This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
File:                     a80vareT2tF2SQgQRK-wMtX7SVc.mft (raw, json)
Hash identifier:          48VAa6IomnzzUNRma3tmbCWJds0oOpSAWg5+oa6xE60=
Subject key identifier:   50:4A:72:DF:5C:63:94:3A:75:C4:CD:BA:D1:D2:07:EF:6B:5E:25:3A
Authority key identifier: 6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
Certificate issuer:       /CN=F36429BBAF/serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
Certificate serial:       0EC6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
Manifest number:          0EC4
Signing time:             Tue 09 Dec 2025 00:59:01 +0000
Manifest this update:     Tue 09 Dec 2025 00:59:00 +0000
Manifest next update:     Thu 11 Dec 2025 00:59:00 +0000
Files and hashes:         1: a80vareT2tF2SQgQRK-wMtX7SVc.crl (hash: CxRzZb/vF5jcTctoFbQz9t58L2vDD3Bp9WjQfEC9NzQ=)
                          2: 187EDD9C7AED11E984C8C332F8AEA228.roa (hash: nhY0hDClfKko61UqhvpEoCzSPfAm4A5VUTRq1mCbE5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 00:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3782 (0xec6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36429BBAF, serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
        Validity
            Not Before: Dec  9 00:59:00 2025 GMT
            Not After : Dec 11 00:59:00 2025 GMT
        Subject: CN=69377455-31f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d7:f5:57:ee:01:a8:49:6f:f1:64:ae:41:c2:
                    b9:22:ea:02:5f:94:d2:9a:73:a5:d8:29:52:6b:1f:
                    14:00:f3:a5:d7:47:9f:d6:fd:55:dd:83:85:6e:92:
                    e2:63:db:9d:5b:22:99:2d:65:f4:c3:1d:03:43:9e:
                    ba:6b:b7:5c:12:41:1d:5c:05:22:3b:9b:0d:b8:cd:
                    35:10:36:10:57:8c:08:90:0f:3b:57:e3:df:c0:cf:
                    e6:21:73:69:46:4a:9b:55:03:f6:79:b8:76:1b:88:
                    a2:29:4f:8f:37:32:a7:3c:60:21:a5:e4:a5:22:76:
                    be:d6:c0:79:e5:3c:8b:83:5c:86:c7:d0:a6:fd:53:
                    dc:c2:9d:a4:51:27:59:18:2d:05:e9:35:82:8c:c0:
                    30:c3:70:dc:6f:b6:07:ce:57:a1:dd:63:49:9c:47:
                    65:7b:27:e2:d7:a0:f1:8d:e8:0a:a8:58:61:e8:68:
                    fb:a0:16:7e:20:4c:a5:78:ec:7e:46:2f:f6:73:54:
                    2d:a6:8b:23:82:eb:16:7a:21:a0:08:14:ef:34:e0:
                    2e:8c:f4:5e:27:01:04:35:12:f2:bd:7b:a9:6b:2a:
                    7f:ee:31:5e:70:81:9b:42:5f:8b:a8:46:26:f2:93:
                    41:16:c6:ea:fd:68:d7:fa:8f:cd:70:b5:43:39:2a:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4A:72:DF:5C:63:94:3A:75:C4:CD:BA:D1:D2:07:EF:6B:5E:25:3A
            X509v3 Authority Key Identifier:
                keyid:6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:81:dd:bd:62:27:3b:d3:36:16:c8:f0:e2:dc:a1:3b:7f:19:
         04:a2:76:93:9e:81:72:e5:08:e2:72:93:68:3b:e8:f8:b0:bf:
         a1:fb:fc:4c:a2:2c:9e:db:8a:7f:5f:0f:0b:02:66:8c:ba:f5:
         79:5a:15:d5:10:e5:81:11:ca:37:df:c6:87:fd:4a:84:bf:90:
         59:cc:8b:16:be:90:93:e1:e5:38:2c:52:ae:c1:a6:1c:6d:64:
         f8:c9:a8:5c:d4:3a:c7:0c:1c:67:e1:e1:6d:cc:81:52:f3:b9:
         5a:03:10:64:58:b0:fb:c5:81:2e:6b:8e:f7:40:cd:7b:86:e7:
         a6:35:00:dd:0c:11:1f:bd:79:57:05:94:dd:ba:5b:4c:9a:f3:
         77:7c:d0:6c:10:f7:0f:1d:9d:ca:98:d9:86:ab:ec:0f:e8:0b:
         ae:4d:d2:89:83:bd:c6:07:28:2a:cc:ec:98:0c:7b:32:db:08:
         5f:d5:9c:d4:9b:77:9d:2a:cd:fc:c9:b0:8e:09:0f:53:1d:16:
         6e:b3:22:f6:7e:9d:b6:7c:fe:65:9f:eb:a6:39:dc:55:c1:29:
         b3:56:b4:23:81:93:45:2b:f4:6e:34:bb:58:6c:8e:a0:10:2b:
         04:c3:15:0d:41:ea:6d:7c:3c:a4:f8:e1:5a:66:e3:01:46:11:
         8d:35:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:54 2025 by rpki-client