This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json) Hash identifier: 5Lm/L0Vi4TqDJeyvQi+gxDgFHtWn0j/7Kx8+WUS0ofY= Subject key identifier: 82:7A:8A:ED:F5:2F:04:59:C0:87:3C:A8:2D:6B:D4:57:89:81:86:EB Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0 Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0 Certificate serial: 1C1F8D485FF75263CCCC80F2719CC587E251C1F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft Manifest number: 0846 Signing time: Sat 20 Dec 2025 19:28:45 +0000 Manifest this update: Sat 20 Dec 2025 19:23:45 +0000 Manifest next update: Sun 21 Dec 2025 20:13:45 +0000 Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=) 2: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: u75f9KmJ1wJZiw3NkpCFEu9v0SMH7dqRO84NB7mrSNU=) 3: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1f:8d:48:5f:f7:52:63:cc:cc:80:f2:71:9c:c5:87:e2:51:c1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0 Validity Not Before: Dec 20 19:23:45 2025 GMT Not After : Dec 21 20:13:45 2025 GMT Subject: CN=827A8AEDF52F0459C0873CA82D6BD457898186EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:59:d5:a3:af:a3:9b:45:89:6a:14:f1:b0: 73:42:4c:9b:2c:d2:1c:5d:58:3f:01:79:c7:04:a5: 87:89:6d:36:6f:73:fd:4d:59:bf:c7:bc:8c:96:a3: da:a3:0a:3c:f4:6b:97:98:02:0d:13:d7:2e:89:f3: 0c:7e:fa:ba:4a:69:3d:7a:f2:d6:42:7e:8f:4c:1b: 05:2d:2e:5b:4f:ad:6c:3b:6a:f8:f8:c2:77:eb:c0: 46:99:24:8b:3f:ad:b1:46:20:1a:73:d1:3b:bc:56: 32:89:de:a2:88:95:a0:57:68:d0:c5:3f:05:d8:e7: 71:ce:3c:66:44:fc:ff:56:a5:d8:8f:08:ce:d8:fc: 22:b8:68:20:ac:66:84:b5:ec:ac:c4:d8:10:02:7b: 4f:dc:cb:ef:7f:b8:69:75:a1:fa:ca:fc:df:79:7c: 30:c7:08:0c:e8:07:38:5a:9c:e6:0a:fa:7c:07:d2: e6:50:23:82:d3:1a:5b:c7:a5:e5:1e:e8:fe:90:06: 05:4b:3e:c0:ce:5d:ae:ad:9b:1e:01:0f:1a:1e:2d: 9b:ab:dc:06:de:d0:03:97:20:d2:b0:e0:09:53:46: 69:a4:eb:83:f9:85:73:03:3f:aa:17:00:6a:c1:50: 39:26:e1:eb:95:bf:ca:6d:8c:ad:da:5d:81:15:84: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7A:8A:ED:F5:2F:04:59:C0:87:3C:A8:2D:6B:D4:57:89:81:86:EB X509v3 Authority Key Identifier: keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fd:17:c0:11:de:6e:7e:ac:00:76:3c:3d:a8:70:09:27:2d: 8f:0e:5c:de:92:89:9c:c9:bb:ee:81:d6:56:10:75:db:69:50: d5:23:25:7f:89:3b:f5:8e:b6:60:64:13:b6:13:4f:7b:f9:f5: 91:e8:93:82:1a:ec:d9:07:25:91:d7:7d:b2:35:b5:81:ef:67: f9:fc:4e:d1:b1:70:0f:2d:c4:53:20:b9:9a:ce:55:44:77:54: cc:d2:dd:37:c9:35:30:f4:26:87:fd:d5:b8:d6:8a:cf:84:63: 35:41:de:6d:30:f1:20:45:c1:83:14:97:0a:c6:43:52:e2:2b: 8c:89:e9:b5:88:8d:20:cd:c1:e3:4e:81:73:06:1c:c7:51:16: 39:0b:81:51:ca:52:00:80:84:56:fa:b4:16:6c:97:e3:4f:c3: b8:4f:14:fc:cf:7a:7a:40:92:91:b2:c9:15:c3:dd:41:32:d4: 06:6d:5d:91:3d:0c:b2:f7:bf:44:52:86:ca:a1:5c:bf:46:63: c0:75:ad:1f:9d:58:46:9e:2c:11:42:01:94:ec:1d:84:43:5f: 27:a9:46:82:96:5d:7a:ce:10:07:08:e2:b9:c0:fc:e0:d9:1d: f9:cd:bf:2e:f6:38:97:57:e2:df:98:83:d5:f4:d7:d0:22:5f: fd:3c:7f:81 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUHB+NSF/3UmPMzIDycZzFh+JRwfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQwNTgxY2E5ZGRhY2E5ZTExMDE2NWIxMWRkMjgyMGRk N2Y1MzJjMDAeFw0yNTEyMjAxOTIzNDVaFw0yNTEyMjEyMDEzNDVaMDMxMTAvBgNV BAMTKDgyN0E4QUVERjUyRjA0NTlDMDg3M0NBODJENkJENDU3ODk4MTg2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkS1nVo6+jm0WJahTxsHNCTJss 0hxdWD8BeccEpYeJbTZvc/1NWb/HvIyWo9qjCjz0a5eYAg0T1y6J8wx++rpKaT16 8tZCfo9MGwUtLltPrWw7avj4wnfrwEaZJIs/rbFGIBpz0Tu8VjKJ3qKIlaBXaNDF PwXY53HOPGZE/P9WpdiPCM7Y/CK4aCCsZoS17KzE2BACe0/cy+9/uGl1ofrK/N95 fDDHCAzoBzhanOYK+nwH0uZQI4LTGlvHpeUe6P6QBgVLPsDOXa6tmx4BDxoeLZur 3Abe0AOXINKw4AlTRmmk64P5hXMDP6oXAGrBUDkm4euVv8ptjK3aXYEVhHoBAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUgnqK7fUvBFnAhzyoLWvUV4mBhuswHwYDVR0j BBgwFoAU1AWByp3ayp4RAWWxHdKCDdf1MsAwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzEvRDQwNTgxQ0E5RERBQ0E5RTExMDE2NUIxMUREMjgy MEREN0Y1MzJDMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFBV0J5cDNheXA0 UkFXV3hIZEtDRGRmMU1zQS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4 MDAwMC8xL0Q0MDU4MUNBOUREQUNBOUUxMTAxNjVCMTFERDI4MjBERDdGNTMyQzAu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAg/RfAEd5ufqwAdjw9qHAJJy2PDlzekomcybvugdZWEHXbaVDV IyV/iTv1jrZgZBO2E097+fWR6JOCGuzZByWR132yNbWB72f5/E7RsXAPLcRTILma zlVEd1TM0t03yTUw9CaH/dW41orPhGM1Qd5tMPEgRcGDFJcKxkNS4iuMiem1iI0g zcHjToFzBhzHURY5C4FRylIAgIRW+rQWbJfjT8O4TxT8z3p6QJKRsskVw91BMtQG bV2RPQyy979EUobKoVy/RmPAda0fnVhGniwRQgGU7B2EQ18nqUaCll16zhAHCOK5 wPzg2R35zb8u9jiXV+LfmIPV9NfQIl/9PH+B -----END CERTIFICATE-----Generated at Sun Dec 21 00:29:06 2025 by rpki-client