This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json) Hash identifier: UfH70ChyRu1hbwVh9uG6f7jsWoflFYBn/hiYpkjIgHQ= Subject key identifier: 9E:61:A3:E3:2E:77:10:5B:EE:B8:1B:12:C7:6E:4A:AB:FB:BD:6E:49 Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5 Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5 Certificate serial: 73582AB028CED4F08572390CE7925437C9B92688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft Manifest number: 084F Signing time: Sat 20 Dec 2025 20:03:59 +0000 Manifest this update: Sat 20 Dec 2025 19:58:59 +0000 Manifest next update: Sun 21 Dec 2025 20:08:59 +0000 Files and hashes: 1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=) 2: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=) 3: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=) 4: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=) 5: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: SdGLxh9LLg5VYBqzgOqxgaVtp2LFGYkG/a5iVI9l/I4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:58:2a:b0:28:ce:d4:f0:85:72:39:0c:e7:92:54:37:c9:b9:26:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5 Validity Not Before: Dec 20 19:58:59 2025 GMT Not After : Dec 21 20:08:59 2025 GMT Subject: CN=9E61A3E32E77105BEEB81B12C76E4AABFBBD6E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:7e:e9:19:e4:90:ee:d5:66:db:65:9d:23: a3:69:be:d3:97:f7:a0:7d:64:2e:ee:84:fb:5f:7f: f9:9e:0b:a9:21:72:82:e5:ae:ba:f1:18:eb:c3:c4: 48:f2:17:cc:95:cf:48:9a:36:70:c2:b7:9b:41:df: c4:85:c0:e5:a4:0f:b8:5e:8d:fc:89:16:e9:3a:10: 98:2a:49:07:34:d7:99:7c:d8:d9:06:94:b7:85:9b: fe:ad:d6:e3:ca:55:a4:20:68:b0:73:95:de:ef:f7: 3b:9c:8f:c4:e6:dd:43:55:c0:a6:1f:c1:c3:39:33: c6:6b:7f:b2:1b:af:cc:8b:42:11:55:5e:b9:2c:ce: 34:45:77:1b:d8:27:6f:ea:64:1f:31:2d:b6:ee:ae: a5:d6:d6:d8:7b:cc:4e:a9:ae:e8:c3:65:42:ff:15: 37:53:de:22:1a:99:84:3a:93:da:84:36:27:51:64: 94:73:be:2e:3c:77:a3:88:02:76:21:b6:de:66:f4: 9c:66:3e:a5:30:a1:c1:9d:38:6e:0d:53:e4:f4:d7: 03:64:fe:17:5f:e9:81:e4:9e:8a:df:fb:1a:17:09: 92:bf:6e:dd:33:1a:64:00:8a:5b:23:b3:db:b2:2a: 1e:ff:05:46:02:1a:46:a1:0d:2e:75:63:52:02:f0: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:A3:E3:2E:77:10:5B:EE:B8:1B:12:C7:6E:4A:AB:FB:BD:6E:49 X509v3 Authority Key Identifier: keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9d:df:3a:06:24:5d:15:b9:78:94:5f:d3:b3:90:a1:06:98: 9d:b9:18:5c:af:c4:29:8c:d2:06:2f:31:1a:cf:b1:f9:1e:8c: eb:7e:30:7e:4b:ee:46:60:90:31:3c:07:74:62:8c:3d:c1:18: 86:dc:b7:d9:a3:c5:40:d7:50:da:c9:33:20:19:97:8b:45:79: 83:17:ed:f0:2f:6a:46:aa:97:b5:ea:08:af:0d:40:ad:d2:44: 44:3f:a0:4d:30:35:60:8e:fe:6b:1d:cb:3b:25:8b:44:69:86: 31:b8:cb:89:45:3d:db:f2:ef:2b:65:79:30:d9:88:5c:6f:25: e4:3c:0f:12:a9:bc:ce:52:2c:ff:c9:7d:b2:44:4e:94:ba:e0: 75:58:2d:8f:76:e7:a1:35:c0:4c:66:bb:58:a7:e7:ea:08:e3: a7:6c:ab:d4:c4:e2:5a:47:c3:8a:a6:0a:f7:ed:f0:4d:08:51: 2e:3f:e7:16:04:2e:41:6d:44:ec:53:5b:e9:ee:40:cc:fd:d6: 01:ec:f1:18:98:72:31:f6:5f:67:ab:1f:fe:a5:b3:95:86:61: a9:81:89:17:e1:07:e4:00:9e:b4:cc:60:4f:10:76:69:ac:a0: b3:48:c4:80:54:62:93:59:a1:89:31:b3:63:2e:80:41:e3:68: 2e:0e:b3:fb -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUc1gqsCjO1PCFcjkM55JUN8m5JogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExYTA0ODg5MDk2OWZhN2Q0YjZhZWY4YzAyMGNkYTQ0 NDRlYzJlNTAeFw0yNTEyMjAxOTU4NTlaFw0yNTEyMjEyMDA4NTlaMDMxMTAvBgNV BAMTKDlFNjFBM0UzMkU3NzEwNUJFRUI4MUIxMkM3NkU0QUFCRkJCRDZFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3E37pGeSQ7tVm22WdI6NpvtOX 96B9ZC7uhPtff/meC6khcoLlrrrxGOvDxEjyF8yVz0iaNnDCt5tB38SFwOWkD7he jfyJFuk6EJgqSQc015l82NkGlLeFm/6t1uPKVaQgaLBzld7v9zucj8Tm3UNVwKYf wcM5M8Zrf7Ibr8yLQhFVXrkszjRFdxvYJ2/qZB8xLbburqXW1th7zE6prujDZUL/ FTdT3iIamYQ6k9qENidRZJRzvi48d6OIAnYhtt5m9JxmPqUwocGdOG4NU+T01wNk /hdf6YHknorf+xoXCZK/bt0zGmQAilsjs9uyKh7/BUYCGkahDS51Y1IC8FCRAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUnmGj4y53EFvuuBsSx25Kq/u9bkkwHwYDVR0j BBgwFoAUIRoEiJCWn6fUtq74wCDNpEROwuUwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzIvMjExQTA0ODg5MDk2OUZBN0Q0QjZBRUY4QzAyMENE QTQ0NDRFQzJFNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lSb0VpSkNXbjZm VXRxNzR3Q0ROcEVST3d1VS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4 MDAwMC8yLzIxMUEwNDg4OTA5NjlGQTdENEI2QUVGOEMwMjBDREE0NDQ0RUMyRTUu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXnd86BiRdFbl4lF/Ts5ChBpiduRhcr8QpjNIGLzEaz7H5Hozr fjB+S+5GYJAxPAd0Yow9wRiG3LfZo8VA11DayTMgGZeLRXmDF+3wL2pGqpe16giv DUCt0kREP6BNMDVgjv5rHcs7JYtEaYYxuMuJRT3b8u8rZXkw2YhcbyXkPA8SqbzO Uiz/yX2yRE6UuuB1WC2PduehNcBMZrtYp+fqCOOnbKvUxOJaR8OKpgr37fBNCFEu P+cWBC5BbUTsU1vp7kDM/dYB7PEYmHIx9l9nqx/+pbOVhmGpgYkX4QfkAJ60zGBP EHZprKCzSMSAVGKTWaGJMbNjLoBB42guDrP7 -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:52 2025 by rpki-client