This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File:                     71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier:          MlwqcmgxPZg8T80pTqTt9hHEb9gM+yvxjO2CVLQxLpY=
Subject key identifier:   9B:FA:99:19:C8:BA:EB:3E:77:55:FE:44:26:5B:8D:F5:53:E5:B8:E6
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer:       /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial:       4B43FBE98750110B51502D125FFD09276766BE84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number:          16
Signing time:             Wed 04 Feb 2026 04:51:31 +0000
Manifest this update:     Wed 04 Feb 2026 04:46:31 +0000
Manifest next update:     Thu 05 Feb 2026 08:20:31 +0000
Files and hashes:         1: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
                          2: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
                          3: 3231392e3233342e382e302f32312d3234203d3e20313337343433.roa (hash: InSwuZSRpa1hhSgqMKbUhpIYd9PfQTeJXRw9hEub0mo=)
                          4: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: v4Msq49jtUyuwHkX+wo4q6wMGuTeq6ff9YSNlIcCSOw=)
                          5: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
                          6: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
                          7: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
                          8: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (hash: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg=)
                          9: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
                          10: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
                          11: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (hash: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=)
                          12: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
                          13: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=)
                          14: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
                          15: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
                          16: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
                          17: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:43:fb:e9:87:50:11:0b:51:50:2d:12:5f:fd:09:27:67:66:be:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
        Validity
            Not Before: Feb  4 04:46:31 2026 GMT
            Not After : Feb  5 08:20:31 2026 GMT
        Subject: CN=9BFA9919C8BAEB3E7755FE44265B8DF553E5B8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:77:3b:df:f9:64:8e:58:25:5d:39:2b:5e:
                    6c:84:47:f8:9e:2e:cf:13:99:cf:3e:e4:de:86:94:
                    73:29:a9:cb:da:e3:b0:37:58:e2:5d:f3:bc:7a:0d:
                    b0:1c:b3:1f:6a:19:73:bb:89:a7:27:d4:a3:df:b5:
                    08:41:0a:72:fc:e5:3e:81:0d:51:35:e6:2f:93:a0:
                    f7:e5:da:ad:4b:5e:c9:41:d9:24:45:a3:bc:ab:ea:
                    67:53:34:e6:2e:43:55:44:9c:be:57:a4:c2:fa:8c:
                    db:6c:91:27:a3:a6:dc:23:4c:fb:88:2f:54:7e:fd:
                    c2:dd:24:7e:64:76:80:71:54:ef:35:7d:98:59:6d:
                    19:a2:88:64:58:94:5d:a5:1b:bc:25:9c:a6:3f:3b:
                    13:cd:b4:c7:b5:f9:e2:9f:8a:cc:b6:d2:df:0d:40:
                    8f:08:3b:f7:c3:a6:ca:73:be:ec:5e:a7:f3:17:de:
                    bc:cb:46:55:33:7c:fb:1d:cd:f0:42:c8:4a:aa:79:
                    e1:10:f9:14:41:57:51:e0:a5:12:2e:14:7b:dc:ab:
                    d1:ff:46:6f:71:38:c9:60:6c:ba:c4:8f:44:4c:09:
                    b1:14:10:7e:c9:99:6b:31:2c:05:92:fa:0e:a5:a8:
                    66:70:87:4c:34:c2:31:ee:c8:b6:c0:0f:92:c4:e0:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:99:19:C8:BA:EB:3E:77:55:FE:44:26:5B:8D:F5:53:E5:B8:E6
            X509v3 Authority Key Identifier:
                keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:af:e6:d2:dc:e2:28:2a:6e:4d:37:60:93:20:00:4b:88:5e:
         0e:41:63:62:00:ab:93:b7:47:f6:fa:ab:2e:91:ca:07:6d:3c:
         05:a5:92:fd:62:85:ec:4d:0e:f4:54:58:6b:3e:20:9c:3d:df:
         4c:2f:c1:1d:55:51:d4:f6:5a:c2:1e:bd:90:a4:4a:1d:27:cc:
         aa:13:5a:99:cf:5f:45:79:f5:c4:6c:84:e7:e5:8e:77:c2:08:
         f5:df:a0:ac:73:0d:01:3b:02:88:be:20:b2:c6:cd:23:ed:6e:
         13:79:15:86:ff:7b:bf:c1:29:96:d0:ef:6a:f0:5a:20:48:61:
         78:3a:85:a8:51:14:1f:10:e0:a9:d1:30:53:69:d6:71:80:7e:
         44:27:07:7e:57:f6:5a:9f:f7:2d:a8:6c:ff:99:fa:a8:8e:0f:
         18:d8:3a:25:0b:64:2c:6f:84:8f:d3:5a:f1:bc:b5:4b:06:9e:
         3c:c2:34:db:92:84:e1:e9:6b:1b:cb:70:2f:19:9b:e2:72:16:
         d3:26:39:b6:14:9d:5d:4e:7d:17:5d:7f:db:97:bb:ca:1e:13:
         99:68:08:a0:dc:38:53:6f:04:e2:93:87:df:f5:b8:95:38:35:
         4a:67:81:63:45:7e:6f:66:c7:7d:d1:d7:7e:10:23:e9:46:1e:
         a8:e5:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 21:50:29 2026 by rpki-client