This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
File:                     wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft (raw, json)
Hash identifier:          /MIROt3bPnWJvXH68u7JwE7+PvPgJBAjAH4SFNTlBV8=
Subject key identifier:   9B:FC:C8:68:5C:B7:8B:CE:6D:3C:EC:20:47:70:F6:5E:70:79:49:26
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       2D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
Manifest number:          29
Signing time:             Thu 11 Dec 2025 05:19:01 +0000
Manifest this update:     Thu 11 Dec 2025 05:19:00 +0000
Manifest next update:     Sat 13 Dec 2025 05:19:00 +0000
Files and hashes:         1: wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl (hash: 0xFiOEFrMXn+A9KXo0Wl30iZ/nfb0OU45pxsrDUod2g=)
                          2: 16E842F8BDAC11F0B472F08BDAE4EC9C.roa (hash: EhpKapZP+bvJ8pIPWPKsjy23/0JHazNOFIbhIW5/eUc=)
                          3: DD8F2E9EBDAC11F08F343E90DAE4EC9C.roa (hash: 5WJzxDy5nvQm6CqVL268mDqdJo4LFUDkVHR+SznmwYg=)
                          4: 86422D44BDAC11F0A5532990DAE4EC9C.roa (hash: W7FXh+hNR8i93yao767hDspLMIQ2YRE4D3awbUVSIG0=)
                          5: 5F1173FCBDAB11F0BA239987DAE4EC9C.roa (hash: jVv5VcWRpd8J/KSQpIqnUe5qOeAoFnD/nSVjJMGdGek=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 11 05:19:00 2025 GMT
            Not After : Dec 13 05:19:00 2025 GMT
        Subject: CN=693a5445-5921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:5c:eb:0f:db:54:63:73:ab:61:e5:93:b0:
                    13:bb:2d:01:05:09:31:d7:d4:f5:34:68:d2:4d:28:
                    c2:2a:1b:3e:98:f8:b1:e6:83:96:41:5f:2e:87:84:
                    0c:e9:ff:db:a7:c4:4e:54:fd:69:d4:f9:c0:5a:10:
                    27:5a:0a:46:f2:66:6d:a8:98:15:56:21:3a:28:07:
                    c3:95:80:94:e6:40:90:26:14:08:e7:ce:c0:d5:89:
                    d8:db:1b:26:88:be:bd:6f:22:6f:0c:f6:b1:22:70:
                    18:af:9a:97:41:c9:60:86:41:6d:bc:4c:e0:57:f7:
                    43:b3:7c:4b:03:7a:a8:89:52:9b:d1:2b:3a:81:25:
                    ad:e2:6b:c2:86:38:85:c8:04:69:ee:27:d6:a2:b2:
                    f8:b3:cb:76:79:fc:33:d6:e7:08:61:c0:cf:d9:87:
                    69:91:cd:4d:24:86:2f:f6:0a:82:e9:a8:74:a5:67:
                    c2:69:6f:5f:7a:e1:b0:92:cd:2d:d4:01:cc:be:fa:
                    59:32:92:21:fa:8a:06:af:42:f9:d4:a0:89:86:27:
                    41:fe:41:e9:81:09:71:e9:bf:06:29:71:cb:2f:19:
                    7c:9b:a6:75:00:d3:c1:a8:4f:7e:2f:dc:2a:df:f8:
                    b3:d9:c5:1d:23:77:37:f9:d5:8d:0b:38:61:14:b6:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FC:C8:68:5C:B7:8B:CE:6D:3C:EC:20:47:70:F6:5E:70:79:49:26
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:c6:a5:89:02:99:25:db:f5:0f:fb:68:42:d3:62:0c:de:
         b5:3e:9b:2d:cf:12:45:93:9a:8f:93:79:9e:63:12:87:05:56:
         6c:33:3d:50:0a:3f:b2:2a:a4:26:b2:fa:5f:8a:d0:ea:a2:8a:
         58:7c:63:f6:a1:af:39:87:17:80:06:bc:cd:ff:ca:41:a1:6e:
         76:da:2c:9e:bb:78:85:b9:df:c3:07:e1:c2:f7:21:49:28:18:
         9a:7b:a6:51:5e:0a:1d:df:0a:04:23:78:7b:25:8d:96:04:9b:
         a6:f9:6d:1b:4a:58:a8:00:f8:91:70:ab:53:ef:ff:f0:5b:33:
         38:04:9f:a3:12:47:de:16:87:ea:16:e7:60:66:e6:a9:80:d3:
         40:22:95:eb:e7:35:59:46:4b:ba:0a:75:d8:ba:8d:9d:15:cc:
         78:20:31:f4:77:80:9a:f0:c8:d1:a6:bf:7f:79:87:9a:05:bc:
         fc:e9:e3:d6:fc:ac:af:7c:02:42:18:fa:e4:31:a2:8e:6c:df:
         84:db:c7:47:8d:9f:e2:37:f2:07:69:47:3b:01:84:a6:9a:e1:
         23:26:d1:f9:6b:98:b1:be:9d:39:e6:59:fd:f1:29:36:35:7e:
         74:4d:6f:b7:a5:19:29:bf:de:f9:f6:36:ea:b0:f2:90:5b:0d:
         ca:69:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:03:43 2025 by rpki-client