This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          YkZhomtyDo+lWqq0+fzsOVxd3la0EujgeMJprFcdR+I=
Subject key identifier:   A6:C1:FC:A4:EA:39:FA:70:50:8B:35:69:70:E1:5D:6B:1A:06:C7:65
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       01E2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          01E2
Signing time:             Thu 11 Dec 2025 04:30:44 +0000
Manifest this update:     Thu 11 Dec 2025 04:30:43 +0000
Manifest next update:     Sat 13 Dec 2025 04:30:43 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: gIrt7fztdTM7DftdJFU6JxRmlXZqhgFQ0zTb/oGHhFw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Dec 11 04:30:43 2025 GMT
            Not After : Dec 13 04:30:43 2025 GMT
        Subject: CN=693a48f4-553d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:1f:25:6c:8b:db:29:bb:c7:6f:6a:67:0c:
                    70:bb:80:2a:6f:5e:5e:8a:10:b7:ad:47:47:5a:50:
                    69:72:b5:67:80:1d:49:6c:79:3b:ad:ef:b7:a7:e3:
                    64:58:2f:96:71:ae:08:9d:72:76:bf:c0:de:e1:fe:
                    ab:c1:d9:bd:3d:33:1d:e8:5c:57:ba:f0:b5:96:84:
                    a4:30:69:d6:7c:a4:2f:2a:e7:e2:91:92:ab:f6:45:
                    ad:f8:67:41:26:24:0b:3a:b6:e1:78:b2:7e:d1:78:
                    66:1e:ac:53:7c:b1:5c:b9:ca:ff:10:49:c7:aa:13:
                    d4:ad:21:da:bb:8a:11:17:75:ad:0a:3e:c5:3f:53:
                    36:f9:be:67:8e:46:ec:72:3f:56:8d:d8:b3:e3:2b:
                    06:b3:b2:fc:dd:44:07:56:74:f2:13:16:98:1a:7f:
                    f6:16:ce:47:0e:6a:a5:fb:3d:31:51:3a:0b:e1:8f:
                    dc:a8:b6:be:fb:1b:5a:57:57:30:62:52:98:d1:15:
                    72:60:ad:35:df:2a:3b:8c:3a:e6:44:e0:c5:11:89:
                    07:7e:7e:d0:7c:b1:2e:6e:e9:89:3b:48:d9:c0:3f:
                    7f:c1:d0:3b:a4:e4:7f:e9:5a:76:9a:86:50:5c:1a:
                    fd:cb:b5:2a:9a:05:30:ce:d0:ec:f5:e6:ef:21:54:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:FC:A4:EA:39:FA:70:50:8B:35:69:70:E1:5D:6B:1A:06:C7:65
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:ab:e3:22:02:1d:1e:7c:d2:c2:21:9b:3b:f8:6b:af:c4:
         1c:09:a2:ed:a6:dd:22:68:ef:e0:0b:59:ef:89:86:5c:b4:e9:
         5d:cf:57:35:df:05:2c:34:ee:c0:db:ba:6f:b9:68:c6:67:0e:
         c0:f3:84:1a:16:c1:3d:50:8f:00:b5:cf:eb:63:df:fe:06:67:
         bb:9e:54:90:3f:54:31:6c:1d:48:ae:21:d4:a3:f2:8d:8d:fe:
         09:47:ea:62:8b:52:90:db:56:2e:e9:97:68:fd:06:8a:65:73:
         84:bf:f9:87:66:9e:e8:34:70:78:50:0a:37:68:42:fb:3c:de:
         d5:00:63:bb:32:2b:77:4d:1d:6c:34:45:a9:16:88:b7:da:76:
         e0:e8:7d:84:97:19:38:64:2a:a7:97:ad:24:6f:3c:79:05:fd:
         a5:10:44:8a:5b:6e:dc:c8:c1:97:df:b5:cd:db:da:74:a6:17:
         11:09:b9:e0:33:02:44:08:46:2e:ef:ff:ba:da:ba:a6:57:13:
         09:bf:96:bf:20:73:6a:44:39:ba:5c:37:09:ff:f9:e8:f7:79:
         3e:4d:9b:00:e5:31:cf:16:08:91:96:f5:a1:cb:fb:c9:d9:ca:
         cb:d1:24:7d:05:1a:01:d1:91:56:9a:86:06:ac:6c:7a:52:8e:
         a7:e0:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:08:14 2025 by rpki-client