This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft
File:                     _63I3WE2bNhNmVIbY4OA6LUC5uQ.mft (raw, json)
Hash identifier:          GWVZ8+zUB8ce29OzPEMO/pz+iQ45DH0p1lfUMf3Wjfw=
Subject key identifier:   79:1B:A4:E7:22:4B:38:41:76:4D:7F:2F:8D:34:FD:37:E9:D5:88:9A
Authority key identifier: FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4
Certificate issuer:       /CN=FFADC8DD61366CD84D99521B638380E8B502E6E4
Certificate serial:       19C7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft
Manifest number:          19C3
Signing time:             Sun 25 Jan 2026 16:58:02 +0000
Manifest this update:     Sun 25 Jan 2026 16:58:02 +0000
Manifest next update:     Sun 25 Jan 2026 22:58:02 +0000
Files and hashes:         1: X07282e9PCQuZlli4VdAPVxV6wY.roa (hash: vVHKJZzyr+a3M5+snbxSBau9LwwkAYdYK0VD/veHhg8=)
                          2: _63I3WE2bNhNmVIbY4OA6LUC5uQ.crl (hash: mt0c5Nm/4eqzpKBVFmLlA/a2zEBkYXSfrIlzG4XPzNo=)
                          3: fueDrUdkJjq3Fh2yqH4qYN_mGBU.roa (hash: UryzZxE3raAFvefOehQQfkP8Bg/CybqwnETa9kULVnM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6599 (0x19c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFADC8DD61366CD84D99521B638380E8B502E6E4
        Validity
            Not Before: Jan 25 16:58:02 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=791BA4E7224B3841764D7F2F8D34FD37E9D5889A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:b3:15:50:67:14:3b:f5:2e:7e:52:55:3a:
                    42:cb:f0:98:7f:8d:1d:51:7e:20:a2:ad:22:87:6c:
                    0b:1d:44:5d:1b:82:1a:83:d6:80:11:bb:a8:13:f3:
                    9e:8f:fb:11:98:09:ef:a6:33:9c:ad:fc:17:87:7e:
                    2f:08:3b:7f:b2:79:8d:8d:8f:88:e9:f0:6a:0b:c4:
                    8c:8d:8f:5c:f9:01:75:14:40:97:0c:a1:57:d2:2d:
                    38:06:c5:22:4d:26:03:77:0f:8f:0a:cb:d1:25:33:
                    a7:2a:51:84:07:3f:0a:a6:f0:98:27:0e:0e:b1:ed:
                    40:53:d3:74:4a:42:39:35:ce:64:1b:ef:c6:bf:bd:
                    22:db:32:d7:92:e1:1d:f2:bc:b6:6f:67:7a:04:c8:
                    63:ba:f0:94:a8:2b:36:b4:d9:69:ef:b9:90:fd:3f:
                    0a:5c:ac:a3:c9:44:90:87:80:03:9a:aa:ee:4c:90:
                    cf:4e:05:4d:87:03:46:47:96:b9:cf:cc:4a:a2:b0:
                    e1:99:f9:1f:69:84:45:7c:24:67:56:38:08:4d:e4:
                    96:fa:37:3f:fd:55:a7:d3:a2:78:29:b3:c4:68:e2:
                    65:ef:38:a5:4a:18:a7:84:b0:64:3a:9d:04:fc:38:
                    2e:6a:0a:86:69:91:cc:fb:35:37:4b:2f:70:51:8c:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1B:A4:E7:22:4B:38:41:76:4D:7F:2F:8D:34:FD:37:E9:D5:88:9A
            X509v3 Authority Key Identifier:
                keyid:FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:fc:f3:6b:e9:76:34:98:bf:15:8a:75:3a:51:a8:c0:c4:
         3e:e2:67:f4:8b:3a:00:be:75:b5:5b:85:4f:a3:0a:29:4b:e2:
         b3:07:15:41:f8:ed:92:c7:59:78:a0:43:2a:cc:62:03:3b:a8:
         11:89:3b:c6:1c:05:19:db:c0:5f:55:dc:74:d9:e3:dc:d2:bf:
         ca:ca:d0:12:51:8f:33:c5:e5:31:c6:96:6e:ce:28:03:3e:ab:
         4e:9d:b2:7b:e1:a3:f3:13:bf:86:99:55:8e:29:86:ee:ee:bc:
         d1:09:b5:a0:62:ea:06:99:ad:31:46:15:34:d6:40:05:62:d9:
         ad:f7:d1:70:b7:7f:66:2d:f2:d6:aa:fa:ec:f4:fa:82:c7:bd:
         8a:90:bf:dd:15:1f:94:f4:d6:ec:14:ca:03:61:7c:b5:bb:06:
         81:56:be:c5:32:4f:6f:e7:76:ec:5e:3a:9c:a9:a0:9a:2c:f2:
         0a:6c:c8:50:71:2e:04:7b:6b:43:36:3a:b6:93:5e:45:8e:a9:
         9b:59:10:96:f0:15:98:d3:7c:82:3b:bd:ab:75:22:a3:2b:a8:
         b5:cd:c2:db:4a:0b:5d:b4:f0:a9:e8:9f:c9:8e:e0:92:24:92:
         bf:6f:aa:b1:f8:c1:4f:e4:8e:9d:c3:3a:7b:4d:39:38:ac:c6:
         1f:ac:5b:f8
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICGccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkZB
REM4REQ2MTM2NkNEODREOTk1MjFCNjM4MzgwRThCNTAyRTZFNDAeFw0yNjAxMjUx
NjU4MDJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDc5MUJBNEU3MjI0QjM4
NDE3NjREN0YyRjhEMzRGRDM3RTlENTg4OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCho7MVUGcUO/UuflJVOkLL8Jh/jR1RfiCirSKHbAsdRF0bghqD
1oARu6gT856P+xGYCe+mM5yt/BeHfi8IO3+yeY2Nj4jp8GoLxIyNj1z5AXUUQJcM
oVfSLTgGxSJNJgN3D48Ky9ElM6cqUYQHPwqm8JgnDg6x7UBT03RKQjk1zmQb78a/
vSLbMteS4R3yvLZvZ3oEyGO68JSoKza02WnvuZD9PwpcrKPJRJCHgAOaqu5MkM9O
BU2HA0ZHlrnPzEqisOGZ+R9phEV8JGdWOAhN5Jb6Nz/9VafTongps8Ro4mXvOKVK
GKeEsGQ6nQT8OC5qCoZpkcz7NTdLL3BRjCB/AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUeRuk5yJLOEF2TX8vjTT9N+nViJowHwYDVR0jBBgwFoAU/63I3WE2bNhNmVIb
Y4OA6LUC5uQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0
L182M0kzV0UyYk5oTm1WSWJZNE9BNkxVQzV1US5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvXzYzSTNXRTJiTmhObVZJYlk0T0E2TFVDNXVRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L182M0kzV0UyYk5oTm1W
SWJZNE9BNkxVQzV1US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPFfzza+l2NJi/FYp1OlGowMQ+4mf0izoAvnW1W4VPowopS+KzBxVB+O2Sx1l4
oEMqzGIDO6gRiTvGHAUZ28BfVdx02ePc0r/KytASUY8zxeUxxpZuzigDPqtOnbJ7
4aPzE7+GmVWOKYbu7rzRCbWgYuoGma0xRhU01kAFYtmt99Fwt39mLfLWqvrs9PqC
x72KkL/dFR+U9NbsFMoDYXy1uwaBVr7FMk9v53bsXjqcqaCaLPIKbMhQcS4Ee2tD
Njq2k15FjqmbWRCW8BWY03yCO72rdSKjK6i1zcLbSgtdtPCp6J/JjuCSJJK/b6qx
+MFP5I6dwzp7TTk4rMYfrFv4
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:07:45 2026 by rpki-client