This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json) Hash identifier: eCxO9Wa3uHjX1VH+Pb8CJLZNKzTrqudnSw+1m9T7SnQ= Subject key identifier: 02:23:24:F1:78:6D:5A:6D:D0:79:CB:57:CA:61:8D:8B:39:27:70:09 Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5 Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5 Certificate serial: 1257F1A4800C07AA992D297ABD5A99E6EA2E1E47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft Manifest number: 0856 Signing time: Thu 25 Dec 2025 23:37:41 +0000 Manifest this update: Thu 25 Dec 2025 23:32:41 +0000 Manifest next update: Sat 27 Dec 2025 03:22:41 +0000 Files and hashes: 1: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=) 2: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=) 3: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=) 4: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: 9olRg389jwudLAR1tuu4T8ukuR4iEUOWqlVxQ+fKwho=) 5: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 03:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:57:f1:a4:80:0c:07:aa:99:2d:29:7a:bd:5a:99:e6:ea:2e:1e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5 Validity Not Before: Dec 25 23:32:41 2025 GMT Not After : Dec 27 03:22:41 2025 GMT Subject: CN=022324F1786D5A6DD079CB57CA618D8B39277009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:cd:69:5e:da:fe:80:6f:66:1f:d4:bd:10: f3:66:de:dd:5d:a1:9c:c4:0a:f9:ef:e7:aa:c2:28: f7:88:1a:98:5c:08:3f:59:d6:f1:a6:93:84:c2:26: b0:52:90:4c:8a:7a:4d:57:c0:27:c3:48:d2:a5:4f: d7:b2:b2:cc:90:a1:32:99:ab:60:57:a1:00:48:ef: 79:ce:a1:8e:71:24:a6:b0:c2:3d:2f:4f:0f:e4:de: 9d:19:cd:c2:5a:62:2c:a0:ad:35:f8:09:3e:c6:3c: c2:d8:d4:c4:07:40:9f:87:db:6b:7c:27:99:dc:1c: 21:01:44:95:60:23:4c:b2:f9:bb:d9:d0:fc:f1:1a: da:cb:0b:72:f9:57:4f:4a:b6:2b:3d:b5:e9:47:a6: 51:c0:c4:6e:5e:da:10:5d:1f:7c:39:4a:58:ba:c3: e6:79:30:fd:bc:fe:33:d4:8c:1b:32:50:e8:b5:cd: 68:c2:fc:d9:5a:51:85:43:5e:96:ac:66:c1:f2:61: 0c:41:c5:11:f8:df:af:ad:69:8b:cd:b4:9d:1c:07: 50:3b:78:5a:1a:5e:19:f9:9b:64:d4:e8:ea:62:8e: 82:ee:d1:70:09:a4:4a:38:dd:32:b8:a1:50:c9:20: 5f:56:82:88:99:50:2d:0a:28:18:e6:f7:e9:d9:7c: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:24:F1:78:6D:5A:6D:D0:79:CB:57:CA:61:8D:8B:39:27:70:09 X509v3 Authority Key Identifier: keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b0:ab:7f:d2:10:64:0f:13:31:20:f6:ed:08:4e:9a:21:63: fb:a6:f3:ad:12:82:53:d1:bf:84:40:1c:03:92:9d:63:c9:72: d2:cf:66:03:af:72:e5:3d:86:74:15:4d:ca:16:04:fa:ac:33: 99:a6:d1:b4:cd:5f:11:4a:8a:40:0a:cb:e7:da:91:2c:cf:1f: 4f:93:7c:a5:48:20:68:7c:5f:33:9d:8c:c4:ab:73:ef:ae:4c: 92:ac:e9:9e:50:28:46:ee:38:f9:3a:6a:fc:3d:75:d1:56:fb: 6d:6a:24:e4:df:45:d2:ca:4b:81:0b:ba:53:ad:07:ab:af:e9: db:ea:40:56:fa:d0:0f:98:9d:79:8a:21:90:1a:80:1d:5f:5d: 31:3c:7c:33:39:b8:26:ab:00:6e:0d:28:92:31:72:34:67:7b: 33:b8:fd:b5:a5:7f:28:f4:cd:e1:fa:e1:fc:8e:8a:6a:c7:a8: dc:c2:fa:70:74:f5:0d:5d:69:b1:b1:ae:0f:4c:d8:e9:fb:9c: f3:23:08:93:32:2f:5b:cf:54:ec:7f:09:45:30:68:f4:ff:1b: 9e:de:6d:6b:e1:cf:a8:59:54:be:d1:c0:c8:90:5b:cf:ac:4a: 8c:56:ad:7f:be:5b:82:f4:b8:7f:54:63:4a:bc:9d:cd:70:83: 54:18:8f:18 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUElfxpIAMB6qZLSl6vVqZ5uouHkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExYTA0ODg5MDk2OWZhN2Q0YjZhZWY4YzAyMGNkYTQ0 NDRlYzJlNTAeFw0yNTEyMjUyMzMyNDFaFw0yNTEyMjcwMzIyNDFaMDMxMTAvBgNV BAMTKDAyMjMyNEYxNzg2RDVBNkREMDc5Q0I1N0NBNjE4RDhCMzkyNzcwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDc1pXtr+gG9mH9S9EPNm3t1d oZzECvnv56rCKPeIGphcCD9Z1vGmk4TCJrBSkEyKek1XwCfDSNKlT9eyssyQoTKZ q2BXoQBI73nOoY5xJKawwj0vTw/k3p0ZzcJaYiygrTX4CT7GPMLY1MQHQJ+H22t8 J5ncHCEBRJVgI0yy+bvZ0PzxGtrLC3L5V09Ktis9telHplHAxG5e2hBdH3w5Sli6 w+Z5MP28/jPUjBsyUOi1zWjC/NlaUYVDXpasZsHyYQxBxRH436+taYvNtJ0cB1A7 eFoaXhn5m2TU6OpijoLu0XAJpEo43TK4oVDJIF9WgoiZUC0KKBjm9+nZfCN7AgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUAiMk8XhtWm3QectXymGNizkncAkwHwYDVR0j BBgwFoAUIRoEiJCWn6fUtq74wCDNpEROwuUwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzIvMjExQTA0ODg5MDk2OUZBN0Q0QjZBRUY4QzAyMENE QTQ0NDRFQzJFNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lSb0VpSkNXbjZm VXRxNzR3Q0ROcEVST3d1VS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4 MDAwMC8yLzIxMUEwNDg4OTA5NjlGQTdENEI2QUVGOEMwMjBDREE0NDQ0RUMyRTUu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQC6sKt/0hBkDxMxIPbtCE6aIWP7pvOtEoJT0b+EQBwDkp1jyXLS z2YDr3LlPYZ0FU3KFgT6rDOZptG0zV8RSopACsvn2pEszx9Pk3ylSCBofF8znYzE q3PvrkySrOmeUChG7jj5Omr8PXXRVvttaiTk30XSykuBC7pTrQerr+nb6kBW+tAP mJ15iiGQGoAdX10xPHwzObgmqwBuDSiSMXI0Z3szuP21pX8o9M3h+uH8jopqx6jc wvpwdPUNXWmxsa4PTNjp+5zzIwiTMi9bz1TsfwlFMGj0/xue3m1r4c+oWVS+0cDI kFvPrEqMVq1/vluC9Lh/VGNKvJ3NcINUGI8Y -----END CERTIFICATE-----Generated at Fri Dec 26 14:14:13 2025 by rpki-client