This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json) Hash identifier: TgXtuSufVXanKRonXGd6nn8/7F15EHjMTf0+RZ1T8uY= Subject key identifier: FA:D5:7B:CD:D7:5B:5C:7E:E5:54:6B:5F:82:A1:DB:9C:51:09:7C:D3 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 6E209827DDB47D28FF4B5B642687870943193A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft Manifest number: 07A0 Signing time: Sun 25 Jan 2026 05:25:56 +0000 Manifest this update: Sun 25 Jan 2026 05:20:56 +0000 Manifest next update: Mon 26 Jan 2026 06:50:56 +0000 Files and hashes: 1: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: 3QW6q7nlyaTHmuuayp38mJeD/0p6RSdiwoIkJYlbTEA=) 2: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: yk45ao5jNqxMlDQT9mHO4gwIetHo/y3vLlvKtrGMEU4=) 3: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: miNQAOvEV9cqqJweidH1Da7G+8UCj99vxs996hAnF9M=) 4: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: 77sdRzVq6pP1l7Vu8K2ysVi1R2suvoRUxVXi384mZhs=) 5: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: Rr6GlVThR7AU6QDZLZ6ozvevo3n7civDQttWIpC96ok=) 6: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: dxlqlSymD3+QS7EUByE6MriZabTKsAyLs26IGboQuBk=) 7: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: 2qTnddQssGcU8sg+KC1UrSSj7O/cHGdq7aS7vBfMtvw=) 8: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: 5hG4RwSHZVnSqsO9x6f7nAjxYEbAb/HRse6WJYcZAOE=) 9: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: aHLgsiUilAeuP0eUngFPa4NKmApL4+TTY785LIHVh2U=) 10: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: lBMQEgfNNqcQ4E5GtZaXErKNQCGw7C4a/0CUQvTz9ac=) 11: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: M7BFiLI/85eHFKyc8YCJdi5+AugJtg2SqbTW7w1G6LQ=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:20:98:27:dd:b4:7d:28:ff:4b:5b:64:26:87:87:09:43:19:3a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jan 25 05:20:56 2026 GMT Not After : Jan 26 06:50:56 2026 GMT Subject: CN=FAD57BCDD75B5C7EE5546B5F82A1DB9C51097CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:09:89:39:c2:52:19:fe:5b:37:db:19:2f: d8:c5:a3:fe:4f:ca:f4:84:ba:6d:7b:4b:25:57:93: 4e:72:70:67:90:e1:b5:5d:43:05:95:47:9a:e7:d8: a9:78:31:70:b2:65:a1:12:64:93:79:1c:01:2b:a9: 48:e7:36:6e:0e:01:43:9f:3c:2b:05:27:37:be:89: 79:0c:9a:cd:5f:07:3b:f4:57:9e:0a:d4:13:04:90: 98:a4:88:ca:ed:48:c0:d6:c5:56:76:4f:ed:b3:40: 32:26:80:bd:ab:03:39:5d:58:62:8a:ca:c3:1e:05: cf:36:19:24:ea:b8:46:11:b4:56:32:91:60:40:a1: 83:8c:2e:fc:68:5c:7f:79:9c:a6:35:e1:69:72:c5: 6a:85:c9:86:fa:28:dd:15:8c:19:21:03:9f:82:8f: 4e:2b:27:3f:66:0e:3e:30:b6:e3:fe:25:cd:9a:49: b7:58:2e:e1:89:31:0c:a2:26:6a:61:f8:36:41:21: 0b:1f:c0:e1:d2:60:90:e8:dc:0d:c1:cb:c6:85:57: 37:02:80:6a:04:3a:f7:54:b1:43:83:67:f0:7c:79: 33:76:1d:58:8d:99:85:76:1a:f0:0d:f6:45:1e:cb: 62:d7:68:53:a6:3f:23:64:02:3a:7d:47:ee:f6:27: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D5:7B:CD:D7:5B:5C:7E:E5:54:6B:5F:82:A1:DB:9C:51:09:7C:D3 X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c9:56:d8:8c:b0:ee:1d:82:b5:63:19:2e:87:33:90:52:dd: be:83:32:3a:a7:fc:7e:11:f8:15:ae:6d:9a:23:6f:ec:a0:78: 8f:30:34:9a:db:91:e5:4e:d2:eb:24:10:e8:dd:0e:4e:16:dc: 35:4b:43:7a:16:0e:5c:b0:be:ae:24:b5:c0:80:82:c6:54:aa: 8b:d4:4c:79:62:8c:b4:f6:61:97:a6:10:e5:83:fc:e0:14:a8: cd:da:32:57:c3:c6:a2:c6:1b:28:a0:f0:f4:8d:b7:86:f9:4f: 3d:5c:df:8b:01:cb:2f:33:d5:51:2a:a6:1a:7c:af:32:d2:4e: 2c:77:9b:ac:8b:71:e7:b8:64:ae:5a:26:d6:a6:76:2e:b8:42: 99:fd:ca:fe:db:b3:4e:cc:ad:4a:5b:3f:c2:48:aa:58:ab:3f: 75:0a:1c:fb:74:33:40:f2:5e:5d:0d:6c:ae:ad:61:35:aa:e2: f0:90:8a:33:cb:32:8f:07:6e:f7:e0:57:08:3f:5d:ad:a9:be: a6:cb:94:c4:7c:0f:43:b4:32:c6:8f:d7:45:fb:28:ab:80:dc: 95:71:91:08:02:b2:56:93:a9:fc:f1:d3:09:d0:65:50:40:71: f6:a3:cf:db:33:e0:80:81:5e:d6:a1:ec:6b:c3:06:11:7d:ef: 11:a0:80:12 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUbiCYJ920fSj/S1tkJoeHCUMZOgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDEyNTA1MjA1NloX DTI2MDEyNjA2NTA1NlowMzExMC8GA1UEAxMoRkFENTdCQ0RENzVCNUM3RUU1NTQ2 QjVGODJBMURCOUM1MTA5N0NEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTlCYk5wlIZ/ls32xkv2MWj/k/K9IS6bXtLJVeTTnJwZ5DhtV1DBZVHmufY qXgxcLJloRJkk3kcASupSOc2bg4BQ588KwUnN76JeQyazV8HO/RXngrUEwSQmKSI yu1IwNbFVnZP7bNAMiaAvasDOV1YYorKwx4FzzYZJOq4RhG0VjKRYEChg4wu/Ghc f3mcpjXhaXLFaoXJhvoo3RWMGSEDn4KPTisnP2YOPjC24/4lzZpJt1gu4YkxDKIm amH4NkEhCx/A4dJgkOjcDcHLxoVXNwKAagQ691SxQ4Nn8Hx5M3YdWI2ZhXYa8A32 RR7LYtdoU6Y/I2QCOn1H7vYnaM8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT61XvN 11tcfuVUa1+CoducUQl80zAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvNUExOUQyRkRDODM5MjcyNzY5NkY3MDQ0OUI4QjMy QUY3NzIwOTFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXJVtiMsO4dgrVjGS6HM5BS3b6DMjqn/H4R +BWubZojb+ygeI8wNJrbkeVO0uskEOjdDk4W3DVLQ3oWDlywvq4ktcCAgsZUqovU THlijLT2YZemEOWD/OAUqM3aMlfDxqLGGyig8PSNt4b5Tz1c34sByy8z1VEqphp8 rzLSTix3m6yLcee4ZK5aJtamdi64Qpn9yv7bs07MrUpbP8JIqlirP3UKHPt0M0Dy Xl0NbK6tYTWq4vCQijPLMo8HbvfgVwg/Xa2pvqbLlMR8D0O0MsaP10X7KKuA3JVx kQgCslaTqfzx0wnQZVBAcfajz9sz4ICBXtah7GvDBhF97xGggBI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:04 2026 by rpki-client