This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          LBuGHCE8Sdw1wGop0b40PMahAsgN22H6LVboBUEQRM8=
Subject key identifier:   BA:BF:E6:9B:71:F6:6E:D7:3A:38:98:7D:51:84:00:50:B5:80:A2:8D
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       73ECA6CE7286EC402359115F739BA845B15D83A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          07C2
Signing time:             Sat 06 Dec 2025 14:59:37 +0000
Manifest this update:     Sat 06 Dec 2025 14:54:37 +0000
Manifest next update:     Sun 07 Dec 2025 17:50:37 +0000
Files and hashes:         1: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
                          2: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
                          3: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
                          4: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
                          5: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
                          6: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
                          7: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
                          8: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
                          9: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: Wb5h0Uch4G+5ARn6gqDvKm3lBphjBrRX0TG1TlYWv08=)
                          10: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
                          11: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
                          12: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
                          13: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
                          14: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
                          15: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
                          16: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
                          17: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 17:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ec:a6:ce:72:86:ec:40:23:59:11:5f:73:9b:a8:45:b1:5d:83:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Dec  6 14:54:37 2025 GMT
            Not After : Dec  7 17:50:37 2025 GMT
        Subject: CN=BABFE69B71F66ED73A38987D51840050B580A28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:e4:51:de:2f:f6:69:b2:26:88:44:81:29:
                    30:fd:b5:34:97:92:b8:65:58:80:d3:8c:27:c7:5b:
                    77:e0:32:47:03:cb:88:bc:5e:87:90:7d:23:9c:5a:
                    cf:7f:13:8c:ca:a3:28:f0:72:9d:5d:56:02:51:bb:
                    9d:8d:8b:e9:7f:36:24:38:86:5b:f7:dc:2e:27:98:
                    00:e2:fb:67:17:0d:79:1d:51:24:8b:ac:69:81:46:
                    59:bf:41:ac:5e:49:48:26:b4:5f:1c:01:bf:9f:12:
                    30:3c:3c:d4:cc:84:d0:c7:f3:fd:0e:61:1c:3c:65:
                    ff:75:27:54:6b:43:62:5d:bc:12:5c:2e:5d:a5:9a:
                    ce:f8:06:c2:61:20:75:1a:c5:49:5d:91:da:91:3c:
                    93:93:d0:dc:39:30:de:ad:25:a4:43:c5:f7:3e:1d:
                    e7:31:c5:52:0a:1c:97:9b:2d:63:ef:72:73:1d:60:
                    9f:82:a6:35:8c:df:0a:65:3d:f9:4b:2e:f7:d8:23:
                    1a:08:36:db:32:47:a8:b1:36:b1:7b:db:6a:0b:04:
                    da:f3:2c:ee:c8:15:e5:0a:d2:43:42:46:af:95:5b:
                    68:18:cf:0c:49:2a:90:f1:0b:70:73:bd:6f:60:8b:
                    16:84:9b:ec:1b:b4:76:89:0f:fb:15:72:28:09:4e:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BF:E6:9B:71:F6:6E:D7:3A:38:98:7D:51:84:00:50:B5:80:A2:8D
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b1:f3:5e:08:6b:4f:ab:32:e6:83:b8:a0:a5:58:97:a6:b9:
         37:cc:77:78:37:cc:6d:a9:f6:1e:82:37:f7:2d:f7:8a:0a:a5:
         fb:57:a5:9f:07:9e:fc:0b:05:a0:48:ae:b3:f2:55:cd:53:c6:
         0f:dc:ed:71:b0:30:72:bc:38:38:06:9e:4d:06:5d:fd:9a:85:
         57:16:a0:47:15:40:51:f0:7d:ba:5c:cc:5e:db:40:56:1b:89:
         6d:1f:79:bc:b6:be:c5:51:b3:a1:fc:03:d3:63:1e:2e:34:c3:
         f7:5f:aa:73:eb:96:30:4d:9b:9b:77:01:f2:59:f9:83:d4:92:
         09:53:fd:c7:f6:76:df:5d:25:c7:4e:24:82:a6:8a:21:7d:7f:
         36:4c:5b:5b:c4:04:1f:c5:3e:1a:8d:90:0d:a7:bf:91:2f:3b:
         a8:4d:a9:61:97:55:4f:07:e5:ab:64:af:19:98:c4:6a:b8:fe:
         69:12:8b:9d:eb:4a:ae:02:e1:23:33:c5:4a:32:f4:72:2a:01:
         ae:2e:ea:dd:d4:0c:6d:1c:cd:ff:7f:45:5c:a1:31:62:1c:fe:
         c7:73:39:a5:49:37:02:66:77:8b:04:ea:6c:2f:62:1a:61:df:
         c8:e4:cb:37:5a:7f:02:85:dc:b2:da:30:ac:b5:06:31:b8:7a:
         df:ba:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:27 2025 by rpki-client