This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
File:                     mwftdzFoum4LC-Pl3LLPeB96yCo.mft (raw, json)
Hash identifier:          pwOwuUg/EeownR45ILU+FfzDFbUHulpm1ptJLYFwcnw=
Subject key identifier:   39:42:4C:8D:09:1B:26:1B:2B:78:60:61:8E:68:EF:78:73:C2:DC:18
Authority key identifier: 9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Certificate issuer:       /CN=F3668037RI/serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
Certificate serial:       0D8E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
Manifest number:          0D8C
Signing time:             Thu 11 Dec 2025 01:03:26 +0000
Manifest this update:     Thu 11 Dec 2025 01:03:25 +0000
Manifest next update:     Sat 13 Dec 2025 01:03:25 +0000
Files and hashes:         1: mwftdzFoum4LC-Pl3LLPeB96yCo.crl (hash: DFHuxprMPGn23oB/Zun8ibzjYUqMxHWaM/UlBv3VpoY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                          rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3470 (0xd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037RI, serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
        Validity
            Not Before: Dec 11 01:03:25 2025 GMT
            Not After : Dec 13 01:03:25 2025 GMT
        Subject: CN=693a185e-4c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:8d:3d:91:a6:7b:57:a3:df:dd:0d:1d:24:
                    78:62:8a:b5:6f:bc:a9:19:08:8b:7c:5e:6a:bf:e9:
                    90:7e:07:c8:65:2e:06:50:9f:ef:66:f0:94:4f:49:
                    38:5e:29:3b:33:ce:76:e6:82:3c:21:37:81:b2:34:
                    dc:94:f3:fa:bc:0e:ef:7e:9d:5f:72:0b:bd:be:50:
                    dd:fc:f5:12:58:31:93:fc:80:3f:64:b0:31:8e:33:
                    ff:91:d8:18:f3:05:f3:31:39:dc:b4:a1:d6:e6:2b:
                    9c:4a:70:6c:8a:4d:d8:06:8b:95:40:9d:ef:df:70:
                    44:84:9c:56:da:a7:58:31:92:3d:a9:04:bb:a7:c2:
                    bc:96:96:57:24:66:c2:54:ec:65:2c:e9:b7:bb:ff:
                    66:26:06:f8:67:1b:af:cc:23:48:de:c2:ff:ba:b0:
                    c1:44:7c:13:83:05:aa:86:c6:f3:c6:e8:d8:23:8f:
                    41:38:93:ea:f9:55:77:53:92:67:0b:79:e9:e4:f8:
                    62:e7:a4:6b:6d:58:1e:a8:e0:3f:b8:33:b0:fc:ff:
                    9c:29:fc:b9:d5:de:94:ae:07:f5:07:a4:a0:ec:aa:
                    6c:50:40:8e:5d:32:4c:d0:cf:9b:79:9a:2e:d3:cc:
                    a6:d8:d0:32:46:8d:a6:98:e9:1f:98:92:03:9f:53:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:4C:8D:09:1B:26:1B:2B:78:60:61:8E:68:EF:78:73:C2:DC:18
            X509v3 Authority Key Identifier:
                keyid:9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a9:50:fb:3d:97:b9:c1:09:a4:80:74:0d:16:15:3c:27:5e:
         dc:bb:cf:af:7f:2e:33:ec:0d:91:c0:64:92:d5:8a:e8:a7:3b:
         44:74:6a:3d:a4:bf:99:82:1c:13:7b:32:ef:ba:33:03:75:f8:
         0a:cd:fe:35:2b:fa:56:d3:39:7d:6a:db:00:ae:78:ff:98:99:
         a8:84:95:e6:25:03:a9:df:75:70:15:8e:85:f4:4d:bc:6d:fb:
         8f:6f:72:34:65:54:32:49:68:0b:70:be:e8:07:3b:9f:e5:a4:
         68:58:3f:4d:01:83:1e:7c:15:9c:89:35:69:c3:61:32:03:7c:
         c4:dd:47:2d:41:8c:3a:88:66:db:2b:6a:97:89:14:74:56:bc:
         e2:2b:27:39:3d:d6:13:e2:9b:7a:07:b5:e0:24:ab:73:12:a4:
         39:eb:9b:2e:78:f7:d1:3b:45:5f:62:56:9e:8e:59:65:92:d0:
         68:30:4a:64:b8:f3:68:7b:38:75:58:a5:6d:de:90:0f:ce:9b:
         e4:a0:e5:e0:69:38:54:28:ac:55:f7:fe:ff:ee:8c:dd:9f:a6:
         5b:df:ce:fa:41:d3:54:13:d6:2e:f0:5e:91:da:ae:b1:f3:f5:
         a9:cd:a4:63:49:4c:64:b1:0d:37:db:09:fc:3c:1c:bf:f8:35:
         2d:f6:d8:36
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDY4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgwMzdSSTExMC8GA1UEBRMoOUIwN0VENzczMTY4QkE2RTBCMEJFM0U1RENCMkNG
NzgxRjdBQzgyQTAeFw0yNTEyMTEwMTAzMjVaFw0yNTEyMTMwMTAzMjVaMBgxFjAU
BgNVBAMTDTY5M2ExODVlLTRjOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXqY09kaZ7V6Pf3Q0dJHhiirVvvKkZCIt8Xmq/6ZB+B8hlLgZQn+9m8JRP
STheKTszznbmgjwhN4GyNNyU8/q8Du9+nV9yC72+UN389RJYMZP8gD9ksDGOM/+R
2BjzBfMxOdy0odbmK5xKcGyKTdgGi5VAne/fcESEnFbap1gxkj2pBLunwryWllck
ZsJU7GUs6be7/2YmBvhnG6/MI0jewv+6sMFEfBODBaqGxvPG6Ngjj0E4k+r5VXdT
kmcLeenk+GLnpGttWB6o4D+4M7D8/5wp/LnV3pSuB/UHpKDsqmxQQI5dMkzQz5t5
mi7TzKbY0DJGjaaY6R+YkgOfUwD/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUOUJM
jQkbJhsreGBhjmjveHPC3BgwHwYDVR0jBBgwFoAUmwftdzFoum4LC+Pl3LLPeB96
yCowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MDM3LzNCMjRDQ0FDNkRDNzExRTY4QzVDNDQyREY4QUVBMjI4L213ZnRk
ekZvdW00TEMtUGwzTExQZUI5NnlDby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L213ZnRkekZvdW00TEMtUGwzTExQZUI5NnlDby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjgwMzcvM0IyNENDQUM2REM3MTFFNjhDNUM0NDJERjhBRUEy
MjgvbXdmdGR6Rm91bTRMQy1QbDNMTFBlQjk2eUNvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkqVD7PZe5wQmkgHQNFhU8J17cu8+vfy4z
7A2RwGSS1YropztEdGo9pL+ZghwTezLvujMDdfgKzf41K/pW0zl9atsArnj/mJmo
hJXmJQOp33VwFY6F9E28bfuPb3I0ZVQySWgLcL7oBzuf5aRoWD9NAYMefBWciTVp
w2EyA3zE3UctQYw6iGbbK2qXiRR0VrziKyc5PdYT4pt6B7XgJKtzEqQ565suePfR
O0VfYlaejlllktBoMEpkuPNoezh1WKVt3pAPzpvkoOXgaThUKKxV9/7/7ozdn6Zb
3876QdNUE9Yu8F6R2q6x8/WpzaRjSUxksQ032wn8PBy/+DUt9tg2
-----END CERTIFICATE-----
Generated at Thu Dec 11 20:08:12 2025 by rpki-client