This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft File: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json) Hash identifier: p/jeAiFQaDGONf7qE+6p4tPJuxqfpr1QrghNY1NX/YM= Subject key identifier: 59:10:73:EE:B3:73:D3:4F:56:FA:2E:91:62:09:4B:AC:10:29:41:67 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 043218F81742674FF47EDCD3D4DF22441959354F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft Manifest number: 67 Signing time: Mon 22 Dec 2025 00:19:07 +0000 Manifest this update: Mon 22 Dec 2025 00:14:07 +0000 Manifest next update: Tue 23 Dec 2025 03:07:07 +0000 Files and hashes: 1: AS142097.roa (hash: CttJ1k3N8sR3Dd2LtZJAh2Z5US+Dw4R4+lVIeqfQc90=) 2: AS142653.roa (hash: IA2hcLazVAsUGRzcoRuIR/0BUhNKedfIKh8DZhoRK4Q=) 3: AS142080.roa (hash: v5In7K6SqEuekiibe0iJFlf3fqdvm5d4V3F2qi2KOCI=) 4: AS142074.roa (hash: P+Ie8ADd3M7wffrIgaQUdX/ePqvVxUmA70O4sWa1CRc=) 5: AS142106.roa (hash: dZuvwVOTduA95d+VOUPJLcnWq9OT6R19M2H06vijCNk=) 6: AS4538.roa (hash: QEiD3+vlFtoqrLXnm5GHHDijROuqjim7an3cHXGdUQ0=) 7: AS142092.roa (hash: Ie1qBeAwqGJlznWgsyo0qF6StSZBjUSxeM+B9zHj66s=) 8: AS142652.roa (hash: KwMiRJlY0Gy4bPFW6pW1ZKRMO9cegOkbW6UflnkaQ3w=) 9: AS144704.roa (hash: c0kUBh+XoJLB59lEh5BCj3D45kXeOVOdMrinZSA+wCA=) 10: AS142085.roa (hash: XCnWS2wXAf910VPK/bAn8idLGeWu1E/VROSXpuE6Vv4=) 11: AS142087.roa (hash: mAX0uZnCtRNIrYOuaJhJFQ0JROYkFN6NEdqkMYvjo0A=) 12: AS142070.roa (hash: 5a+pCiKpDh8ax9eizUsm20lVe6D4E8Vx1eQDVEphLUU=) 13: AS142076.roa (hash: lUVjv1CLgZ0IKMDpLBYMygHjuGIu4Z7+zHhDhLh7nTU=) 14: AS142101.roa (hash: JS6AW3Ao4db2IgLaBbLAMpUMlbEFdjV0OeQ8pLDhwAM=) 15: AS142102.roa (hash: jHrYZZllywxVkTTQEkA6v5sLoToYLkppiSKJZ67YJo4=) 16: AS142075.roa (hash: A8X2PZobQJaxhvCxSl1998qOJdyyD4bi/ZbR3nx3U9c=) 17: AS142104.roa (hash: A3TENiPyG0OgbENBidS9ng2JFFpWplDNNfei6kDEMVM=) 18: AS144698.roa (hash: DqgfrJvbM8SPt7+TLiyRe9e9tMbe85/Zn6IgdrTQHA4=) 19: AS144701.roa (hash: SfVb/8gBuifIwngOqdUdiu6Zx3nLmdxYkNJz1QnUckU=) 20: AS142084.roa (hash: YRjIUVHL73qhDSnDGUBl+3UvLW1cCvLdPKuWvpxpPxE=) 21: AS142077.roa (hash: q2cBBqrT0ypdL9xnehm/0ZOHYgqhq+KlqNAFz428ciA=) 22: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: IJTwB/ltX0cuwQYpIqb1Mk1RLVA5dwtXW9bX8M98YOY=) 23: AS142073.roa (hash: 55at9T+6ApS0qm2W7smThKin95JfZDgN6lrk3D3G7Ac=) 24: AS144707.roa (hash: uFSZiCjPYIperRiciG4GdG7I7v6TptZChWuNwOf0P/M=) 25: AS142089.roa (hash: dav8AhI0gpftoeHt6AucNLV5gi4NmbP8wSbn0WX2Yho=) 26: AS144702.roa (hash: DqjoTn4Ef+5D+eyQsNAGon1lm/V7fFpK+PphFr3Tli8=) 27: AS142105.roa (hash: OxPxe1U92F3OiLnWE66mp9Hz7guQe2xbKU6kygo0jrc=) 28: AS142090.roa (hash: QChPgfi/9GlWAgWK5X9o4ImB3yQoVuIW8o424yUpZz8=) 29: AS142103.roa (hash: VurxIuY/IXP4mZGOxqid98RzaRDmr+ENF/RWwXyMpBM=) 30: AS142656.roa (hash: F7+LpQ+8EDIzGC+Ip67XQ4kqDZ1TPtsvfe38bpRU5TE=) 31: AS142655.roa (hash: 5HI5HN0Ta4MzP71lzZVfSZiiLfnwf6INMGZZD9bRjMo=) 32: AS142091.roa (hash: we5yLvx0htdRz3DybB/B5DgkHuaP2HjjEPfafzHzyRQ=) 33: AS142071.roa (hash: /PBiK1EKSFaEx9PiPEi7cG9iFdkrG4wWwiIYaTaPe/Q=) 34: AS142099.roa (hash: dQA3xKwqrEVGDDh5aeQjFekJnGMK0PvmABhUhzM93aY=) 35: AS142093.roa (hash: yAbQsBeBxfrAfteTeOYdw4vytYF2rHiUZrXFXHgVLW0=) 36: AS142067.roa (hash: OvJhVxaczg3RTgQhEhrrYmJHTypdCN2hQmMh33oRHc8=) 37: AS144705.roa (hash: lQkIq1HnYDxNmHvtMUXSCf62CXSxnNtueaw7J4NgkgA=) 38: AS142095.roa (hash: B43ZQ5tJt5JlWOmdP+tWCEc228boQy4Ti8Vk1SAv5dk=) 39: AS142094.roa (hash: QAXE8QWY7OO9aPUSO4tiFuZSWqR/5BjceO4BxYO4fYE=) 40: AS142658.roa (hash: mF67sMq8ghiW9nN0WkCIpznerVG5XCifv4T2q7XRF3M=) 41: AS142096.roa (hash: dO/91vTru25VTaU9/Hk7Q7cbME2r2QW/WvhjnQV7Pao=) 42: AS144703.roa (hash: yFOMKFa834IlK+XBRBQ1Lkec4h9R1qklKWkFyO0Ds0w=) 43: AS142654.roa (hash: VCGIzWzviQz/huEAXYkMJpcaubl+uQnPSs/uvefuNCQ=) 44: AS142081.roa (hash: bj/HGJFZjeiYYjXxNWFq2rDp5UDtB9+yOfN8Xu1vwS4=) 45: AS142100.roa (hash: XjJhqx5ZaQ1zO1Bnz/2VaiS6vnfU4DnHDQghejXq+tc=) 46: AS142088.roa (hash: nbVTrx39cgLpjisgUcs8F7Pc5xHSECrJwcopWYtOPTY=) 47: AS142078.roa (hash: DY7Q7OdTCEAXvuowe01raZwd0xCR+yjuWx3jBD+80Fg=) 48: AS142086.roa (hash: xdc1OMFXaLS+/kOMflfbwaXQWZ4OojOpmKapBHkqZg4=) 49: AS142079.roa (hash: 9wMXZteNTWSqHXkGWJo81Vq48SIFI857rOmGgCXFtNs=) 50: AS23910.roa (hash: hzM8ZziYPZVPcfmiNkcGIgggbg7Udk1ugb23rFI7FOE=) 51: AS144700.roa (hash: wY4tww1zI5OxNa3FQ4U3Aa5MLXlFGZuVfWLuc1DWAv8=) 52: AS142068.roa (hash: X0dHbUdVYNHEjcBzVc/p/Zi7V2Hu610QmvSjKNuUKJk=) 53: AS142657.roa (hash: Et8ZsfJKS1XOP2uoRelcMTlviXQuLoLOd1JgdDUtQc8=) 54: AS142083.roa (hash: OG+1CXEaRZXNPWg98UUf7r8Ljd3sTpi5FzC3k71nKUU=) 55: AS142651.roa (hash: ghNnsjxO2nbUEhGWDHSAQePTnDk/rfII5uqF86Cl/vU=) 56: AS142650.roa (hash: NeCvJkY8fwRnMOMHDDMhcy3IJqDr8gK5jJiBkMMenFE=) 57: AS142659.roa (hash: ajyk6LAB1pJqiyBZGpS86m8nlTfFzcs5mV73Hqs+vRw=) 58: AS144706.roa (hash: 7dWk+Zv/QnRu0ffZvgM8Ra+VJsNRgvVBT5Kh+xkQPd0=) 59: AS142072.roa (hash: d1TxYUGg8kBS/Xt5QEJHcZ6v+yT6j95DtrcbQpSQ0Ss=) 60: AS144699.roa (hash: UswFj0T67R9DruvbCQAxqJLGCZ/SeQCi7PUPIpfVbtY=) 61: AS142082.roa (hash: C8E96LETomd/w9PyhGZ5UPR1P0mYf7YPX/5op7ThcRk=) 62: AS142069.roa (hash: efQ5cSjH3zoY52p6F0u2gK5LOCoLqrQlb0QdDZGUCFo=) 63: AS142098.roa (hash: RaUVBIKeOFKNKXoUzYd7W165tMeMJ8jgilVGeQpSCeE=) Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 03:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:32:18:f8:17:42:67:4f:f4:7e:dc:d3:d4:df:22:44:19:59:35:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Dec 22 00:14:07 2025 GMT Not After : Dec 23 03:07:07 2025 GMT Subject: CN=591073EEB373D34F56FA2E9162094BAC10294167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:d1:98:2f:71:27:1f:df:0b:b2:7a:2b:27: 45:38:7f:a8:4f:93:e0:0f:c6:90:91:25:09:da:ca: 19:2d:f9:ac:65:ba:80:d9:2d:b6:ab:7f:30:af:d8: 22:74:9e:50:15:11:dc:58:ef:fe:ab:75:20:58:6a: b4:00:cf:ad:9a:11:c2:34:21:7f:21:13:8b:72:b6: b7:f1:da:5c:1c:1f:4d:f5:a9:49:4c:e5:dd:7e:08: 2b:7b:4c:76:de:26:26:07:3a:00:61:2d:ac:40:62: 56:54:39:f9:97:ca:dd:81:5b:00:fd:3a:82:e4:da: e6:cf:65:c1:4d:77:6a:61:22:d4:c4:c7:86:b2:47: 7a:db:83:68:3b:4b:29:be:86:7a:f5:a2:bc:5c:48: 0d:5c:5e:e0:9a:81:27:90:61:d2:18:0e:43:fa:01: 4f:ed:87:04:50:8e:03:17:be:9f:63:81:c3:ad:99: be:c3:d0:8e:16:71:57:88:f6:11:0d:0d:23:27:ba: 25:49:3e:cd:ae:13:d1:93:b6:68:88:29:c1:54:2c: 08:88:3b:e2:80:5e:e8:ec:d8:c5:48:b5:4f:8a:20: cf:90:b1:04:cb:85:87:85:a6:ff:21:68:da:43:b2: f9:29:34:61:4e:cf:f4:7a:eb:9a:07:42:9b:45:ae: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:73:EE:B3:73:D3:4F:56:FA:2E:91:62:09:4B:AC:10:29:41:67 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5b:df:90:d1:73:94:f0:ca:64:38:c9:89:05:15:52:6f:b7: e2:61:95:ea:94:39:85:26:50:31:42:92:28:34:df:1a:a7:81: 8f:bb:d3:03:04:18:40:63:0a:d0:91:6c:a4:25:f5:41:e6:7a: 3c:64:6b:3f:1f:76:85:b7:22:60:05:2b:f9:bf:36:4c:ce:b6: 9c:8e:c2:d2:b5:49:e8:33:cb:48:77:48:f7:c0:53:d2:6e:15: 94:00:56:b3:f7:dc:ea:63:61:3f:f2:96:1a:86:95:5f:98:42: 2b:6a:66:2f:15:85:7a:82:61:c7:ea:17:4c:f4:5d:cc:99:d0: 51:02:c8:42:6b:18:57:42:cc:fe:ff:2b:72:b0:e1:d5:16:c0: f7:2b:aa:ef:6d:23:9b:9e:76:b7:57:df:69:c9:46:16:aa:a3: 09:88:99:58:9b:82:a2:d4:0f:e6:2d:d0:75:28:e0:8b:91:44: 99:b3:62:a7:45:82:38:e4:2e:2b:c6:93:03:55:b6:7a:8e:a0: 9a:d1:74:3d:24:05:02:a2:bc:f9:8c:73:64:eb:86:95:2b:cb: 06:37:8b:4c:7d:dd:95:c1:68:91:84:12:f2:a9:10:c6:7f:11: 73:da:09:ed:96:4d:b9:f9:a0:c2:23:f4:5b:bc:7d:37:ca:e2: 65:04:fd:9b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBDIY+BdCZ0/0ftzT1N8iRBlZNU8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTIyMjAwMTQwN1oX DTI1MTIyMzAzMDcwN1owMzExMC8GA1UEAxMoNTkxMDczRUVCMzczRDM0RjU2RkEy RTkxNjIwOTRCQUMxMDI5NDE2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4F0ZgvcScf3wuyeisnRTh/qE+T4A/GkJElCdrKGS35rGW6gNkttqt/MK/Y InSeUBUR3Fjv/qt1IFhqtADPrZoRwjQhfyETi3K2t/HaXBwfTfWpSUzl3X4IK3tM dt4mJgc6AGEtrEBiVlQ5+ZfK3YFbAP06guTa5s9lwU13amEi1MTHhrJHetuDaDtL Kb6GevWivFxIDVxe4JqBJ5Bh0hgOQ/oBT+2HBFCOAxe+n2OBw62ZvsPQjhZxV4j2 EQ0NIye6JUk+za4T0ZO2aIgpwVQsCIg74oBe6OzYxUi1T4ogz5CxBMuFh4Wm/yFo 2kOy+Sk0YU7P9HrrmgdCm0WuJ7MCAwEAAaOCAf0wggH5MB0GA1UdDgQWBBRZEHPu s3PTT1b6LpFiCUusEClBZzAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyMG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgB Af8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlvfkNFzlPDKZDjJiQUVUm+3 4mGV6pQ5hSZQMUKSKDTfGqeBj7vTAwQYQGMK0JFspCX1QeZ6PGRrPx92hbciYAUr +b82TM62nI7C0rVJ6DPLSHdI98BT0m4VlABWs/fc6mNhP/KWGoaVX5hCK2pmLxWF eoJhx+oXTPRdzJnQUQLIQmsYV0LM/v8rcrDh1RbA9yuq720jm552t1ffaclGFqqj CYiZWJuCotQP5i3QdSjgi5FEmbNip0WCOOQuK8aTA1W2eo6gmtF0PSQFAqK8+Yxz ZOuGlSvLBjeLTH3dlcFokYQS8qkQxn8Rc9oJ7ZZNufmgwiP0W7x9N8riZQT9mw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:18:54 2025 by rpki-client