This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
File:                     0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json)
Hash identifier:          9KgwbcpTpcOltYCOzYOAesr9/ikcjYZrWeVsTSGJcV0=
Subject key identifier:   63:03:8C:BE:56:02:94:1C:F7:17:91:7A:A5:1B:2C:FB:18:58:5F:97
Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E
Certificate issuer:       /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
Certificate serial:       15DC164F7C6B56192021B03663EB20ADEBDE32BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
Subject info access:      rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
Manifest number:          6A
Signing time:             Wed 24 Dec 2025 06:59:07 +0000
Manifest this update:     Wed 24 Dec 2025 06:54:07 +0000
Manifest next update:     Thu 25 Dec 2025 07:36:07 +0000
Files and hashes:         1: AS144707.roa (hash: uFSZiCjPYIperRiciG4GdG7I7v6TptZChWuNwOf0P/M=)
                          2: AS142651.roa (hash: ghNnsjxO2nbUEhGWDHSAQePTnDk/rfII5uqF86Cl/vU=)
                          3: AS142090.roa (hash: QChPgfi/9GlWAgWK5X9o4ImB3yQoVuIW8o424yUpZz8=)
                          4: AS144703.roa (hash: yFOMKFa834IlK+XBRBQ1Lkec4h9R1qklKWkFyO0Ds0w=)
                          5: AS142657.roa (hash: Et8ZsfJKS1XOP2uoRelcMTlviXQuLoLOd1JgdDUtQc8=)
                          6: AS142075.roa (hash: A8X2PZobQJaxhvCxSl1998qOJdyyD4bi/ZbR3nx3U9c=)
                          7: AS142079.roa (hash: 9wMXZteNTWSqHXkGWJo81Vq48SIFI857rOmGgCXFtNs=)
                          8: AS142099.roa (hash: dQA3xKwqrEVGDDh5aeQjFekJnGMK0PvmABhUhzM93aY=)
                          9: AS142659.roa (hash: ajyk6LAB1pJqiyBZGpS86m8nlTfFzcs5mV73Hqs+vRw=)
                          10: AS142105.roa (hash: OxPxe1U92F3OiLnWE66mp9Hz7guQe2xbKU6kygo0jrc=)
                          11: AS142654.roa (hash: VCGIzWzviQz/huEAXYkMJpcaubl+uQnPSs/uvefuNCQ=)
                          12: AS144699.roa (hash: UswFj0T67R9DruvbCQAxqJLGCZ/SeQCi7PUPIpfVbtY=)
                          13: AS142081.roa (hash: bj/HGJFZjeiYYjXxNWFq2rDp5UDtB9+yOfN8Xu1vwS4=)
                          14: AS142076.roa (hash: lUVjv1CLgZ0IKMDpLBYMygHjuGIu4Z7+zHhDhLh7nTU=)
                          15: AS142653.roa (hash: IA2hcLazVAsUGRzcoRuIR/0BUhNKedfIKh8DZhoRK4Q=)
                          16: AS144706.roa (hash: 7dWk+Zv/QnRu0ffZvgM8Ra+VJsNRgvVBT5Kh+xkQPd0=)
                          17: AS142095.roa (hash: B43ZQ5tJt5JlWOmdP+tWCEc228boQy4Ti8Vk1SAv5dk=)
                          18: AS142072.roa (hash: d1TxYUGg8kBS/Xt5QEJHcZ6v+yT6j95DtrcbQpSQ0Ss=)
                          19: AS23910.roa (hash: hzM8ZziYPZVPcfmiNkcGIgggbg7Udk1ugb23rFI7FOE=)
                          20: AS142070.roa (hash: 5a+pCiKpDh8ax9eizUsm20lVe6D4E8Vx1eQDVEphLUU=)
                          21: AS142084.roa (hash: YRjIUVHL73qhDSnDGUBl+3UvLW1cCvLdPKuWvpxpPxE=)
                          22: AS142069.roa (hash: efQ5cSjH3zoY52p6F0u2gK5LOCoLqrQlb0QdDZGUCFo=)
                          23: AS144704.roa (hash: c0kUBh+XoJLB59lEh5BCj3D45kXeOVOdMrinZSA+wCA=)
                          24: AS142106.roa (hash: dZuvwVOTduA95d+VOUPJLcnWq9OT6R19M2H06vijCNk=)
                          25: AS142080.roa (hash: v5In7K6SqEuekiibe0iJFlf3fqdvm5d4V3F2qi2KOCI=)
                          26: AS142068.roa (hash: X0dHbUdVYNHEjcBzVc/p/Zi7V2Hu610QmvSjKNuUKJk=)
                          27: AS142089.roa (hash: dav8AhI0gpftoeHt6AucNLV5gi4NmbP8wSbn0WX2Yho=)
                          28: AS142086.roa (hash: xdc1OMFXaLS+/kOMflfbwaXQWZ4OojOpmKapBHkqZg4=)
                          29: AS142077.roa (hash: q2cBBqrT0ypdL9xnehm/0ZOHYgqhq+KlqNAFz428ciA=)
                          30: AS142103.roa (hash: VurxIuY/IXP4mZGOxqid98RzaRDmr+ENF/RWwXyMpBM=)
                          31: AS142094.roa (hash: QAXE8QWY7OO9aPUSO4tiFuZSWqR/5BjceO4BxYO4fYE=)
                          32: AS142092.roa (hash: Ie1qBeAwqGJlznWgsyo0qF6StSZBjUSxeM+B9zHj66s=)
                          33: AS142652.roa (hash: KwMiRJlY0Gy4bPFW6pW1ZKRMO9cegOkbW6UflnkaQ3w=)
                          34: AS142073.roa (hash: 55at9T+6ApS0qm2W7smThKin95JfZDgN6lrk3D3G7Ac=)
                          35: AS142104.roa (hash: A3TENiPyG0OgbENBidS9ng2JFFpWplDNNfei6kDEMVM=)
                          36: AS142087.roa (hash: mAX0uZnCtRNIrYOuaJhJFQ0JROYkFN6NEdqkMYvjo0A=)
                          37: AS142097.roa (hash: CttJ1k3N8sR3Dd2LtZJAh2Z5US+Dw4R4+lVIeqfQc90=)
                          38: AS142093.roa (hash: yAbQsBeBxfrAfteTeOYdw4vytYF2rHiUZrXFXHgVLW0=)
                          39: AS142100.roa (hash: XjJhqx5ZaQ1zO1Bnz/2VaiS6vnfU4DnHDQghejXq+tc=)
                          40: AS142098.roa (hash: RaUVBIKeOFKNKXoUzYd7W165tMeMJ8jgilVGeQpSCeE=)
                          41: AS142078.roa (hash: DY7Q7OdTCEAXvuowe01raZwd0xCR+yjuWx3jBD+80Fg=)
                          42: AS142071.roa (hash: /PBiK1EKSFaEx9PiPEi7cG9iFdkrG4wWwiIYaTaPe/Q=)
                          43: AS142067.roa (hash: OvJhVxaczg3RTgQhEhrrYmJHTypdCN2hQmMh33oRHc8=)
                          44: AS144700.roa (hash: wY4tww1zI5OxNa3FQ4U3Aa5MLXlFGZuVfWLuc1DWAv8=)
                          45: AS142656.roa (hash: F7+LpQ+8EDIzGC+Ip67XQ4kqDZ1TPtsvfe38bpRU5TE=)
                          46: AS142074.roa (hash: P+Ie8ADd3M7wffrIgaQUdX/ePqvVxUmA70O4sWa1CRc=)
                          47: AS142096.roa (hash: dO/91vTru25VTaU9/Hk7Q7cbME2r2QW/WvhjnQV7Pao=)
                          48: AS144702.roa (hash: DqjoTn4Ef+5D+eyQsNAGon1lm/V7fFpK+PphFr3Tli8=)
                          49: AS142091.roa (hash: we5yLvx0htdRz3DybB/B5DgkHuaP2HjjEPfafzHzyRQ=)
                          50: AS142088.roa (hash: nbVTrx39cgLpjisgUcs8F7Pc5xHSECrJwcopWYtOPTY=)
                          51: AS142083.roa (hash: OG+1CXEaRZXNPWg98UUf7r8Ljd3sTpi5FzC3k71nKUU=)
                          52: AS144698.roa (hash: DqgfrJvbM8SPt7+TLiyRe9e9tMbe85/Zn6IgdrTQHA4=)
                          53: AS142102.roa (hash: jHrYZZllywxVkTTQEkA6v5sLoToYLkppiSKJZ67YJo4=)
                          54: AS142101.roa (hash: JS6AW3Ao4db2IgLaBbLAMpUMlbEFdjV0OeQ8pLDhwAM=)
                          55: AS142085.roa (hash: XCnWS2wXAf910VPK/bAn8idLGeWu1E/VROSXpuE6Vv4=)
                          56: AS144701.roa (hash: SfVb/8gBuifIwngOqdUdiu6Zx3nLmdxYkNJz1QnUckU=)
                          57: AS142650.roa (hash: NeCvJkY8fwRnMOMHDDMhcy3IJqDr8gK5jJiBkMMenFE=)
                          58: AS142655.roa (hash: 5HI5HN0Ta4MzP71lzZVfSZiiLfnwf6INMGZZD9bRjMo=)
                          59: AS142658.roa (hash: mF67sMq8ghiW9nN0WkCIpznerVG5XCifv4T2q7XRF3M=)
                          60: AS144705.roa (hash: lQkIq1HnYDxNmHvtMUXSCf62CXSxnNtueaw7J4NgkgA=)
                          61: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: eHuDM3F4HSTbtpE1s1x4cRpRhNIj8TuJnZ5ZuXrteHM=)
                          62: AS142082.roa (hash: C8E96LETomd/w9PyhGZ5UPR1P0mYf7YPX/5op7ThcRk=)
                          63: AS4538.roa (hash: QEiD3+vlFtoqrLXnm5GHHDijROuqjim7an3cHXGdUQ0=)
Validation:               OK
Signature path:           rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl
                          rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 07:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:16:4f:7c:6b:56:19:20:21:b0:36:63:eb:20:ad:eb:de:32:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
        Validity
            Not Before: Dec 24 06:54:07 2025 GMT
            Not After : Dec 25 07:36:07 2025 GMT
        Subject: CN=63038CBE5602941CF717917AA51B2CFB18585F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:21:36:70:ef:34:5a:68:25:e6:40:f7:e2:
                    d6:9e:81:af:1d:26:a3:77:a2:86:46:46:23:a2:83:
                    ba:90:ae:31:46:6f:9b:eb:bd:76:e0:91:c0:54:6b:
                    df:8b:d8:4d:14:99:41:88:7d:5f:39:9b:f0:bf:6a:
                    f1:0d:6f:1d:23:54:94:70:e3:57:01:ac:a1:7d:dc:
                    3d:bc:78:9c:bc:98:11:07:3f:0f:6b:b3:52:32:1b:
                    e0:7e:80:d4:72:41:f7:ed:81:79:9c:b1:10:3c:d6:
                    f0:7f:50:29:ea:72:88:cf:ca:45:25:42:87:36:d6:
                    cc:b6:36:8b:b7:e5:e0:eb:17:d0:16:45:3b:ac:9e:
                    84:83:bc:ab:a8:6e:6f:29:81:33:72:80:67:7a:e6:
                    1f:73:0c:27:4f:10:78:98:f1:b7:2b:17:99:3e:ca:
                    c9:49:b3:0b:97:26:c1:27:91:69:83:83:6a:5e:30:
                    ce:d6:ae:37:b5:30:bf:a1:7b:e0:b6:07:3e:88:d5:
                    42:50:10:a3:09:dd:40:4e:b2:45:3d:14:94:4d:77:
                    aa:80:9b:b0:b1:72:b2:73:5b:f9:a5:13:80:92:67:
                    d5:c6:15:2d:81:c7:fa:db:6b:cf:47:76:19:53:0a:
                    15:b0:d9:c1:34:4b:0b:10:13:c6:fc:08:04:1e:83:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:03:8C:BE:56:02:94:1C:F7:17:91:7A:A5:1B:2C:FB:18:58:5F:97
            X509v3 Authority Key Identifier:
                keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:39:a1:73:67:4f:37:94:e3:3e:28:2c:a7:68:f4:12:94:51:
         41:0a:06:92:da:8d:25:ca:15:b0:38:c1:c7:a8:80:88:03:7d:
         54:bc:af:e3:c8:7b:96:6d:27:47:bb:0a:bb:68:2e:c3:b8:51:
         36:61:0d:34:77:d2:8e:9a:24:89:98:c5:e3:4a:32:52:c4:b6:
         8d:25:09:1b:1b:6c:b7:74:04:02:1e:fc:64:5c:60:64:f6:5f:
         b0:a9:02:04:07:5b:fc:33:13:1a:2b:a9:c2:a4:e8:b9:59:e7:
         07:10:79:53:3c:1e:d7:f5:7d:72:f2:99:64:fd:dc:c8:0d:3f:
         00:69:d7:2b:39:d3:fe:6f:15:e3:c4:e4:a2:24:e0:76:fb:6f:
         a6:f7:38:c2:15:f2:fa:6e:12:fd:84:bb:cb:8e:1c:83:6f:33:
         90:6b:1e:75:47:19:10:66:dd:90:ff:2d:f3:cb:49:17:32:a0:
         cd:37:7f:cf:73:1f:74:76:b2:12:5a:f1:f4:0a:72:88:c9:3e:
         f8:24:5e:30:8a:be:6d:41:f5:f3:c5:3f:b2:85:13:8b:cb:c7:
         16:ce:97:17:97:50:ef:67:6b:a1:00:6b:65:be:fb:94:5d:45:
         11:60:0c:e9:89:01:73:4a:f1:80:59:dc:aa:99:20:e5:38:4a:
         8a:4d:11:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:41:56 2025 by rpki-client