This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          yhZSMfZ8z/0cmkMj8dalIpefPXGRk2DW9U+isDJXzlo=
Subject key identifier:   8C:25:C1:C0:FB:4E:1B:90:F7:DF:35:DE:5C:EF:D7:B7:63:E5:87:D7
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       01EC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          01EC
Signing time:             Sun 21 Dec 2025 04:28:01 +0000
Manifest this update:     Sun 21 Dec 2025 04:28:00 +0000
Manifest next update:     Tue 23 Dec 2025 04:28:00 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: rVBXvGT1qOXmj/GRKi2s6DvInG9wAvTb+p32oqHmbsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 04:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Dec 21 04:28:00 2025 GMT
            Not After : Dec 23 04:28:00 2025 GMT
        Subject: CN=69477750-35c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d9:39:6f:2a:66:43:55:4e:a5:90:a7:24:f7:
                    2d:6f:97:c3:f6:15:db:8d:5d:fc:c7:93:53:1a:1c:
                    10:45:99:ca:2b:e6:a3:16:06:65:cc:f1:2c:1c:f7:
                    74:74:ce:6b:5f:8a:85:6c:2c:9d:c6:88:bb:88:64:
                    f3:52:89:80:5e:c2:2b:e7:e9:49:3b:79:4a:08:12:
                    51:52:ef:a4:22:ef:a0:30:8e:e0:20:08:bd:3c:c1:
                    e8:df:0c:12:9f:df:b8:d1:79:5e:74:f6:07:a2:31:
                    ab:8e:78:a3:21:00:7b:44:9e:2b:04:7c:ba:50:84:
                    db:13:f4:66:d7:b3:ee:9b:0a:07:18:f0:58:3a:97:
                    7b:d1:8b:34:8d:76:5b:ac:f7:03:e9:d9:b4:16:4a:
                    74:c9:73:2e:ef:dc:c7:04:70:59:6b:54:a4:90:e5:
                    5d:d3:0d:f1:20:69:09:96:12:d7:b9:f1:45:08:d9:
                    62:20:87:51:de:a8:74:1a:08:08:0a:45:10:01:99:
                    b2:6d:39:26:5c:76:da:5d:ce:aa:e4:96:4f:2b:1c:
                    22:69:63:6d:5c:42:e2:2c:97:c5:f5:6c:7b:fd:d3:
                    a4:f1:c5:86:4d:f2:ee:4a:9e:c5:7d:f7:bf:07:f5:
                    b7:8b:df:79:a0:88:9e:eb:65:a4:22:3e:cf:7f:bb:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:25:C1:C0:FB:4E:1B:90:F7:DF:35:DE:5C:EF:D7:B7:63:E5:87:D7
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:0f:35:1d:5c:41:b5:ed:04:3d:37:4a:cf:22:43:50:48:
         12:f8:25:94:02:48:d4:78:29:55:5d:96:b7:23:1c:3c:38:d6:
         af:42:e1:5c:d0:53:e1:30:3c:40:f4:8a:6a:61:4a:c9:69:71:
         fd:fd:b1:04:93:43:93:81:70:84:50:39:d7:54:be:65:17:d4:
         4b:e6:2e:7c:c9:ce:71:61:1c:44:4e:d4:1d:1f:3c:37:ba:c0:
         6b:37:02:24:2e:7f:0c:bf:65:5c:3a:08:bf:77:a0:2a:71:47:
         54:9b:e8:78:a8:11:1e:75:f6:20:e9:be:18:7a:77:a0:1b:67:
         80:29:14:48:f0:d2:3f:9c:4d:d9:84:8a:aa:ed:fa:5b:2e:c2:
         81:e4:52:7b:8b:11:df:1c:f6:8e:e4:99:5a:2d:2c:00:cc:b9:
         fc:8a:59:94:2e:70:4f:7d:b4:57:7d:7a:76:2b:72:60:2b:ce:
         03:4b:d3:31:4c:c4:16:ce:a0:8d:89:53:85:7b:71:c5:43:76:
         d7:c2:76:2d:f8:8c:79:a1:36:ba:37:c5:ed:23:90:3e:4d:92:
         ee:ec:9c:ee:9d:62:f3:37:89:d7:97:f0:24:86:66:8c:2a:a2:
         17:24:56:85:b6:18:57:a2:b8:1e:1f:b3:2c:5d:36:5e:8e:cd:
         6f:69:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:34:54 2025 by rpki-client