This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier: klGUO71fyihwp+C/8OC8l17VHXIZIbMjSyW2u09gTWk=
Subject key identifier: 67:E4:2D:30:FA:E0:B4:64:66:69:E9:1A:01:07:7D:94:18:3D:6A:43
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 46FD22DFD6E61AB69945E0582BF3D517BDAE6103
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number: 0849
Signing time: Sat 06 Dec 2025 10:49:37 +0000
Manifest this update: Sat 06 Dec 2025 10:44:37 +0000
Manifest next update: Sun 07 Dec 2025 12:58:37 +0000
Files and hashes: 1: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=)
2: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: uLsxiYVr3xtqJ2ZfNFj3VVcCJDKN1KlK7wpXDipM6wU=)
3: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
4: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
5: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
6: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 12:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fd:22:df:d6:e6:1a:b6:99:45:e0:58:2b:f3:d5:17:bd:ae:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Dec 6 10:44:37 2025 GMT
Not After : Dec 7 12:58:37 2025 GMT
Subject: CN=67E42D30FAE0B4646669E91A01077D94183D6A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:4d:65:43:c4:26:e3:f4:ad:18:b0:06:da:
38:af:0a:9c:91:97:e6:a3:d1:8b:6f:72:a9:9f:37:
81:5b:eb:3f:f2:4b:48:f0:6b:5a:87:fb:4c:a2:99:
e7:a7:e2:30:87:5c:af:1e:39:90:e7:6c:5b:7e:bc:
ca:a7:af:98:49:6a:1e:6b:c2:58:5a:fc:5b:2a:16:
89:87:46:fd:9a:67:d2:f4:ef:88:0d:8a:3f:33:fe:
59:98:90:75:f9:23:2b:64:1d:95:b0:7c:8a:68:9e:
5c:4f:30:10:db:85:cd:6d:ae:c7:7c:6f:8f:c5:26:
04:88:e5:d3:da:b6:a4:ec:83:91:a2:d2:4d:33:c5:
b5:a0:8c:94:bd:b2:22:38:4a:bd:91:cd:84:51:7e:
f9:51:61:49:f0:dc:63:8c:b8:c6:e8:25:b2:76:16:
fc:6a:fd:5a:51:46:d2:f6:50:ed:6b:04:81:81:0f:
66:25:cf:6f:c7:85:44:48:f8:84:ec:65:4d:a8:0e:
19:1d:51:97:a9:26:1f:21:81:33:e2:00:60:4a:8c:
ec:07:ac:e9:04:71:50:5b:45:98:d8:a1:0c:b4:76:
6a:02:f3:65:9d:ff:8b:16:1a:e4:1e:09:82:1b:ac:
1e:fb:5e:6a:bb:8f:25:3d:9b:31:cc:87:12:cd:56:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E4:2D:30:FA:E0:B4:64:66:69:E9:1A:01:07:7D:94:18:3D:6A:43
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:d8:5a:b8:10:bc:a6:8e:6f:ff:3a:c3:8e:0f:32:aa:89:
dd:95:84:e9:97:94:83:4f:32:6c:4d:bb:ce:61:a8:a0:54:93:
1e:6c:ab:76:d7:ca:0b:44:e6:f3:ba:3a:d0:14:45:58:49:ff:
4f:fe:b6:d6:3a:60:14:4c:4d:99:67:9c:ce:f9:32:af:de:75:
ac:63:aa:4e:a9:a3:43:ca:13:6e:b9:a7:c6:71:b5:0e:f1:a9:
4b:94:8c:ee:48:46:5c:c2:a0:44:a7:5a:b2:71:10:6e:0d:5e:
26:0c:fd:99:c8:3e:12:12:03:1b:41:15:78:ef:6e:8e:e9:37:
cc:8c:6a:70:1d:50:01:24:ca:f2:f6:c8:5e:7a:b1:0a:f0:89:
ba:ff:9b:9c:33:61:af:46:28:8a:77:63:5f:cd:98:49:b0:1f:
16:53:6c:4a:84:0e:57:7c:36:68:c9:45:0a:00:64:73:26:3d:
c9:41:95:41:8c:09:b7:93:e4:5c:b6:8f:d8:30:54:80:eb:89:
ff:1c:81:0e:9f:82:a3:9c:d4:e5:cf:57:9a:8c:38:06:8a:6e:
47:ad:b9:63:a2:f3:02:07:fe:5f:ba:54:ba:0d:cf:ca:c2:4a:
9f:c1:af:49:a6:74:b8:3c:e0:8d:e5:44:b8:c0:5c:48:8d:33:
59:14:1a:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:01:47 2025 by rpki-client