This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
File:                     MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft (raw, json)
Hash identifier:          RBN0iy7pdAhdPvLgqg5ZtnsbgVqBSx54E+ZyWa7rNLY=
Subject key identifier:   D1:BB:56:A5:01:BF:B4:F6:E6:F5:84:C6:59:ED:C5:30:66:A5:95:28
Authority key identifier: 31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49
Certificate issuer:       /CN=F362412ERI/serialNumber=313CBFEF72A426B047884E074BB1BB0B02FC5649
Certificate serial:       0122
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
Manifest number:          0120
Signing time:             Thu 11 Dec 2025 04:53:32 +0000
Manifest this update:     Thu 11 Dec 2025 04:53:31 +0000
Manifest next update:     Sat 13 Dec 2025 04:53:31 +0000
Files and hashes:         1: MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl (hash: BELfmYQGu784tM0FRNOwTdq9FPIZlYRrO3g9f9lGDkQ=)
                          2: 26CEAFEEF9C211EF8BFA8A60762E951A.roa (hash: N5WFGVxirsRLfwzk7wqVUbAA2T7zj2v/qiYQhs/x+7c=)
                          3: 50A88FD8F9C211EF95A2B360762E951A.roa (hash: cr88gzng9AlrJw+Jt+AIyLDrpQJLkgx8iB8swVH4qZ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
                          rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362412ERI, serialNumber=313CBFEF72A426B047884E074BB1BB0B02FC5649
        Validity
            Not Before: Dec 11 04:53:31 2025 GMT
            Not After : Dec 13 04:53:31 2025 GMT
        Subject: CN=693a4e4c-c35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:13:a2:19:10:1d:2b:ff:03:ba:04:89:52:d1:
                    54:d4:4b:67:1f:e1:38:ba:02:12:e9:ef:6c:18:7c:
                    77:59:f8:95:23:fa:2a:60:da:c1:5a:38:22:aa:4a:
                    26:4f:b3:3e:52:2c:b8:08:7d:f1:95:52:57:19:54:
                    68:1c:42:e3:a9:ac:89:db:f5:a3:3f:a0:3b:0d:d2:
                    9e:d8:33:42:88:09:45:cd:75:85:80:f6:a5:bb:7b:
                    56:9d:6c:16:e6:80:40:f9:3a:b8:41:1b:20:89:32:
                    4b:0d:e7:ef:cf:3c:bb:0b:76:87:03:90:67:3e:da:
                    09:93:9d:f7:3e:be:52:d0:8f:cb:38:b9:3c:51:36:
                    63:d1:c0:ba:56:b9:80:a0:55:68:62:91:bb:fe:9c:
                    a5:f1:6f:80:2a:ad:46:fa:83:11:cf:3b:ac:e9:a7:
                    53:85:38:4c:4f:54:fd:fc:5d:e6:4c:96:d2:57:f5:
                    93:76:37:85:7e:7c:84:3a:97:bc:89:6e:23:94:21:
                    f3:a6:0f:4a:5a:69:93:2a:2a:c7:01:68:3b:77:6b:
                    21:72:e9:91:b7:ad:5e:78:59:0b:dd:ff:a0:ea:21:
                    e4:27:c1:33:52:17:38:fa:77:28:06:e9:94:f3:d7:
                    91:e1:37:d9:e8:40:a0:41:e5:ee:5d:c2:94:74:5d:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BB:56:A5:01:BF:B4:F6:E6:F5:84:C6:59:ED:C5:30:66:A5:95:28
            X509v3 Authority Key Identifier:
                keyid:31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:bc:4e:de:54:7f:61:0d:96:17:8c:1a:83:82:67:31:3d:e4:
         06:1b:81:ec:f2:b1:65:67:78:8f:d0:15:85:9b:ba:ea:38:32:
         ba:e3:2f:f7:32:96:22:26:ad:09:5a:30:43:84:de:b6:1d:bb:
         6e:3b:68:2f:98:e5:7d:6e:4c:77:fd:09:57:07:12:f8:b2:14:
         e8:e6:8b:12:ec:6e:f1:e9:a8:00:34:91:ad:8c:38:5c:87:78:
         45:ee:6c:8b:ef:b1:e8:20:4f:bf:2d:d2:2e:e8:28:44:e5:23:
         32:de:d0:b4:51:f3:5d:e1:ec:4d:c4:d3:fd:dd:ac:c1:1a:91:
         1d:78:29:2e:46:bc:67:68:86:27:98:9f:60:35:f6:ea:c5:88:
         89:65:53:a7:9f:da:e3:f3:ce:ad:45:92:68:c3:37:20:01:14:
         5a:38:6c:6a:04:80:6c:19:ff:ba:bf:cf:bc:9d:e4:85:73:26:
         40:d4:c4:cf:4b:22:a6:d8:69:7a:df:66:19:5e:f3:3c:e0:3e:
         31:eb:24:8c:a4:88:5b:f5:e7:3c:1f:5b:06:4a:a9:e7:7f:26:
         a4:7a:6c:98:78:73:7f:f4:6d:9c:62:08:cd:49:81:12:e2:4d:
         24:31:5f:22:58:2c:96:b2:11:d1:26:30:2e:a9:f8:19:26:a5:
         74:7a:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:09:48 2025 by rpki-client