This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
File:                     vujDtMU1w6-g9ubE9pxolZBF-RY.mft (raw, json)
Hash identifier:          95Q11yrEjBL+KYJHF0qxTddB5r9r0jVTyW7LiC5p+yE=
Subject key identifier:   C2:2D:CA:CE:D8:6D:6F:32:9C:07:C6:A4:36:0D:40:C7:B0:F9:AA:65
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Certificate issuer:       /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial:       01C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
Manifest number:          01BD
Signing time:             Tue 09 Dec 2025 04:39:54 +0000
Manifest this update:     Tue 09 Dec 2025 04:39:53 +0000
Manifest next update:     Thu 11 Dec 2025 04:39:53 +0000
Files and hashes:         1: vujDtMU1w6-g9ubE9pxolZBF-RY.crl (hash: T12SKl4lMCnRFgOc8Ipj/dPTHPLFkk6xxHBngFUeJfo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36311EEAF, serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
        Validity
            Not Before: Dec  9 04:39:53 2025 GMT
            Not After : Dec 11 04:39:53 2025 GMT
        Subject: CN=6937a81a-988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:cc:68:5a:f8:1f:9b:3c:6b:37:38:d1:27:
                    75:f0:40:fc:31:23:8e:6a:8e:49:98:45:c4:68:a8:
                    32:ca:af:30:81:2d:ec:b2:8d:ef:8c:73:8e:4e:0b:
                    0d:90:ce:e0:e9:44:f3:16:64:ef:73:7f:c9:b0:37:
                    d2:9a:3b:63:19:ce:ab:eb:ba:91:4d:c6:aa:36:57:
                    e7:6f:8b:96:dd:29:d3:da:2f:3d:3a:4e:a4:95:be:
                    c6:f3:83:09:f1:1b:69:19:b5:57:f2:39:4e:e3:d7:
                    1c:05:fa:f9:d0:3f:68:60:56:55:14:86:53:f5:5d:
                    88:65:d2:5d:27:31:00:ff:ba:3e:b5:59:fa:d2:c6:
                    52:29:61:59:0c:c2:06:b4:1b:8d:9d:eb:14:61:dc:
                    4e:4c:ec:c3:74:38:f4:b8:3b:7f:7c:ad:10:ca:ea:
                    0d:d2:1e:58:15:b8:20:2f:a3:ae:7f:56:8d:8d:17:
                    07:ce:3d:26:3c:74:12:28:0e:f8:d1:1e:89:3a:50:
                    a0:2b:d7:78:b1:d9:aa:f6:f1:75:67:6a:85:71:2e:
                    99:40:18:b0:2f:e7:b8:68:ad:6c:08:d1:dd:8d:ee:
                    b3:65:c8:89:cc:1d:d8:c5:37:78:ce:fa:fb:8b:bc:
                    f8:2a:ab:ea:29:16:37:5f:53:5b:93:6a:86:73:87:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2D:CA:CE:D8:6D:6F:32:9C:07:C6:A4:36:0D:40:C7:B0:F9:AA:65
            X509v3 Authority Key Identifier:
                keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:81:f8:80:8c:e2:10:39:e5:b7:34:22:20:46:7a:80:00:a6:
         f7:98:be:e9:4b:84:c4:64:58:39:ae:30:f5:af:c2:7f:a4:35:
         cd:81:77:83:e8:6a:45:78:ea:33:c7:21:3b:99:75:c8:67:51:
         ab:13:4b:6e:00:4f:e8:6d:aa:89:e8:83:0e:fe:71:5b:18:9f:
         71:5e:64:99:0b:c1:52:42:ea:45:3f:75:58:8b:bf:a5:31:25:
         38:15:e6:51:ef:69:aa:4b:79:41:16:f7:0e:6d:24:09:2e:d3:
         a2:57:bf:6d:21:6e:c4:c7:b0:0f:0d:1c:3f:96:01:1f:98:c7:
         d9:f5:2e:60:55:61:99:08:c6:ef:eb:79:6e:bd:75:b1:73:c5:
         c2:6d:ac:72:dc:1a:2d:12:63:f3:2c:79:cf:1e:52:0a:0c:fc:
         e9:63:94:b4:1e:8f:1a:52:f9:54:8c:4e:5f:54:ef:dc:35:eb:
         f6:ab:ea:b0:b8:ad:f7:ce:ad:fb:e5:25:29:21:44:f7:ed:44:
         2a:76:80:09:02:69:2e:48:87:57:2b:7d:82:47:cc:cd:1e:d7:
         21:35:4a:82:e9:44:b7:10:11:e1:17:2b:ea:4c:62:07:18:54:
         69:6e:ea:6c:00:bb:c5:51:6e:e0:f9:7d:37:ca:65:ff:58:52:
         24:22:9d:3a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzExRUVBRjExMC8GA1UEBRMoQkVFOEMzQjRDNTM1QzNBRkEwRjZFNkM0RjY5QzY4
OTU5MDQ1RjkxNjAeFw0yNTEyMDkwNDM5NTNaFw0yNTEyMTEwNDM5NTNaMBgxFjAU
BgNVBAMTDTY5MzdhODFhLTk4OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8dcxoWvgfmzxrNzjRJ3XwQPwxI45qjkmYRcRoqDLKrzCBLeyyje+Mc45O
Cw2QzuDpRPMWZO9zf8mwN9KaO2MZzqvrupFNxqo2V+dvi5bdKdPaLz06TqSVvsbz
gwnxG2kZtVfyOU7j1xwF+vnQP2hgVlUUhlP1XYhl0l0nMQD/uj61WfrSxlIpYVkM
wga0G42d6xRh3E5M7MN0OPS4O398rRDK6g3SHlgVuCAvo65/Vo2NFwfOPSY8dBIo
DvjRHok6UKAr13ix2ar28XVnaoVxLplAGLAv57horWwI0d2N7rNlyInMHdjFN3jO
+vuLvPgqq+opFjdfU1uTaoZzhyqvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwi3K
zthtbzKcB8akNg1Ax7D5qmUwHwYDVR0jBBgwFoAUvujDtMU1w6+g9ubE9pxolZBF
+RYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMxMUVFLzM5N0JBRDBBOEJBODExRUY4QTc0MDg0Mjc2MkU5NTFBL3Z1akR0
TVUxdzYtZzl1YkU5cHhvbFpCRi1SWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3Z1akR0TVUxdzYtZzl1YkU5cHhvbFpCRi1SWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzExRUUvMzk3QkFEMEE4QkE4MTFFRjhBNzQwODQyNzYy
RTk1MUEvdnVqRHRNVTF3Ni1nOXViRTlweG9sWkJGLVJZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7gfiAjOIQOeW3NCIgRnqAAKb3mL7p
S4TEZFg5rjD1r8J/pDXNgXeD6GpFeOozxyE7mXXIZ1GrE0tuAE/obaqJ6IMO/nFb
GJ9xXmSZC8FSQupFP3VYi7+lMSU4FeZR72mqS3lBFvcObSQJLtOiV79tIW7Ex7AP
DRw/lgEfmMfZ9S5gVWGZCMbv63luvXWxc8XCbaxy3BotEmPzLHnPHlIKDPzpY5S0
Ho8aUvlUjE5fVO/cNev2q+qwuK33zq375SUpIUT37UQqdoAJAmkuSIdXK32CR8zN
HtchNUqC6US3EBHhFyvqTGIHGFRpbupsALvFUW7g+X03ymX/WFIkIp06
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:15:54 2025 by rpki-client