This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
File:                     th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft (raw, json)
Hash identifier:          7z8iVrY1lOistGxHfAi0Vehg427nn3/5/WwzVBBoTSE=
Subject key identifier:   18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
Authority key identifier: B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC
Certificate issuer:       /CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
Certificate serial:       077D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
Manifest number:          077C
Signing time:             Sun 25 Jan 2026 16:59:29 +0000
Manifest this update:     Sun 25 Jan 2026 16:59:29 +0000
Manifest next update:     Sun 25 Jan 2026 22:59:29 +0000
Files and hashes:         1: JgjWkLdCFleawVTGhEhJNpE74sI.roa (hash: N9APigkUnifz939TtzUKxhKyyn8AOmLm5xRTMW8fCf8=)
                          2: th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl (hash: aIEi4wJcGi7pbqzDJkUNjteOtOfdaDYvU/zyvaGOQVk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61E9138CFEB7D89AB8CF54276ED29B3D808E0BC
        Validity
            Not Before: Jan 25 16:59:29 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=186E78B45B3C95AF28F99FC95D6D94940A37551B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:c6:9f:2c:76:70:3d:16:0a:60:0c:28:9d:
                    0b:6e:02:15:0e:70:04:d0:29:47:03:3c:0b:c3:d4:
                    2e:d2:75:0e:ae:c0:63:70:93:c2:34:17:5a:cc:ce:
                    15:f6:7a:c8:84:9a:ac:9e:6b:a3:69:2c:43:28:77:
                    d9:af:a0:84:40:eb:b2:39:05:b9:b8:ba:c6:a3:9d:
                    02:aa:02:c0:33:24:9c:05:b7:eb:04:7a:98:0e:0a:
                    f3:2d:a9:c4:59:52:36:21:d2:c0:39:47:e2:13:81:
                    57:60:4f:a8:7b:6c:4e:f8:26:f8:15:f8:aa:b1:21:
                    91:c7:63:e8:23:65:39:20:4e:1a:ff:13:66:69:bf:
                    f6:22:44:57:bf:17:8c:bd:e4:d1:51:45:63:7a:e3:
                    5c:cd:2f:bc:fa:33:3f:9b:12:3e:2c:80:d9:3d:64:
                    81:00:bc:71:04:f9:4c:3d:00:8f:dd:ee:5a:83:0a:
                    84:34:cd:b6:39:52:8e:bf:af:6a:c4:4a:86:24:17:
                    fd:b6:cf:8a:46:d6:c9:1e:12:b4:95:2e:54:a3:10:
                    33:fa:36:8e:c2:4a:a8:d5:ac:0e:ef:73:3f:d1:1c:
                    ed:44:b6:f5:80:fa:02:da:cf:06:f8:a4:cd:0f:3b:
                    b1:27:10:ec:52:61:b6:bc:94:7a:f8:00:32:6f:fd:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6E:78:B4:5B:3C:95:AF:28:F9:9F:C9:5D:6D:94:94:0A:37:55:1B
            X509v3 Authority Key Identifier:
                keyid:B6:1E:91:38:CF:EB:7D:89:AB:8C:F5:42:76:ED:29:B3:D8:08:E0:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/th6ROM_rfYmrjPVCdu0ps9gI4Lw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/th6ROM_rfYmrjPVCdu0ps9gI4Lw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b0:01:e8:b5:6f:f8:4d:49:19:f5:f2:7f:a4:f2:84:bf:92:
         16:b5:3f:3f:0f:d1:a7:95:8b:9b:d8:c2:c2:23:49:00:00:2d:
         c8:0e:69:2d:18:e8:cb:ce:f5:dd:06:90:5d:11:9f:20:23:9b:
         88:a1:2e:89:81:a2:ff:d8:a1:37:fc:a4:69:1c:ff:c8:a3:13:
         1e:3a:9f:b6:c0:d5:60:a3:8b:a7:0f:15:f0:93:16:e2:fe:a2:
         a4:69:a8:8b:26:fb:73:b0:31:b7:22:53:56:59:7f:fc:9d:7f:
         ef:30:77:18:a4:42:60:5c:83:3f:f2:e2:8d:b8:46:d1:e2:84:
         3d:20:30:08:46:e6:23:f8:ea:66:e6:7f:74:89:bd:7b:f8:74:
         f0:aa:d3:8c:7c:81:8c:ce:ef:8a:d1:0b:a1:28:d4:85:84:42:
         92:9b:4b:a5:8a:58:7e:6c:9c:2b:90:8c:92:c0:96:90:7c:ae:
         e3:72:ea:ea:f3:1c:ae:88:5c:61:c7:aa:a5:33:62:69:6b:b3:
         26:47:40:15:be:97:56:4d:fd:48:23:31:b2:70:44:f7:fe:e2:
         dc:51:60:6f:02:f6:4e:65:d3:d2:8d:98:73:bd:a3:54:1f:ec:
         9f:09:03:ce:51:0b:23:4e:5a:8c:7e:4c:11:56:e0:a5:73:b6:
         ef:91:bc:e0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYx
RTkxMzhDRkVCN0Q4OUFCOENGNTQyNzZFRDI5QjNEODA4RTBCQzAeFw0yNjAxMjUx
NjU5MjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE4NkU3OEI0NUIzQzk1
QUYyOEY5OUZDOTVENkQ5NDk0MEEzNzU1MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1G8afLHZwPRYKYAwonQtuAhUOcATQKUcDPAvD1C7SdQ6uwGNw
k8I0F1rMzhX2esiEmqyea6NpLEMod9mvoIRA67I5Bbm4usajnQKqAsAzJJwFt+sE
epgOCvMtqcRZUjYh0sA5R+ITgVdgT6h7bE74JvgV+KqxIZHHY+gjZTkgThr/E2Zp
v/YiRFe/F4y95NFRRWN641zNL7z6Mz+bEj4sgNk9ZIEAvHEE+Uw9AI/d7lqDCoQ0
zbY5Uo6/r2rESoYkF/22z4pG1skeErSVLlSjEDP6No7CSqjVrA7vcz/RHO1EtvWA
+gLazwb4pM0PO7EnEOxSYba8lHr4ADJv/TchAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUGG54tFs8la8o+Z/JXW2UlAo3VRswHwYDVR0jBBgwFoAUth6ROM/rfYmrjPVC
du0ps9gI4LwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0
NS90aDZST01fcmZZbXJqUFZDZHUwcHM5Z0k0THcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3RoNlJPTV9yZlltcmpQVkNkdTBwczlnSTRMdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvdGg2Uk9NX3JmWW1y
alBWQ2R1MHBzOWdJNEx3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJSwAei1b/hNSRn18n+k8oS/kha1Pz8P0aeVi5vYwsIjSQAALcgOaS0Y6MvO
9d0GkF0RnyAjm4ihLomBov/YoTf8pGkc/8ijEx46n7bA1WCji6cPFfCTFuL+oqRp
qIsm+3OwMbciU1ZZf/ydf+8wdxikQmBcgz/y4o24RtHihD0gMAhG5iP46mbmf3SJ
vXv4dPCq04x8gYzO74rRC6Eo1IWEQpKbS6WKWH5snCuQjJLAlpB8ruNy6urzHK6I
XGHHqqUzYmlrsyZHQBW+l1ZN/UgjMbJwRPf+4txRYG8C9k5l09KNmHO9o1Qf7J8J
A85RCyNOWox+TBFW4KVztu+RvOA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:16:33 2026 by rpki-client