This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          orb/Q+VjoXf/EFP041P5Rblc0LDHviHkYdlTv62cQDs=
Subject key identifier:   DB:AB:87:93:02:7A:D4:89:80:E1:E1:8E:E3:4A:42:E6:A9:29:9D:52
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       01B8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          01B7
Signing time:             Thu 11 Dec 2025 04:39:22 +0000
Manifest this update:     Thu 11 Dec 2025 04:39:21 +0000
Manifest next update:     Sat 13 Dec 2025 04:39:21 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: 56obwQlkLf3J5SfdMD8wVi6hsaXeiDtuYDpzIR+ikao=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Dec 11 04:39:21 2025 GMT
            Not After : Dec 13 04:39:21 2025 GMT
        Subject: CN=693a4afa-9034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:89:79:99:60:f0:a5:d8:b1:13:a3:da:8e:
                    63:d2:68:e9:e1:32:54:7f:12:0d:79:a3:0d:52:14:
                    21:81:77:a2:0b:08:4d:b5:34:af:b1:75:ff:e4:06:
                    af:40:8d:01:49:4a:94:b9:a2:9a:3f:6f:06:ec:bc:
                    59:98:b7:c0:88:56:cf:69:82:1f:15:e2:e6:22:b7:
                    16:80:1a:7f:d1:ab:33:d0:a3:7d:bc:0b:27:b3:94:
                    5b:52:8d:b4:bc:c8:2d:90:aa:13:d3:48:74:c8:02:
                    bd:33:27:04:1b:71:ee:e7:3c:eb:d8:6d:34:0a:e9:
                    4d:1a:c4:8f:07:f9:a7:59:df:3d:51:67:ac:03:8d:
                    eb:da:fe:54:df:bc:f4:c5:60:4a:ec:1b:ea:19:37:
                    64:b2:ce:45:e5:48:4e:97:d9:06:17:83:96:33:4b:
                    e8:d5:a0:77:44:98:30:35:6f:12:27:70:f5:30:03:
                    4d:b0:4e:bc:4f:e7:f9:72:eb:5e:96:2e:39:77:1d:
                    fe:75:48:c7:7e:25:9e:f7:a4:23:8e:79:05:c5:11:
                    94:0b:25:e7:7c:2f:d6:24:c2:65:88:1d:95:29:25:
                    5d:a1:9d:2b:26:88:e7:38:4a:14:cc:33:05:c7:2b:
                    25:88:90:7a:2f:49:43:4a:4a:7c:8c:57:97:74:a9:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AB:87:93:02:7A:D4:89:80:E1:E1:8E:E3:4A:42:E6:A9:29:9D:52
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:2f:1c:5a:db:f7:69:5c:86:94:72:16:81:d4:44:29:14:
         58:a5:5d:a8:43:9e:5f:ba:94:7d:d7:3b:09:58:91:79:9d:30:
         5e:8b:0d:79:6e:20:bf:95:50:1a:7d:e4:53:76:28:70:a9:c9:
         7c:fa:e1:38:c9:92:5e:9b:05:47:fe:1d:34:fd:63:33:69:da:
         da:a3:fb:a1:20:f8:95:ce:f2:bb:84:a0:bd:a6:06:df:af:71:
         fe:58:80:f9:b5:b1:5b:f7:26:17:1c:bc:e9:1f:e4:0d:fa:4e:
         59:7b:0b:c4:9b:0e:e4:e6:4a:77:a8:6c:85:29:90:db:61:9a:
         be:d5:e4:1b:e7:5b:89:f1:a5:09:c1:c5:ed:d5:64:5f:94:39:
         08:4c:d1:99:e4:2a:51:a1:5c:69:51:90:13:39:71:5f:2d:b3:
         8c:3f:36:ca:f0:2a:06:28:e7:a5:48:3a:8d:3a:9a:c8:79:e9:
         b6:28:83:08:59:35:20:63:8d:42:2f:da:66:e5:db:10:fa:27:
         b6:13:84:b3:05:1b:d4:9e:43:bb:c1:c9:64:91:79:a1:c3:b1:
         97:67:6c:8c:0f:c1:8a:3f:b3:99:25:4e:d3:88:9e:8c:19:72:
         20:db:0f:ae:c4:cd:4e:d7:37:89:df:bc:a1:47:80:b0:57:ad:
         b7:63:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:09:46 2025 by rpki-client