This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json)
Hash identifier: lCEKVshUA7g7NUOSuhiSfXTu21emz6608YU6mO293so=
Subject key identifier: 93:ED:5C:14:88:1C:A5:D0:74:BA:AF:C3:66:50:DF:CE:65:AD:80:53
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial: 62C07948E67327A5D907E65282BF38EDE41A03AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
Manifest number: 0885
Signing time: Sun 25 Jan 2026 04:25:56 +0000
Manifest this update: Sun 25 Jan 2026 04:20:56 +0000
Manifest next update: Mon 26 Jan 2026 07:30:56 +0000
Files and hashes: 1: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=)
2: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=)
3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=)
4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=)
5: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: QkOyoraNO8Q8vTc730P3Pzvfr+uyzmgMjE45c4seupo=)
6: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 07:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c0:79:48:e6:73:27:a5:d9:07:e6:52:82:bf:38:ed:e4:1a:03:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Validity
Not Before: Jan 25 04:20:56 2026 GMT
Not After : Jan 26 07:30:56 2026 GMT
Subject: CN=93ED5C14881CA5D074BAAFC36650DFCE65AD8053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:80:b6:3d:3c:22:34:c2:c7:45:15:89:37:
8a:3b:b3:b2:cd:29:cc:db:78:3b:1a:1d:15:51:4f:
72:0c:c9:66:59:d5:a0:f5:3a:bd:17:bf:05:ca:4a:
0e:24:d7:76:e5:9b:e7:21:5d:b9:f7:f4:c0:16:01:
01:e7:cd:b0:81:d1:be:fb:48:b3:ac:e3:e1:c8:79:
88:26:7f:39:08:bb:d0:9e:42:68:77:46:e6:17:17:
27:94:f1:5c:49:38:56:4f:e5:16:14:3b:32:66:4b:
2f:e1:ce:21:37:43:45:14:54:3a:25:55:3a:28:a9:
52:ca:15:fa:c7:51:3c:6e:d8:6c:95:c2:e4:0c:62:
69:a4:25:a7:d0:87:b4:aa:27:84:66:81:09:76:3f:
69:f4:7f:30:a7:9a:5f:a5:99:97:df:e9:cf:14:79:
88:4d:15:c3:6e:d3:39:e4:94:60:8b:51:4c:47:5d:
67:b6:90:b4:d3:a4:bd:12:2a:13:a8:7e:1b:a5:90:
14:fd:aa:fc:5e:f8:60:20:f9:86:6b:9c:26:0b:b5:
b4:2e:74:08:d1:05:7b:39:bc:37:0c:28:b1:62:41:
f2:bd:d1:99:8b:64:2a:1b:7d:38:11:f3:18:e6:aa:
01:cd:a6:78:12:02:f4:e3:61:7d:09:13:52:20:7a:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:5C:14:88:1C:A5:D0:74:BA:AF:C3:66:50:DF:CE:65:AD:80:53
X509v3 Authority Key Identifier:
keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9b:dd:5b:27:7c:f9:1f:08:05:9d:70:83:e1:97:fe:af:e0:
af:23:9d:7a:a0:32:75:de:58:fc:e9:e9:a3:b7:24:b4:c5:24:
36:1e:78:34:4e:49:fe:e7:93:e6:e4:32:bd:b4:11:5d:2a:ba:
05:1a:2b:71:24:92:6f:9e:c5:b4:bc:ce:59:71:d8:cb:44:f1:
c8:8f:dc:1a:87:72:42:21:58:39:ad:44:07:49:31:46:44:7e:
40:2b:cb:1c:71:91:88:1e:91:38:d3:3a:c9:da:0a:54:1a:aa:
c0:f8:90:cf:23:d1:56:fb:8a:e3:ac:b6:ca:b7:15:be:31:fa:
82:b7:8b:3d:f2:63:8f:19:d3:7b:b0:3a:26:24:51:33:9c:16:
09:9f:ab:d2:7a:94:75:ed:d9:80:15:d0:e4:c9:1a:ce:c2:b7:
77:87:cf:a7:1f:86:a7:d1:cd:ca:61:f4:ea:d5:40:4d:29:cc:
d9:f7:b9:2b:2e:9f:23:63:a6:0a:64:92:f9:6b:b2:3e:94:32:
0c:73:42:4d:d5:a0:77:d5:72:24:d4:ea:fc:81:1e:05:d2:2f:
38:e0:9d:2c:a9:36:90:15:bd:f7:b9:9a:72:be:4f:dc:82:a6:
bb:4c:62:2b:07:13:91:ee:69:be:6a:29:14:04:c0:5b:05:a2:
d1:ef:5a:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:51:59 2026 by rpki-client