This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json) Hash identifier: ChN+3h0um6XCj4uBN0ONhpOKwgYEJIYk2Y9qPefV7UU= Subject key identifier: 16:BA:10:DE:4F:CE:3C:FF:21:FF:08:45:09:39:8D:39:9A:C7:46:99 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 51FC2E5BC33D9C7D257BBD2BF9849E77F1CAAF5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft Manifest number: 08 Signing time: Sat 24 Jan 2026 19:05:57 +0000 Manifest this update: Sat 24 Jan 2026 19:00:57 +0000 Manifest next update: Sun 25 Jan 2026 22:13:57 +0000 Files and hashes: 1: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=) 2: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=) 3: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=) 4: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=) 5: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: 2KXwaPIK45DCJi73dnynd3AQkttWcMdtExtiSEXgC+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fc:2e:5b:c3:3d:9c:7d:25:7b:bd:2b:f9:84:9e:77:f1:ca:af:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jan 24 19:00:57 2026 GMT Not After : Jan 25 22:13:57 2026 GMT Subject: CN=16BA10DE4FCE3CFF21FF084509398D399AC74699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:73:2f:f5:a8:f8:bc:0a:53:39:9c:98:97: e2:56:e7:53:c1:27:8b:be:5b:0e:6c:2c:c7:28:53: 5f:18:85:7b:43:53:f2:73:01:92:75:e5:72:ef:b1: 41:0c:29:b2:9f:bb:0c:31:78:b5:06:b1:bc:03:6e: 5b:27:5f:eb:9a:24:75:8f:23:a5:0f:1c:76:fc:c2: 41:5a:27:fe:4d:c6:41:56:04:e8:a0:bd:4e:3e:ed: a9:4c:14:36:0c:7d:31:86:84:53:d8:16:cd:a9:f0: ff:8b:ad:a9:8b:b3:c0:0e:3e:a0:12:3f:56:84:3d: 3f:37:55:22:c4:7f:79:4c:73:95:15:9d:29:16:97: 42:2d:c2:d2:38:13:de:b8:8f:b2:e1:94:16:f3:08: 03:5c:63:bf:b2:1d:81:b8:19:1c:5f:d9:f5:74:2c: 62:2c:68:15:78:94:5f:cd:9c:6b:f6:0d:8b:57:b8: 7b:6c:f2:3a:d0:62:bc:55:67:4d:ec:1d:bc:ef:f7: f9:9e:48:94:10:0b:21:a0:b8:f2:f8:1d:53:36:69: 21:03:00:e3:f2:c8:23:a9:25:77:f7:26:2a:27:92: 07:65:2e:1d:b3:ee:2b:c9:78:5f:35:27:78:ce:53: 15:b6:b5:79:23:8b:bb:2f:2c:37:7a:88:0a:f6:3b: 5c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:10:DE:4F:CE:3C:FF:21:FF:08:45:09:39:8D:39:9A:C7:46:99 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:7e:e1:48:bd:90:80:20:cb:df:dd:ca:e9:c1:92:50:a7: a6:63:43:62:f6:76:60:93:06:1d:38:1e:2d:53:64:94:53:d2: b9:6c:5d:e1:8c:8b:72:fb:85:03:a8:80:3d:a8:37:aa:3d:ad: 98:3e:6f:1a:7c:ef:fc:65:44:32:54:e0:b8:79:dd:83:18:63: ac:6e:8a:59:20:28:32:d6:86:4e:b9:9c:57:21:7f:3a:9b:26: 6c:fd:fc:fa:a3:02:69:27:e0:f5:c2:89:df:01:97:53:a4:cd: 50:b7:20:2a:6a:fa:ae:51:71:4f:a4:88:b2:c2:ea:8b:cf:03: 00:0a:55:65:6c:84:60:03:17:4e:a0:69:6b:57:94:35:3f:d1: 20:20:f3:84:8a:0f:81:d7:be:8c:a8:f5:ed:5f:9e:a3:64:64: e4:fa:5d:ff:74:9e:a3:79:bc:37:c2:78:b0:90:6f:ad:37:b7: a4:89:ed:e8:d3:06:72:8e:7a:ac:31:9e:cf:ec:9a:86:35:58: f4:ae:96:0d:d6:9f:fd:59:b3:b2:c5:36:e8:cd:20:aa:90:83: fc:f8:98:b7:f4:aa:1d:e3:f2:bf:ab:fb:70:1a:89:60:7d:3a: b6:36:06:d3:bd:d4:7e:94:bb:6e:97:19:f5:5f:09:67:1b:32: 2f:5f:a1:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUfwuW8M9nH0le70r+YSed/HKr10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjAxMjQxOTAwNTdaFw0yNjAxMjUyMjEzNTdaMDMxMTAvBgNV BAMTKDE2QkExMERFNEZDRTNDRkYyMUZGMDg0NTA5Mzk4RDM5OUFDNzQ2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtnMv9aj4vApTOZyYl+JW51PB J4u+Ww5sLMcoU18YhXtDU/JzAZJ15XLvsUEMKbKfuwwxeLUGsbwDblsnX+uaJHWP I6UPHHb8wkFaJ/5NxkFWBOigvU4+7alMFDYMfTGGhFPYFs2p8P+LramLs8AOPqAS P1aEPT83VSLEf3lMc5UVnSkWl0ItwtI4E964j7LhlBbzCANcY7+yHYG4GRxf2fV0 LGIsaBV4lF/NnGv2DYtXuHts8jrQYrxVZ03sHbzv9/meSJQQCyGguPL4HVM2aSED AOPyyCOpJXf3JionkgdlLh2z7ivJeF81J3jOUxW2tXkji7svLDd6iAr2O1x1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFroQ3k/OPP8h/whFCTmNOZrHRpkwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC9EREJBNjE2Rjk2RDlD MkNEN0Y3Q0FCNjkyRjlFRkU3NjY2NjgwMTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRB+4Ui9kIAg y9/dyunBklCnpmNDYvZ2YJMGHTgeLVNklFPSuWxd4YyLcvuFA6iAPag3qj2tmD5v Gnzv/GVEMlTguHndgxhjrG6KWSAoMtaGTrmcVyF/OpsmbP38+qMCaSfg9cKJ3wGX U6TNULcgKmr6rlFxT6SIssLqi88DAApVZWyEYAMXTqBpa1eUNT/RICDzhIoPgde+ jKj17V+eo2Rk5Ppd/3Seo3m8N8J4sJBvrTe3pInt6NMGco56rDGez+yahjVY9K6W Ddaf/VmzssU26M0gqpCD/PiYt/SqHePyv6v7cBqJYH06tjYG073UfpS7bpcZ9V8J ZxsyL1+hbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:57 2026 by rpki-client