This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          VlQMgqPAJJ1k1KKstNoyvDpVLz0PePwUhLyuhD4LetA=
Subject key identifier:   8C:BD:88:AF:CC:93:AB:62:4C:74:B0:99:D3:70:9B:B7:68:5F:3E:29
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       08EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          08E6
Signing time:             Tue 09 Dec 2025 01:38:27 +0000
Manifest this update:     Tue 09 Dec 2025 01:38:26 +0000
Manifest next update:     Thu 11 Dec 2025 01:38:26 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: hMVMyffblWk/4soYQjH2XQrfHpTAoJR+AWIJzWG9aQE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Dec  9 01:38:26 2025 GMT
            Not After : Dec 11 01:38:26 2025 GMT
        Subject: CN=69377d93-a889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:15:f0:c6:c0:e6:25:77:1c:94:83:25:0f:
                    8e:3f:94:97:ad:28:d4:6a:8e:40:be:24:1e:61:70:
                    32:4c:98:42:2f:23:2e:cf:27:3c:6f:30:d7:6a:a3:
                    4e:f2:2f:76:7f:7c:70:0a:c7:3c:ea:f8:4a:18:2e:
                    a6:be:2c:c1:67:25:f2:f1:f1:df:c7:21:62:1d:83:
                    8d:36:9d:6e:a4:09:00:e8:e0:ea:77:71:50:32:70:
                    ce:8e:ea:06:d5:7a:ec:a0:11:ef:3e:c5:11:de:e0:
                    b4:f6:24:a4:1a:39:1a:f2:79:76:d1:2e:45:3d:24:
                    1e:21:5c:8d:2b:86:a4:08:35:3c:ce:03:01:0d:33:
                    ee:de:1b:61:b9:22:b7:0f:65:9a:18:17:0f:b3:e8:
                    1c:7f:0f:31:3f:f4:7b:89:cf:55:3a:84:95:9c:85:
                    d6:1c:70:63:c3:b2:3f:ad:c0:b2:fb:0d:51:e6:9b:
                    02:05:8a:73:b9:ef:25:5d:63:4e:a3:f2:65:85:62:
                    21:7e:d9:9f:d7:a7:e9:1a:75:35:b2:f7:e4:9b:54:
                    29:05:9b:b2:52:f3:c7:1c:0f:95:de:fc:2c:7f:5c:
                    19:2c:bb:67:e5:b0:6c:73:2c:37:cc:66:ea:12:13:
                    0c:9f:73:d5:73:d3:bc:0f:79:fc:f1:b0:c0:54:9b:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:88:AF:CC:93:AB:62:4C:74:B0:99:D3:70:9B:B7:68:5F:3E:29
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a4:49:c9:63:5c:bb:1c:3f:ff:33:0e:6f:f8:e9:9f:7c:43:
         c1:b8:65:94:20:02:ae:18:cf:60:73:90:59:af:d3:4e:5a:8c:
         37:11:2f:2d:f5:c0:73:ae:d0:2e:f6:a1:5f:79:17:5f:6f:38:
         d0:b0:5c:8b:7d:6e:6c:d0:7b:c8:3c:f5:91:2c:67:33:ea:15:
         24:49:4b:93:25:73:53:18:02:bb:2c:0b:86:41:16:aa:aa:f6:
         07:25:f6:6a:6c:0d:f1:e7:04:16:30:59:e8:57:82:fb:e9:13:
         41:b6:d2:f5:1b:e3:a9:ff:2c:fa:7b:bb:c0:f1:56:62:47:88:
         18:f2:ed:02:d5:fb:29:64:3a:87:34:22:e4:a6:6d:40:84:ba:
         fc:51:7f:21:71:5c:be:db:08:24:31:77:85:8e:0a:ab:58:21:
         f5:a6:90:08:f7:d5:61:e7:60:4b:27:6b:6e:56:2c:54:94:cd:
         89:3b:f9:15:69:07:c9:f3:83:23:be:d5:fb:88:f8:30:f2:3b:
         c5:71:e8:77:80:fa:71:39:8b:cb:d0:ef:50:a8:16:78:9a:de:
         0c:4c:df:90:7f:b5:6f:33:ca:17:66:aa:50:76:00:bb:4f:cf:
         ab:a7:b7:f4:28:fa:ba:e6:47:79:9e:1d:3b:e8:62:ec:f3:8f:
         a9:74:21:36
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCOswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzFCQjRBRjExMC8GA1UEBRMoRjcyQUM3NkJCMDdFNDREREM3QUM2MEU2NjMxRjFD
RDJFREYwMzVERDAeFw0yNTEyMDkwMTM4MjZaFw0yNTEyMTEwMTM4MjZaMBgxFjAU
BgNVBAMTDTY5Mzc3ZDkzLWE4ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHixXwxsDmJXcclIMlD44/lJetKNRqjkC+JB5hcDJMmEIvIy7PJzxvMNdq
o07yL3Z/fHAKxzzq+EoYLqa+LMFnJfLx8d/HIWIdg402nW6kCQDo4Op3cVAycM6O
6gbVeuygEe8+xRHe4LT2JKQaORryeXbRLkU9JB4hXI0rhqQINTzOAwENM+7eG2G5
IrcPZZoYFw+z6Bx/DzE/9HuJz1U6hJWchdYccGPDsj+twLL7DVHmmwIFinO57yVd
Y06j8mWFYiF+2Z/Xp+kadTWy9+SbVCkFm7JS88ccD5Xe/Cx/XBksu2flsGxzLDfM
ZuoSEwyfc9Vz07wPefzxsMBUm/FvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjL2I
r8yTq2JMdLCZ03Cbt2hfPikwHwYDVR0jBBgwFoAU9yrHa7B+RN3HrGDmYx8c0u3w
Nd0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcxQkI0LzAyRTY0NkY4MDYxRDExRUFCQzM4NjI1NkY4QUVBMjI4Lzl5ckhh
N0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzl5ckhhN0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzFCQjQvMDJFNjQ2RjgwNjFEMTFFQUJDMzg2MjU2RjhB
RUEyMjgvOXlySGE3Qi1STjNIckdEbVl4OGMwdTN3TmQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhpEnJY1y7HD//Mw5v+OmffEPBuGWU
IAKuGM9gc5BZr9NOWow3ES8t9cBzrtAu9qFfeRdfbzjQsFyLfW5s0HvIPPWRLGcz
6hUkSUuTJXNTGAK7LAuGQRaqqvYHJfZqbA3x5wQWMFnoV4L76RNBttL1G+Op/yz6
e7vA8VZiR4gY8u0C1fspZDqHNCLkpm1AhLr8UX8hcVy+2wgkMXeFjgqrWCH1ppAI
99Vh52BLJ2tuVixUlM2JO/kVaQfJ84MjvtX7iPgw8jvFceh3gPpxOYvL0O9QqBZ4
mt4MTN+Qf7VvM8oXZqpQdgC7T8+rp7f0KPq65kd5nh076GLs84+pdCE2
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:26:20 2025 by rpki-client