This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
File:                     0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json)
Hash identifier:          l7VYop3e68rxgSUgBv9KvbgrWtiabX3q/ZK8ArZXBBU=
Subject key identifier:   28:75:A4:22:13:69:E1:E1:8F:54:D6:53:68:D0:27:8B:0E:A6:6F:AF
Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E
Certificate issuer:       /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
Certificate serial:       2DB849AD17FD13B83A8D96A5A4D6F75FF107EA02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
Subject info access:      rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
Manifest number:          52
Signing time:             Sat 06 Dec 2025 01:04:07 +0000
Manifest this update:     Sat 06 Dec 2025 00:59:07 +0000
Manifest next update:     Sun 07 Dec 2025 03:19:07 +0000
Files and hashes:         1: AS23910.roa (hash: hzM8ZziYPZVPcfmiNkcGIgggbg7Udk1ugb23rFI7FOE=)
                          2: AS144705.roa (hash: lQkIq1HnYDxNmHvtMUXSCf62CXSxnNtueaw7J4NgkgA=)
                          3: AS142076.roa (hash: lUVjv1CLgZ0IKMDpLBYMygHjuGIu4Z7+zHhDhLh7nTU=)
                          4: AS142654.roa (hash: VCGIzWzviQz/huEAXYkMJpcaubl+uQnPSs/uvefuNCQ=)
                          5: AS142103.roa (hash: VurxIuY/IXP4mZGOxqid98RzaRDmr+ENF/RWwXyMpBM=)
                          6: AS142082.roa (hash: C8E96LETomd/w9PyhGZ5UPR1P0mYf7YPX/5op7ThcRk=)
                          7: AS142095.roa (hash: B43ZQ5tJt5JlWOmdP+tWCEc228boQy4Ti8Vk1SAv5dk=)
                          8: AS142077.roa (hash: q2cBBqrT0ypdL9xnehm/0ZOHYgqhq+KlqNAFz428ciA=)
                          9: AS142087.roa (hash: mAX0uZnCtRNIrYOuaJhJFQ0JROYkFN6NEdqkMYvjo0A=)
                          10: AS142069.roa (hash: efQ5cSjH3zoY52p6F0u2gK5LOCoLqrQlb0QdDZGUCFo=)
                          11: AS142105.roa (hash: OxPxe1U92F3OiLnWE66mp9Hz7guQe2xbKU6kygo0jrc=)
                          12: AS144703.roa (hash: yFOMKFa834IlK+XBRBQ1Lkec4h9R1qklKWkFyO0Ds0w=)
                          13: AS142072.roa (hash: d1TxYUGg8kBS/Xt5QEJHcZ6v+yT6j95DtrcbQpSQ0Ss=)
                          14: AS142101.roa (hash: JS6AW3Ao4db2IgLaBbLAMpUMlbEFdjV0OeQ8pLDhwAM=)
                          15: AS142658.roa (hash: mF67sMq8ghiW9nN0WkCIpznerVG5XCifv4T2q7XRF3M=)
                          16: AS144698.roa (hash: DqgfrJvbM8SPt7+TLiyRe9e9tMbe85/Zn6IgdrTQHA4=)
                          17: AS142652.roa (hash: KwMiRJlY0Gy4bPFW6pW1ZKRMO9cegOkbW6UflnkaQ3w=)
                          18: AS142650.roa (hash: NeCvJkY8fwRnMOMHDDMhcy3IJqDr8gK5jJiBkMMenFE=)
                          19: AS142079.roa (hash: 9wMXZteNTWSqHXkGWJo81Vq48SIFI857rOmGgCXFtNs=)
                          20: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: gXLTm5zVUgwkBkeEmTNfj4unYoInZf1hR8HL/eKaqGg=)
                          21: AS142656.roa (hash: F7+LpQ+8EDIzGC+Ip67XQ4kqDZ1TPtsvfe38bpRU5TE=)
                          22: AS142094.roa (hash: QAXE8QWY7OO9aPUSO4tiFuZSWqR/5BjceO4BxYO4fYE=)
                          23: AS144707.roa (hash: uFSZiCjPYIperRiciG4GdG7I7v6TptZChWuNwOf0P/M=)
                          24: AS142067.roa (hash: OvJhVxaczg3RTgQhEhrrYmJHTypdCN2hQmMh33oRHc8=)
                          25: AS142653.roa (hash: IA2hcLazVAsUGRzcoRuIR/0BUhNKedfIKh8DZhoRK4Q=)
                          26: AS142655.roa (hash: 5HI5HN0Ta4MzP71lzZVfSZiiLfnwf6INMGZZD9bRjMo=)
                          27: AS142073.roa (hash: 55at9T+6ApS0qm2W7smThKin95JfZDgN6lrk3D3G7Ac=)
                          28: AS144701.roa (hash: SfVb/8gBuifIwngOqdUdiu6Zx3nLmdxYkNJz1QnUckU=)
                          29: AS142078.roa (hash: DY7Q7OdTCEAXvuowe01raZwd0xCR+yjuWx3jBD+80Fg=)
                          30: AS142093.roa (hash: yAbQsBeBxfrAfteTeOYdw4vytYF2rHiUZrXFXHgVLW0=)
                          31: AS142098.roa (hash: RaUVBIKeOFKNKXoUzYd7W165tMeMJ8jgilVGeQpSCeE=)
                          32: AS142070.roa (hash: 5a+pCiKpDh8ax9eizUsm20lVe6D4E8Vx1eQDVEphLUU=)
                          33: AS142084.roa (hash: YRjIUVHL73qhDSnDGUBl+3UvLW1cCvLdPKuWvpxpPxE=)
                          34: AS142092.roa (hash: Ie1qBeAwqGJlznWgsyo0qF6StSZBjUSxeM+B9zHj66s=)
                          35: AS142088.roa (hash: nbVTrx39cgLpjisgUcs8F7Pc5xHSECrJwcopWYtOPTY=)
                          36: AS142097.roa (hash: CttJ1k3N8sR3Dd2LtZJAh2Z5US+Dw4R4+lVIeqfQc90=)
                          37: AS142068.roa (hash: X0dHbUdVYNHEjcBzVc/p/Zi7V2Hu610QmvSjKNuUKJk=)
                          38: AS142081.roa (hash: bj/HGJFZjeiYYjXxNWFq2rDp5UDtB9+yOfN8Xu1vwS4=)
                          39: AS142086.roa (hash: xdc1OMFXaLS+/kOMflfbwaXQWZ4OojOpmKapBHkqZg4=)
                          40: AS142104.roa (hash: A3TENiPyG0OgbENBidS9ng2JFFpWplDNNfei6kDEMVM=)
                          41: AS142091.roa (hash: we5yLvx0htdRz3DybB/B5DgkHuaP2HjjEPfafzHzyRQ=)
                          42: AS142090.roa (hash: QChPgfi/9GlWAgWK5X9o4ImB3yQoVuIW8o424yUpZz8=)
                          43: AS142071.roa (hash: /PBiK1EKSFaEx9PiPEi7cG9iFdkrG4wWwiIYaTaPe/Q=)
                          44: AS142074.roa (hash: P+Ie8ADd3M7wffrIgaQUdX/ePqvVxUmA70O4sWa1CRc=)
                          45: AS142080.roa (hash: v5In7K6SqEuekiibe0iJFlf3fqdvm5d4V3F2qi2KOCI=)
                          46: AS142659.roa (hash: ajyk6LAB1pJqiyBZGpS86m8nlTfFzcs5mV73Hqs+vRw=)
                          47: AS142099.roa (hash: dQA3xKwqrEVGDDh5aeQjFekJnGMK0PvmABhUhzM93aY=)
                          48: AS142100.roa (hash: XjJhqx5ZaQ1zO1Bnz/2VaiS6vnfU4DnHDQghejXq+tc=)
                          49: AS144702.roa (hash: DqjoTn4Ef+5D+eyQsNAGon1lm/V7fFpK+PphFr3Tli8=)
                          50: AS142083.roa (hash: OG+1CXEaRZXNPWg98UUf7r8Ljd3sTpi5FzC3k71nKUU=)
                          51: AS142106.roa (hash: dZuvwVOTduA95d+VOUPJLcnWq9OT6R19M2H06vijCNk=)
                          52: AS144699.roa (hash: UswFj0T67R9DruvbCQAxqJLGCZ/SeQCi7PUPIpfVbtY=)
                          53: AS142085.roa (hash: XCnWS2wXAf910VPK/bAn8idLGeWu1E/VROSXpuE6Vv4=)
                          54: AS4538.roa (hash: QEiD3+vlFtoqrLXnm5GHHDijROuqjim7an3cHXGdUQ0=)
                          55: AS142102.roa (hash: jHrYZZllywxVkTTQEkA6v5sLoToYLkppiSKJZ67YJo4=)
                          56: AS144706.roa (hash: 7dWk+Zv/QnRu0ffZvgM8Ra+VJsNRgvVBT5Kh+xkQPd0=)
                          57: AS142075.roa (hash: A8X2PZobQJaxhvCxSl1998qOJdyyD4bi/ZbR3nx3U9c=)
                          58: AS142089.roa (hash: dav8AhI0gpftoeHt6AucNLV5gi4NmbP8wSbn0WX2Yho=)
                          59: AS144704.roa (hash: c0kUBh+XoJLB59lEh5BCj3D45kXeOVOdMrinZSA+wCA=)
                          60: AS142657.roa (hash: Et8ZsfJKS1XOP2uoRelcMTlviXQuLoLOd1JgdDUtQc8=)
                          61: AS142096.roa (hash: dO/91vTru25VTaU9/Hk7Q7cbME2r2QW/WvhjnQV7Pao=)
                          62: AS142651.roa (hash: ghNnsjxO2nbUEhGWDHSAQePTnDk/rfII5uqF86Cl/vU=)
                          63: AS144700.roa (hash: wY4tww1zI5OxNa3FQ4U3Aa5MLXlFGZuVfWLuc1DWAv8=)
Validation:               OK
Signature path:           rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl
                          rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 03:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b8:49:ad:17:fd:13:b8:3a:8d:96:a5:a4:d6:f7:5f:f1:07:ea:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
        Validity
            Not Before: Dec  6 00:59:07 2025 GMT
            Not After : Dec  7 03:19:07 2025 GMT
        Subject: CN=2875A4221369E1E18F54D65368D0278B0EA66FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:e5:ba:46:b0:ba:e1:2e:95:0c:1f:40:70:
                    0b:fb:3c:8a:0b:f9:b1:e9:9c:d7:ed:3c:81:fe:1d:
                    91:25:44:68:ae:b7:7f:61:98:f2:3f:ea:6f:ab:c2:
                    ae:c4:6f:75:3e:04:12:41:ca:4c:d1:e6:3d:73:84:
                    19:04:32:8a:44:4d:16:07:ef:ed:b1:3e:fc:64:d6:
                    02:6f:75:6b:46:5f:25:e6:85:fe:30:62:cb:2b:88:
                    f3:27:f1:3e:00:49:2e:95:ab:90:47:a9:dd:c6:e5:
                    4d:3e:0f:e0:04:f9:f6:0b:41:47:0c:8f:9c:cb:89:
                    ff:ee:e4:d7:d1:8c:14:bc:65:89:24:ff:38:26:50:
                    ea:79:79:93:ae:62:f9:04:7a:94:88:39:69:ab:c6:
                    84:86:29:24:d5:c9:da:b6:9b:2c:46:17:8f:2e:64:
                    aa:cd:3c:de:03:8a:99:44:cc:c5:46:59:32:9a:52:
                    0e:9f:ff:99:89:53:61:b6:e8:9e:74:76:96:89:06:
                    9d:cc:2e:c3:c5:0b:0d:9a:49:2f:50:b5:1c:ef:4c:
                    b8:c4:92:4d:57:ea:d8:a0:75:66:7b:a6:09:c6:7f:
                    b7:af:3f:c9:4d:84:bc:f5:d7:d6:c7:34:d5:8d:80:
                    8c:2b:23:d6:60:65:d9:3c:aa:87:ce:1f:ce:8d:bf:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:75:A4:22:13:69:E1:E1:8F:54:D6:53:68:D0:27:8B:0E:A6:6F:AF
            X509v3 Authority Key Identifier:
                keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:b8:81:89:9a:cf:49:43:1d:00:fd:5d:e3:5b:f5:30:3c:
         24:99:84:6d:e5:f4:58:98:2c:7c:43:0e:62:f9:e6:d6:df:ab:
         d0:06:03:ec:fe:e8:01:8a:b5:80:c4:cf:15:47:b2:e2:00:6f:
         a6:52:be:1b:c4:2d:35:8b:dc:87:cc:59:4a:5b:ed:35:2e:c8:
         5a:0c:04:47:45:57:b1:54:14:b9:58:af:4f:b7:84:66:9f:f4:
         ce:f9:9b:42:d8:ca:08:32:33:06:08:ab:50:46:a3:94:5d:9e:
         f2:3a:24:ec:7c:68:94:79:39:34:e7:bf:e6:a8:e4:9e:a5:f1:
         84:76:1d:9b:7e:3a:6a:d8:57:7b:96:b5:4a:53:82:cb:be:fd:
         5e:ab:7e:a9:55:d8:21:9e:9a:8b:3b:c0:fe:a9:27:4e:4b:fb:
         04:53:f1:22:a1:f8:e0:46:17:25:52:ac:98:37:35:df:95:90:
         2b:a0:5e:be:d4:d7:9d:4c:55:4d:90:a5:62:2a:ad:80:43:f8:
         24:15:74:47:d6:35:e1:86:d9:b7:67:a8:f6:18:04:06:8b:ec:
         2e:41:97:0d:bc:31:29:ce:ac:2c:c4:21:cd:7c:d4:a8:03:80:
         b7:14:fc:eb:ed:55:78:aa:c9:25:8e:90:ed:42:0f:58:c0:40:
         5f:c7:92:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:42:32 2025 by rpki-client