This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json) Hash identifier: 4jUwNI5aD208G9tbtUyHMqVOspocmhHZ7zqTOsQ/Jsw= Subject key identifier: A0:58:ED:0B:BC:D9:82:9D:B5:8F:58:A0:5A:FB:27:2C:5A:BE:70:AB Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0 Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0 Certificate serial: 358E948FB26C8EC80D6747F8FBC4F90A0D29F812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft Manifest number: 0844 Signing time: Fri 19 Dec 2025 06:59:16 +0000 Manifest this update: Fri 19 Dec 2025 06:54:16 +0000 Manifest next update: Sat 20 Dec 2025 07:56:16 +0000 Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=) 2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=) 3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: 7DohVk4QxRfsvD5NyegcdgE9z3r4cvA3kGEKWpdc5ro=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8e:94:8f:b2:6c:8e:c8:0d:67:47:f8:fb:c4:f9:0a:0d:29:f8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0 Validity Not Before: Dec 19 06:54:16 2025 GMT Not After : Dec 20 07:56:16 2025 GMT Subject: CN=A058ED0BBCD9829DB58F58A05AFB272C5ABE70AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:2b:67:41:a4:54:c6:ee:dc:33:1a:78:45: 39:e7:e3:0a:67:6b:eb:ec:f2:cf:9b:bb:ae:5f:4c: f8:06:c6:48:08:67:c3:e3:1e:fd:d7:1a:ea:9f:f8: a2:b6:19:e0:64:93:0f:d2:22:94:95:d2:df:ce:42: 2a:b2:8d:c3:f8:7d:c3:2b:de:89:24:45:d7:3b:46: 0f:a2:eb:15:60:51:74:54:10:41:1d:6b:34:ad:7a: 61:e4:b0:4f:76:38:b8:fe:51:86:97:7b:73:c8:af: be:d5:5c:62:74:36:e1:07:b0:79:06:7e:6e:74:26: 2e:e4:dc:8a:3b:d2:17:db:74:d1:94:4a:13:36:f6: 00:ca:6d:c6:9f:1f:e9:11:8e:58:b6:72:3f:1a:97: 38:22:4f:bf:21:7a:d6:27:67:46:e0:1e:a8:1e:14: 68:d1:76:3c:24:cd:e2:9e:02:49:bf:b8:dd:c0:6b: ea:4f:0d:95:ec:f1:71:7c:a0:b3:55:52:b0:76:b4: 90:18:1f:d1:f6:ec:a9:63:bf:35:5a:0c:11:e6:6a: 87:d0:19:cb:05:17:a3:7f:ce:13:18:d0:02:ca:fd: 10:2d:e0:05:4c:14:de:31:b8:36:46:67:d9:0a:de: e5:24:b9:f4:b5:12:07:8a:f3:de:62:1c:7b:f5:10: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:58:ED:0B:BC:D9:82:9D:B5:8F:58:A0:5A:FB:27:2C:5A:BE:70:AB X509v3 Authority Key Identifier: keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ca:cd:75:dd:ae:8c:4e:3c:39:1a:89:3b:1b:ca:04:e0:99: 69:a2:3d:d9:15:ad:49:f8:a1:ee:b5:f2:9d:25:47:77:1f:16: 1b:51:29:ca:d5:b4:93:0b:97:69:c8:ea:66:29:ce:c6:ae:6d: 71:d5:4e:ae:1b:9e:d3:c7:01:1f:fa:63:8a:24:a7:d0:e1:b0: 53:ff:33:fd:f9:78:36:67:e1:11:30:8e:c2:bc:98:7b:a7:8f: 05:42:5d:62:46:70:eb:5f:03:8d:03:59:c8:82:33:c1:2c:87: c9:cf:f5:c8:d5:6f:5a:d7:70:04:8c:23:80:b0:d0:48:71:4f: f7:8d:54:2a:b3:b1:5c:2f:e1:fb:4c:0d:0d:43:8d:76:84:f4: fc:73:ef:f0:dc:6f:07:77:53:16:e1:0b:bc:7b:50:80:ee:d5: 50:3e:83:a4:08:2d:f9:95:88:ae:5a:8e:0e:42:48:a9:d8:ff: 52:40:4d:dc:5a:18:7e:d2:cc:24:59:4e:18:13:0c:4f:4f:31: 22:33:ea:cb:aa:6c:04:e1:c5:d5:15:20:f3:1b:06:b5:24:7f: 77:ec:72:5b:f9:0b:44:7d:61:6f:5d:20:a9:ff:ef:a0:ab:09: a5:08:92:bf:ef:45:90:3d:25:94:18:53:75:79:2f:c0:b3:ad: 9b:eb:1c:94 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUNY6Uj7JsjsgNZ0f4+8T5Cg0p+BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQwNTgxY2E5ZGRhY2E5ZTExMDE2NWIxMWRkMjgyMGRk N2Y1MzJjMDAeFw0yNTEyMTkwNjU0MTZaFw0yNTEyMjAwNzU2MTZaMDMxMTAvBgNV BAMTKEEwNThFRDBCQkNEOTgyOURCNThGNThBMDVBRkIyNzJDNUFCRTcwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6CtnQaRUxu7cMxp4RTnn4wpn a+vs8s+bu65fTPgGxkgIZ8PjHv3XGuqf+KK2GeBkkw/SIpSV0t/OQiqyjcP4fcMr 3okkRdc7Rg+i6xVgUXRUEEEdazStemHksE92OLj+UYaXe3PIr77VXGJ0NuEHsHkG fm50Ji7k3Io70hfbdNGUShM29gDKbcafH+kRjli2cj8alzgiT78hetYnZ0bgHqge FGjRdjwkzeKeAkm/uN3Aa+pPDZXs8XF8oLNVUrB2tJAYH9H27KljvzVaDBHmaofQ GcsFF6N/zhMY0ALK/RAt4AVMFN4xuDZGZ9kK3uUkufS1EgeK895iHHv1EI7JAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUoFjtC7zZgp21j1igWvsnLFq+cKswHwYDVR0j BBgwFoAU1AWByp3ayp4RAWWxHdKCDdf1MsAwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzEvRDQwNTgxQ0E5RERBQ0E5RTExMDE2NUIxMUREMjgy MEREN0Y1MzJDMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFBV0J5cDNheXA0 UkFXV3hIZEtDRGRmMU1zQS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4 MDAwMC8xL0Q0MDU4MUNBOUREQUNBOUUxMTAxNjVCMTFERDI4MjBERDdGNTMyQzAu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCmys113a6MTjw5Gok7G8oE4Jlpoj3ZFa1J+KHutfKdJUd3HxYb USnK1bSTC5dpyOpmKc7Grm1x1U6uG57TxwEf+mOKJKfQ4bBT/zP9+Xg2Z+ERMI7C vJh7p48FQl1iRnDrXwONA1nIgjPBLIfJz/XI1W9a13AEjCOAsNBIcU/3jVQqs7Fc L+H7TA0NQ412hPT8c+/w3G8Hd1MW4Qu8e1CA7tVQPoOkCC35lYiuWo4OQkip2P9S QE3cWhh+0swkWU4YEwxPTzEiM+rLqmwE4cXVFSDzGwa1JH937HJb+QtEfWFvXSCp /++gqwmlCJK/70WQPSWUGFN1eS/As62b6xyU -----END CERTIFICATE-----Generated at Fri Dec 19 17:33:40 2025 by rpki-client