This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
File:                     v13ZvUEyHNq78daooOZkfm_v0uM.mft (raw, json)
Hash identifier:          oViOmUwmHgi831zFbqJXCVXIMkNiHb5aDN2SqGJQudQ=
Subject key identifier:   CC:4C:34:71:C8:C4:41:08:5E:8B:49:06:0D:E2:56:BA:6B:9F:4C:BA
Authority key identifier: BF:5D:D9:BD:41:32:1C:DA:BB:F1:D6:A8:A0:E6:64:7E:6F:EF:D2:E3
Certificate issuer:       /CN=F3634E70AF/serialNumber=BF5DD9BD41321CDABBF1D6A8A0E6647E6FEFD2E3
Certificate serial:       0886
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
Manifest number:          0880
Signing time:             Tue 09 Dec 2025 01:43:07 +0000
Manifest this update:     Tue 09 Dec 2025 01:43:06 +0000
Manifest next update:     Thu 11 Dec 2025 01:43:06 +0000
Files and hashes:         1: v13ZvUEyHNq78daooOZkfm_v0uM.crl (hash: YKILFbApwwRp6kgEEajaAHr1POwRUPzGDmjGurrJ1tg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634E70AF, serialNumber=BF5DD9BD41321CDABBF1D6A8A0E6647E6FEFD2E3
        Validity
            Not Before: Dec  9 01:43:06 2025 GMT
            Not After : Dec 11 01:43:06 2025 GMT
        Subject: CN=69377eab-8f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:76:9c:ed:bb:2c:22:64:6d:c7:c8:0c:82:82:
                    47:48:f9:39:51:d5:e4:c1:63:47:75:3f:84:a4:02:
                    84:48:e0:75:dd:31:69:e7:49:d9:c0:cf:c3:47:6f:
                    ae:63:a2:3c:4a:4b:5a:c9:11:e8:e9:af:e2:28:36:
                    cd:b9:49:90:a0:e4:7b:e8:91:cc:ff:0b:6a:f8:ae:
                    da:2b:d7:02:2b:13:8c:e6:09:b7:2b:e7:1f:f0:18:
                    07:61:18:f7:b7:bd:c2:c1:d7:a8:bb:68:15:a9:e4:
                    ac:55:a7:e5:14:42:c0:9a:78:b2:f8:3c:36:36:c1:
                    72:89:b3:0e:bc:8c:0c:95:ac:e4:52:06:33:de:90:
                    2d:72:50:ed:5f:a8:bf:fc:75:c7:45:97:68:98:a8:
                    b9:87:42:37:73:76:ef:1b:7e:44:e2:90:02:e6:9e:
                    2a:35:f7:dd:32:2f:c7:b7:81:05:5d:c7:a2:f3:b0:
                    75:83:a6:8e:6f:4e:31:11:de:1c:29:7c:0c:9c:2c:
                    87:40:49:fa:66:9c:74:61:94:ad:37:3f:eb:b8:26:
                    d6:48:a3:05:d6:a0:e7:25:21:bf:cc:b2:32:b2:0d:
                    e5:26:5f:85:41:5d:65:83:a1:a5:3a:7d:50:da:37:
                    39:56:b2:51:05:a0:b2:e7:fb:c5:59:25:c5:b6:0a:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4C:34:71:C8:C4:41:08:5E:8B:49:06:0D:E2:56:BA:6B:9F:4C:BA
            X509v3 Authority Key Identifier:
                keyid:BF:5D:D9:BD:41:32:1C:DA:BB:F1:D6:A8:A0:E6:64:7E:6F:EF:D2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:d6:56:60:4d:dd:5e:76:35:b6:e9:c0:fa:54:db:dd:59:
         89:03:d9:95:b6:d4:74:3c:0a:2c:97:73:67:55:10:4e:e8:e2:
         70:d8:0b:3e:db:39:13:59:40:92:94:61:95:43:3e:3d:c9:4e:
         5e:9e:f6:90:90:c7:1e:40:bd:25:0c:87:39:e1:c1:6a:cc:c2:
         51:a1:d7:6f:8c:ff:a6:88:8a:8c:74:11:5d:9a:19:07:a5:e2:
         e3:fc:75:66:35:4f:21:ea:bc:86:ac:37:1d:89:6b:a6:0d:6f:
         ec:15:a6:e9:a7:74:69:89:7e:80:ee:fb:d4:2e:7e:fa:5e:d5:
         7e:65:24:61:e8:7e:ce:e1:87:36:9e:6b:db:99:53:17:ec:af:
         dd:0c:ec:ee:53:18:65:3e:59:aa:56:8a:cc:df:9c:d8:94:e2:
         9b:13:02:9c:13:e1:a9:d5:80:bb:56:1c:3e:e0:77:4f:8f:44:
         1b:a0:71:35:ea:d0:9c:74:c9:a0:c1:c3:50:96:59:71:eb:c2:
         4a:0b:d4:1b:ab:e0:a0:d0:2c:aa:f4:f1:53:54:14:5d:17:22:
         93:6a:31:a2:7f:77:be:77:27:6e:37:4e:5f:bf:3e:51:4b:0e:
         04:4b:95:65:db:7b:1f:21:68:47:f6:d2:69:c0:ac:6b:79:4a:
         e6:5d:0c:66
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzRFNzBBRjExMC8GA1UEBRMoQkY1REQ5QkQ0MTMyMUNEQUJCRjFENkE4QTBFNjY0
N0U2RkVGRDJFMzAeFw0yNTEyMDkwMTQzMDZaFw0yNTEyMTEwMTQzMDZaMBgxFjAU
BgNVBAMTDTY5Mzc3ZWFiLThmMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCSdpztuywiZG3HyAyCgkdI+TlR1eTBY0d1P4SkAoRI4HXdMWnnSdnAz8NH
b65jojxKS1rJEejpr+IoNs25SZCg5Hvokcz/C2r4rtor1wIrE4zmCbcr5x/wGAdh
GPe3vcLB16i7aBWp5KxVp+UUQsCaeLL4PDY2wXKJsw68jAyVrORSBjPekC1yUO1f
qL/8dcdFl2iYqLmHQjdzdu8bfkTikALmnio1990yL8e3gQVdx6LzsHWDpo5vTjER
3hwpfAycLIdASfpmnHRhlK03P+u4JtZIowXWoOclIb/MsjKyDeUmX4VBXWWDoaU6
fVDaNzlWslEFoLLn+8VZJcW2ClRRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzEw0
ccjEQQhei0kGDeJWumufTLowHwYDVR0jBBgwFoAUv13ZvUEyHNq78daooOZkfm/v
0uMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RTcwL0UxNDYxQjUyNTk0MzExRUE4OUFDRDg2MUY4QUVBMjI4L3YxM1p2
VUV5SE5xNzhkYW9vT1prZm1fdjB1TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3YxM1p2VUV5SE5xNzhkYW9vT1prZm1fdjB1TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzRFNzAvRTE0NjFCNTI1OTQzMTFFQTg5QUNEODYxRjhB
RUEyMjgvdjEzWnZVRXlITnE3OGRhb29PWmtmbV92MHVNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADL9ZWYE3dXnY1tunA+lTb3VmJA9mV
ttR0PAosl3NnVRBO6OJw2As+2zkTWUCSlGGVQz49yU5envaQkMceQL0lDIc54cFq
zMJRoddvjP+miIqMdBFdmhkHpeLj/HVmNU8h6ryGrDcdiWumDW/sFabpp3RpiX6A
7vvULn76XtV+ZSRh6H7O4Yc2nmvbmVMX7K/dDOzuUxhlPlmqVorM35zYlOKbEwKc
E+Gp1YC7Vhw+4HdPj0QboHE16tCcdMmgwcNQlllx68JKC9Qbq+Cg0Cyq9PFTVBRd
FyKTajGif3e+dyduN05fvz5RSw4ES5Vl23sfIWhH9tJpwKxreUrmXQxm
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:44 2025 by rpki-client