This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: 6VfRdTtUUiqMIMUT+4NEtIgz86vDcZ3Vmb6OTZwe8PU= Subject key identifier: EE:89:96:57:AC:87:B3:AF:33:52:3C:3B:53:F6:D7:A8:93:8D:84:9A Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 77617DC63F4E1F3E6CA6E7519B2C62603D571CC6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 0841 Signing time: Fri 05 Dec 2025 22:34:37 +0000 Manifest this update: Fri 05 Dec 2025 22:29:37 +0000 Manifest next update: Sat 06 Dec 2025 23:47:37 +0000 Files and hashes: 1: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 2: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 3: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: l7vrp5nsSldBP0ntFSyMylsUOTQYir6DQTxJVvDyriQ=) 4: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 5: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 6: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 23:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:61:7d:c6:3f:4e:1f:3e:6c:a6:e7:51:9b:2c:62:60:3d:57:1c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Dec 5 22:29:37 2025 GMT Not After : Dec 6 23:47:37 2025 GMT Subject: CN=EE899657AC87B3AF33523C3B53F6D7A8938D849A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:8f:0b:b2:38:16:6f:36:e9:7f:ea:57:69: f3:61:0d:ba:1c:25:83:c4:61:4c:51:b7:c1:bb:57: b9:a8:5b:76:c9:58:4a:50:5d:50:cc:3f:48:20:fe: a0:01:2b:84:5a:9d:e0:3a:a0:2a:3c:47:ab:42:61: bc:88:6a:29:36:7b:54:3f:10:6b:9c:a2:9a:c1:9b: d3:79:42:2e:19:03:72:9c:56:1e:5d:bf:e4:d8:ab: d3:c0:b6:c2:77:e1:2b:8e:55:ad:d5:4d:5e:00:39: 4e:61:dd:00:3e:b1:1f:51:f9:b7:a2:47:1b:ec:7c: de:1e:61:0f:61:3c:ec:29:54:40:2a:46:f8:94:bb: e4:e2:5e:32:62:eb:9a:2b:fd:98:97:cb:70:93:47: 2f:2e:05:7d:71:00:8f:a4:e3:86:71:81:39:56:5e: 9f:31:e1:c3:8a:38:88:3e:57:01:df:89:bd:11:f7: ec:2f:34:e7:ae:4f:27:0d:a0:24:a5:41:b3:fb:a1: 5d:e3:15:23:dd:2f:fa:13:73:e8:28:39:35:69:ed: 5c:32:01:62:a6:4c:59:b0:e3:4f:28:cc:8a:6f:35: cf:26:1e:d9:5d:ae:15:da:56:14:dc:93:07:fc:56: e6:2d:64:04:dc:18:64:00:b7:ce:b5:3d:c0:d0:81: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:89:96:57:AC:87:B3:AF:33:52:3C:3B:53:F6:D7:A8:93:8D:84:9A X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a5:6f:42:57:62:85:4a:b1:02:96:75:e6:a7:74:1e:e7:57: 90:62:3c:a5:9a:f9:e2:1b:3c:86:c1:8d:4b:41:ea:7c:99:6f: b7:0b:d2:1f:5e:52:eb:11:b8:57:7f:38:21:ef:c2:13:b8:0a: 09:03:3c:04:6f:d3:48:4b:e5:e0:c0:23:66:d5:6d:26:99:ef: 8c:fd:46:b6:85:ad:00:26:ae:51:0c:b7:76:a1:f6:69:a2:b3: 63:10:e1:ba:69:be:a6:98:b7:64:bc:b7:9f:0e:e4:62:13:43: 34:c9:84:09:92:70:44:a2:f5:7c:09:ce:bb:67:37:92:d3:24: 68:33:e4:48:4d:5e:c4:f7:e1:83:4c:fe:68:ba:a6:34:71:0b: 12:fc:6c:14:3a:2b:af:e0:d1:8f:27:b8:b5:7b:bf:6e:2f:47: d2:ca:f1:f2:eb:ac:c7:5d:79:6e:1a:35:7f:22:e1:de:20:52: 9e:7d:e9:cb:9b:c7:52:aa:db:72:0b:d1:77:ef:2d:44:a6:55: 81:7c:4a:3b:8d:2b:07:e3:c0:63:b7:ed:b8:f0:01:ec:cb:2b: 98:03:af:08:54:3e:d8:d3:bd:20:fc:47:6e:a9:76:17:83:e7: 59:c1:bc:19:0b:ae:48:9e:9e:fb:69:9b:1b:db:08:a2:2d:0a: fa:72:63:7c -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUd2F9xj9OHz5spudRmyxiYD1XHMYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUxMjA1MjIyOTM3WhcNMjUxMjA2MjM0NzM3 WjAzMTEwLwYDVQQDEyhFRTg5OTY1N0FDODdCM0FGMzM1MjNDM0I1M0Y2RDdBODkz OEQ4NDlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2aPC7I4Fm82 6X/qV2nzYQ26HCWDxGFMUbfBu1e5qFt2yVhKUF1QzD9IIP6gASuEWp3gOqAqPEer QmG8iGopNntUPxBrnKKawZvTeUIuGQNynFYeXb/k2KvTwLbCd+ErjlWt1U1eADlO Yd0APrEfUfm3okcb7HzeHmEPYTzsKVRAKkb4lLvk4l4yYuuaK/2Yl8twk0cvLgV9 cQCPpOOGcYE5Vl6fMeHDijiIPlcB34m9EffsLzTnrk8nDaAkpUGz+6Fd4xUj3S/6 E3PoKDk1ae1cMgFipkxZsONPKMyKbzXPJh7ZXa4V2lYU3JMH/FbmLWQE3BhkALfO tT3A0IEk1QIDAQABo4ICazCCAmcwHQYDVR0OBBYEFO6Jllesh7OvM1I8O1P216iT jYSaMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFqlb0JXYoVKsQKWdeandB7n V5BiPKWa+eIbPIbBjUtB6nyZb7cL0h9eUusRuFd/OCHvwhO4CgkDPARv00hL5eDA I2bVbSaZ74z9RraFrQAmrlEMt3ah9mmis2MQ4bppvqaYt2S8t58O5GITQzTJhAmS cESi9XwJzrtnN5LTJGgz5EhNXsT34YNM/mi6pjRxCxL8bBQ6K6/g0Y8nuLV7v24v R9LK8fLrrMddeW4aNX8i4d4gUp596cubx1Kq23IL0XfvLUSmVYF8SjuNKwfjwGO3 7bjwAezLK5gDrwhUPtjTvSD8R26pdheD51nBvBkLrkienvtpmxvbCKItCvpyY3w= -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:37 2025 by rpki-client