This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File:                     3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier:          mc+NxguSfRXALCFRV0sLHLc2QaA/F8MEMrW4u7jq0JU=
Subject key identifier:   DB:71:F4:D1:6C:77:29:47:6D:6C:30:D3:DA:FB:2C:99:1F:30:DD:EB
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       065B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number:          0659
Signing time:             Tue 09 Dec 2025 02:21:30 +0000
Manifest this update:     Tue 09 Dec 2025 02:21:29 +0000
Manifest next update:     Thu 11 Dec 2025 02:21:29 +0000
Files and hashes:         1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: BAG9YAYpLv3Fzgm0xL0AOu+e784Ms5fgXFuLRWqUang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Dec  9 02:21:29 2025 GMT
            Not After : Dec 11 02:21:29 2025 GMT
        Subject: CN=693787aa-01ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:8f:9b:35:2a:d4:ad:36:67:60:3d:93:7e:
                    31:29:d0:0b:82:cf:95:43:99:26:e2:b2:67:75:ab:
                    fa:1a:8d:7a:3f:92:34:09:15:22:62:00:31:ee:e7:
                    15:0d:80:14:3c:f8:3b:ce:06:c5:4c:e9:6e:e8:92:
                    7d:e2:70:32:e8:42:c9:58:dd:6e:2d:13:be:46:17:
                    d8:c5:98:2a:e9:f5:9e:02:eb:55:f9:df:49:7b:cf:
                    de:18:c8:64:30:36:3c:6d:75:1b:2d:7c:1f:a3:23:
                    35:5d:4d:2b:1d:00:64:01:95:08:51:9b:3e:b5:ec:
                    77:a5:fc:2a:1b:33:9c:d3:19:c1:6d:fc:ab:35:b3:
                    7e:93:43:c8:8a:74:62:5a:81:d1:fc:6a:45:e3:b5:
                    dc:0c:4c:5e:dc:a2:6f:7b:6c:0f:9f:34:e0:d4:75:
                    4f:a5:c3:a2:e1:cb:39:4f:a4:4a:c5:43:32:3b:20:
                    05:1d:bb:08:d3:74:6a:8f:4e:d5:55:40:fe:86:2e:
                    82:d7:9a:73:91:07:ad:b5:2a:1f:f9:d3:cc:2b:73:
                    43:b9:1b:02:cb:54:ce:a7:a5:32:28:6f:44:e0:7d:
                    7d:c1:6f:60:2c:d1:ae:26:d9:58:c0:39:d2:70:8c:
                    0f:80:c0:ad:3c:a1:5b:1a:77:c2:62:84:cb:26:22:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:71:F4:D1:6C:77:29:47:6D:6C:30:D3:DA:FB:2C:99:1F:30:DD:EB
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:65:06:8f:be:7b:3f:55:ae:4b:d2:55:dd:32:51:44:29:ad:
         84:84:b6:53:4f:b9:6b:9e:4f:6a:1e:4f:3f:89:74:09:da:aa:
         17:4e:d0:ce:66:ae:3a:90:2f:44:1e:d8:2c:2b:84:3a:65:7f:
         54:c6:7f:63:a2:b4:de:7a:7c:68:38:54:31:80:f2:42:61:b8:
         51:ab:b7:03:f7:28:67:ff:3e:ba:fb:81:bd:8d:3a:ab:18:f8:
         90:a6:3f:28:f7:e2:e6:e5:9a:01:c9:cb:84:00:b0:89:a6:3a:
         cd:2f:fc:2b:44:bb:4f:89:e1:04:b5:b7:66:ca:3e:ea:8d:7f:
         83:99:d4:9d:a5:0e:63:37:7c:2b:b4:6e:21:b7:a2:28:a4:91:
         f2:64:a2:f5:34:06:0c:f6:72:1c:63:8b:a9:34:52:9b:c2:db:
         1e:09:fc:64:97:96:e1:da:bb:fa:9a:ff:2f:fe:19:4f:68:d6:
         9a:93:7a:65:c2:95:21:76:ca:84:2d:9f:09:bd:90:06:3b:d9:
         46:c6:e6:7e:0d:d2:02:60:02:d3:07:9e:51:43:99:1c:b7:ce:
         29:ea:cf:04:65:04:3d:31:d8:09:7d:36:86:e4:7c:49:77:a7:
         9a:1d:b7:9c:d6:a1:3f:ac:53:a4:88:3a:d5:7c:a5:77:80:03:
         c8:34:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:17:19 2025 by rpki-client