This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
File:                     0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft (raw, json)
Hash identifier:          BLAGtU6Gg5FuUjlPf96OTCVPLAs6UjiUjHtdyLEoeM8=
Subject key identifier:   A4:F9:FF:95:C7:2F:B4:3B:52:5A:CB:5F:FA:98:95:1A:C7:3B:3B:FD
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       5E421114F1A20DEC7A2AAE2C6D2436FFC89AA590
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
Manifest number:          0871
Signing time:             Mon 26 Jan 2026 00:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 23:55:56 +0000
Manifest next update:     Tue 27 Jan 2026 03:38:56 +0000
Files and hashes:         1: 32332e3133392e3232342e302f32342d3234203d3e203632353939.roa (hash: aMDk5M+bc1frV0ppgn/NfzktLrif6fzryiE5H3//RU8=)
                          2: 323630343a653034303a3a2f33322d3438203d3e203632353939.roa (hash: IdEEceodCPU49DNjgQA+YXFPjEWoYAGxzDpAi94+xYU=)
                          3: 323630343a653034303a3a2f33322d3438203d3e20393439.roa (hash: iXfj2zkeKxyW481izim0ILvlPX92QHffH91jozS9TaQ=)
                          4: 0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl (hash: xsa/WarOcVNeipB0PYp2+x8T8kKvhG+E+lNbpaYMTe0=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
                          rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:42:11:14:f1:a2:0d:ec:7a:2a:ae:2c:6d:24:36:ff:c8:9a:a5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Jan 25 23:55:56 2026 GMT
            Not After : Jan 27 03:38:56 2026 GMT
        Subject: CN=A4F9FF95C72FB43B525ACB5FFA98951AC73B3BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:87:7d:b1:c1:fb:b3:af:52:4f:af:a2:8e:
                    8f:17:7b:60:b0:22:b0:14:fc:4a:3c:76:b1:26:ac:
                    a3:68:95:e4:95:a0:b2:84:dd:d7:f7:18:bf:64:cc:
                    5b:79:ba:64:78:78:a3:88:8a:11:47:98:77:93:de:
                    08:37:27:08:5a:16:a4:e8:b9:47:bd:07:a7:50:fd:
                    37:26:33:49:6c:5b:75:c4:ea:17:0f:37:a6:59:33:
                    f0:bb:fc:fd:b1:97:47:a0:ad:9f:fc:27:52:6e:6d:
                    51:e6:a3:b7:a1:b0:9e:4d:b6:45:82:cb:26:2d:16:
                    23:a4:e1:8c:90:f3:da:d4:ac:60:f9:e4:f2:bd:9b:
                    54:cf:85:a3:9f:e9:7f:21:fb:3a:a9:cf:c0:9a:e5:
                    a2:10:98:32:64:ff:4f:78:f6:25:a8:66:37:e2:58:
                    3e:97:81:fc:82:1f:2c:4a:70:06:c4:c7:f6:f6:f0:
                    06:da:fe:6d:98:be:42:67:d9:03:cb:b9:c5:5a:b1:
                    77:92:a6:df:1e:26:09:15:49:10:c6:91:fe:05:ff:
                    7f:61:b9:8d:9c:d7:13:d5:8b:81:e3:5c:94:b4:42:
                    e9:ce:86:16:c1:c0:36:ab:b8:ed:23:24:51:ea:9c:
                    1f:55:53:ae:3d:0b:33:86:6b:56:f1:4c:37:b9:34:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:FF:95:C7:2F:B4:3B:52:5A:CB:5F:FA:98:95:1A:C7:3B:3B:FD
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:61:76:c2:12:3a:3f:cd:f7:08:da:f0:e0:fc:57:fd:44:75:
         d2:a7:4e:a4:b0:6e:1a:65:47:83:15:1d:88:05:c2:8b:7d:52:
         24:b4:68:48:46:3a:cf:b6:e1:60:40:2f:a4:e5:9c:e4:36:e8:
         bf:bd:ae:b1:58:59:01:13:40:2d:8f:5b:fa:bd:79:c9:1f:23:
         b4:b3:4d:42:72:72:f9:95:98:9c:85:11:ac:ae:03:33:20:b8:
         49:d1:f0:93:74:32:c7:b4:58:82:5e:27:27:37:4e:f4:09:b6:
         6d:b2:66:89:6c:05:b0:aa:2e:19:b2:a4:fa:af:2c:4c:b7:cb:
         a2:a6:e2:cf:14:55:e4:70:82:df:a3:62:64:62:18:9a:10:7e:
         8e:2f:5f:e7:ad:e3:30:28:fc:19:b8:95:1e:b8:85:1d:1e:49:
         90:69:3e:ad:de:af:71:5b:3b:6d:6e:ae:f0:26:15:40:a8:a3:
         44:06:6e:a1:a1:90:55:91:99:d5:8d:a0:aa:4e:cc:1b:c9:da:
         f4:fe:ff:75:3b:c4:ed:2d:15:e6:b1:2a:4f:53:b2:af:c4:16:
         f9:a2:75:20:c5:f8:48:23:bc:4b:34:44:17:6a:49:9e:77:ad:
         7b:f5:70:6c:39:6d:5e:ae:92:e7:87:d2:a4:78:d8:35:6a:b7:
         8a:98:40:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:58:35 2026 by rpki-client