46:1e:fe:41:48:15:71:cf:c0:85:b1:b1:79:10:b8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Dec  6 16:54:37 2025 GMT
            Not After : Dec  7 18:46:37 2025 GMT
        Subject: CN=C778EA8AD16B55804D27CE4E5EC898B6E3AA161D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:6c:b9:aa:b0:72:ad:13:83:84:18:91:37:
                    c5:b6:eb:51:4e:41:38:52:c4:6c:98:bd:6a:61:fd:
                    8c:0f:87:a3:02:83:3d:df:7e:7f:71:e0:d3:b1:44:
                    ed:6c:ba:dc:97:0a:8c:f8:cf:8b:f0:1b:47:5c:dc:
                    ea:88:80:fe:02:7f:fa:bb:59:9b:5a:99:2d:d1:f9:
                    d9:f7:42:17:b6:80:1d:4b:d1:40:13:06:3b:12:d6:
                    5a:5b:b3:4b:8c:de:4a:ca:69:51:7f:ae:4a:a3:b1:
                    bb:fe:49:2d:1e:99:08:bd:a0:75:75:c9:6d:c4:0c:
                    9c:03:51:c7:fb:32:9a:09:01:80:41:1c:86:88:4d:
                    a6:d4:28:0b:7b:94:82:e3:8f:fb:7f:7b:5f:57:ca:
                    38:57:7e:40:ca:43:89:3e:9b:27:ca:8e:63:a4:20:
                    8c:cb:9f:10:b9:51:19:ea:83:a3:d0:4f:15:d2:49:
                    98:fd:50:68:22:63:fe:7b:55:ce:11:af:4d:e4:f0:
                    c6:fc:51:3d:fc:e7:19:34:21:9f:5f:02:fb:a8:3f:
                    8f:59:ac:65:b1:23:3f:b2:3d:d6:ee:8f:64:70:6b:
                    c2:84:99:f2:18:d1:99:2d:95:ec:e8:9e:84:28:a1:
                    03:78:88:03:36:3e:07:a7:9d:36:0d:a0:04:00:84:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:78:EA:8A:D1:6B:55:80:4D:27:CE:4E:5E:C8:98:B6:E3:AA:16:1D
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:1f:44:cb:9f:d4:99:1e:ad:bb:a4:35:cb:33:65:73:cb:a4:
         f9:c4:98:eb:32:ad:5e:7d:54:2c:36:9c:04:29:14:bb:2d:99:
         f1:85:f6:92:09:e6:c6:c8:b5:30:2a:6e:2d:a3:d2:a8:ab:e2:
         51:bc:88:50:4c:70:4f:b2:d6:aa:f7:f9:24:de:5d:2b:33:9d:
         86:dc:3f:11:6a:bd:fa:69:17:94:fa:d7:da:1f:c5:96:e5:e7:
         c4:d5:f7:04:e9:d1:6d:4a:36:21:5f:d0:35:28:c7:f4:0c:0a:
         d9:68:00:17:7b:33:6c:10:c6:b4:57:d6:b9:9e:35:f2:15:e8:
         b1:98:1b:47:96:0c:cb:b3:a7:f8:df:5c:24:c0:ed:e5:6c:d8:
         bf:96:85:71:35:5f:46:a2:1b:d3:1b:03:a9:b8:2b:c6:91:bf:
         33:d2:f7:37:1a:3b:e6:97:0d:fe:94:0e:e4:d8:2f:ba:f0:5e:
         f3:9c:31:8c:30:fb:33:ab:72:13:08:38:35:08:4a:dd:ca:f9:
         32:bd:dd:0b:c3:cb:1e:77:ff:9f:d3:00:28:3c:6e:7d:9d:06:
         9c:17:c9:b4:25:87:88:a7:dd:97:3a:76:c8:ff:ad:93:9d:b2:
         5b:a2:ae:5e:7c:d1:e1:40:0e:91:3f:ab:eb:02:f5:55:98:2a:
         d3:64:1a:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:52:01 2025 by rpki-client