This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json) Hash identifier: ZB90S1nqX8VK+U0fYdzx1rWzbmqrIYXA1gtOMyLohk0= Subject key identifier: 1A:B6:A0:16:56:04:1F:F7:3C:4B:F2:61:F0:B9:D6:13:17:C2:70:8A Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0 Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0 Certificate serial: 712583756A3129440CFD120D6BC107F4B5D1ABAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft Manifest number: 0833 Signing time: Sat 06 Dec 2025 12:27:50 +0000 Manifest this update: Sat 06 Dec 2025 12:22:50 +0000 Manifest next update: Sun 07 Dec 2025 14:50:50 +0000 Files and hashes: 1: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=) 2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=) 3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: +RTzYcKfNjb+xNqyZOkuVHy6KoiyJv3sYiUH98fk6YA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:25:83:75:6a:31:29:44:0c:fd:12:0d:6b:c1:07:f4:b5:d1:ab:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0 Validity Not Before: Dec 6 12:22:50 2025 GMT Not After : Dec 7 14:50:50 2025 GMT Subject: CN=1AB6A01656041FF73C4BF261F0B9D61317C2708A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:82:0e:d8:4b:46:a6:e2:95:6d:75:e6:e5: 1f:b2:02:3a:1e:d5:07:0a:09:97:03:45:99:e9:cf: b3:5e:08:ec:02:ff:54:3e:33:ab:8a:a6:40:0a:0d: 0d:e8:ac:6f:ad:70:f3:91:6c:c0:c0:ba:6e:8c:19: 17:a4:87:96:f9:31:9d:c4:8b:34:cc:11:c4:ec:d3: bd:61:cb:79:1f:7c:70:3f:ba:26:d8:37:64:bc:ca: ef:a6:26:d1:03:3f:99:6d:1e:9e:a9:b4:77:a4:a0: 42:df:ce:cf:d5:a9:3a:5b:e4:f2:60:91:fa:9f:61: 39:07:01:d6:48:e0:b1:24:ac:ae:93:76:0b:f0:b2: c5:14:7d:39:b3:53:83:82:06:63:83:6e:27:db:b4: 80:1a:d6:94:c2:e2:73:d8:8f:d3:49:79:bb:29:c3: 95:59:63:9d:dd:1a:7d:47:af:11:fe:ef:38:be:30: fd:37:61:2c:5a:de:db:40:34:4c:2d:96:f1:6e:65: 90:b0:8a:49:39:21:44:e6:63:c0:f4:67:61:c9:84: 79:19:1d:7d:ee:50:bb:ca:be:52:43:6b:97:4e:de: 3b:07:c1:b9:da:b1:80:e9:b1:2d:41:8d:aa:a5:f0: 19:c9:4f:67:84:d8:08:76:dd:b3:1d:68:4f:a8:f9: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B6:A0:16:56:04:1F:F7:3C:4B:F2:61:F0:B9:D6:13:17:C2:70:8A X509v3 Authority Key Identifier: keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bc:61:8b:fc:ba:fa:96:b1:76:cd:bd:db:ae:5d:2d:43:86: b0:e1:2e:c0:9a:29:05:fb:c9:93:1e:39:a5:a4:de:94:2f:9c: b9:03:78:22:cf:b9:8d:0b:86:f3:4b:db:2e:16:9b:59:bc:c5: 29:50:e0:4f:e5:71:8e:61:ad:1b:26:b7:7d:89:52:d4:86:5e: 20:4e:c4:e4:ca:62:ae:31:0b:a6:31:c7:73:61:cc:0b:88:e6: 73:70:fc:39:a3:7e:55:d7:e4:f3:eb:77:e7:ee:ec:a5:52:29: 43:ad:24:87:c1:a5:13:72:06:70:95:95:fa:4d:ef:9b:26:b3: 2e:78:62:04:f4:08:68:62:81:e6:75:53:15:61:7b:f5:c6:8d: e7:8b:9e:89:b6:cd:d0:64:77:86:2f:20:85:7a:5e:a4:21:04: c9:ed:34:fa:52:84:c7:83:df:1f:6f:b2:ca:5c:40:65:c9:30: 00:c2:96:ea:cc:bf:ec:35:ef:33:f5:1c:13:60:2b:5e:aa:be: 57:b8:a5:a5:3d:4c:e0:aa:fd:47:bb:91:a4:94:ef:17:9f:dd: a7:9e:e4:7d:f3:65:6f:43:89:74:41:e7:37:75:46:54:cd:ba: 67:a8:6d:4b:06:4b:1d:7c:6a:8d:db:3e:14:8c:7a:48:48:d4: 8e:15:87:8d -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUcSWDdWoxKUQM/RINa8EH9LXRq6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQwNTgxY2E5ZGRhY2E5ZTExMDE2NWIxMWRkMjgyMGRk N2Y1MzJjMDAeFw0yNTEyMDYxMjIyNTBaFw0yNTEyMDcxNDUwNTBaMDMxMTAvBgNV BAMTKDFBQjZBMDE2NTYwNDFGRjczQzRCRjI2MUYwQjlENjEzMTdDMjcwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXoIO2EtGpuKVbXXm5R+yAjoe 1QcKCZcDRZnpz7NeCOwC/1Q+M6uKpkAKDQ3orG+tcPORbMDAum6MGRekh5b5MZ3E izTMEcTs071hy3kffHA/uibYN2S8yu+mJtEDP5ltHp6ptHekoELfzs/VqTpb5PJg kfqfYTkHAdZI4LEkrK6TdgvwssUUfTmzU4OCBmODbifbtIAa1pTC4nPYj9NJebsp w5VZY53dGn1HrxH+7zi+MP03YSxa3ttANEwtlvFuZZCwikk5IUTmY8D0Z2HJhHkZ HX3uULvKvlJDa5dO3jsHwbnasYDpsS1Bjaql8BnJT2eE2Ah23bMdaE+o+fYpAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUGragFlYEH/c8S/Jh8LnWExfCcIowHwYDVR0j BBgwFoAU1AWByp3ayp4RAWWxHdKCDdf1MsAwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzEvRDQwNTgxQ0E5RERBQ0E5RTExMDE2NUIxMUREMjgy MEREN0Y1MzJDMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFBV0J5cDNheXA0 UkFXV3hIZEtDRGRmMU1zQS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4 MDAwMC8xL0Q0MDU4MUNBOUREQUNBOUUxMTAxNjVCMTFERDI4MjBERDdGNTMyQzAu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQA8vGGL/Lr6lrF2zb3brl0tQ4aw4S7AmikF+8mTHjmlpN6UL5y5 A3giz7mNC4bzS9suFptZvMUpUOBP5XGOYa0bJrd9iVLUhl4gTsTkymKuMQumMcdz YcwLiOZzcPw5o35V1+Tz63fn7uylUilDrSSHwaUTcgZwlZX6Te+bJrMueGIE9Aho YoHmdVMVYXv1xo3ni56Jts3QZHeGLyCFel6kIQTJ7TT6UoTHg98fb7LKXEBlyTAA wpbqzL/sNe8z9RwTYCteqr5XuKWlPUzgqv1Hu5GklO8Xn92nnuR982VvQ4l0Qec3 dUZUzbpnqG1LBksdfGqN2z4UjHpISNSOFYeN -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:33 2025 by rpki-client