This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          2S5/Txgp31J/1tr1VxymQUxd9k6G1vaSmW48wlL2UZc=
Subject key identifier:   58:40:36:9A:78:73:45:BE:2E:00:CA:A9:9B:B4:8E:D1:A2:C9:2E:CD
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       028E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          028C
Signing time:             Tue 09 Dec 2025 04:08:54 +0000
Manifest this update:     Tue 09 Dec 2025 04:08:53 +0000
Manifest next update:     Thu 11 Dec 2025 04:08:53 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: LlVbgQ4bNbRajcUDl+++nebKldQGenrqHBhjFQkGfPI=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Dec  9 04:08:53 2025 GMT
            Not After : Dec 11 04:08:53 2025 GMT
        Subject: CN=6937a0d6-0246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:5e:cf:91:26:88:b9:64:4e:13:4a:7b:e0:
                    eb:77:7a:09:ec:9c:7a:eb:f9:44:34:db:d3:d2:cc:
                    24:90:da:8b:95:3a:a8:7e:59:f4:a2:a7:e4:6e:31:
                    5d:73:3f:f9:d3:98:64:45:2f:82:9c:ad:49:0f:96:
                    da:a0:5d:d8:d2:fb:8b:b7:1e:a3:ca:09:4e:8e:2a:
                    1a:b7:9d:ce:2a:b4:8f:97:04:84:a8:7e:b2:f4:d3:
                    e0:2d:29:c6:0e:66:b5:29:61:1d:41:3d:9d:ec:5e:
                    3a:2d:a4:b7:cc:f6:e9:a2:cc:86:69:5c:5c:00:79:
                    a3:53:ef:ed:93:f3:03:3c:f7:b0:bb:3d:0a:62:42:
                    67:6e:a5:d1:77:a9:06:b6:f1:82:0c:03:f9:4e:90:
                    76:b3:51:55:ac:6b:7d:2b:4f:50:7b:da:a0:e1:50:
                    97:ce:d5:d0:fd:d3:0d:ee:76:28:32:3d:d6:33:e5:
                    f5:c6:6e:49:57:2e:72:00:67:71:6a:bd:9c:c7:b3:
                    e8:65:04:d1:21:87:70:8d:66:1e:0a:2c:f2:1f:29:
                    9d:9e:12:4a:49:38:70:d7:e5:81:6c:b9:7c:f5:f6:
                    86:26:d8:d5:73:dc:af:82:d2:18:dd:e5:4e:04:f9:
                    64:72:45:f9:15:92:5d:1f:2c:9e:90:b9:d1:34:3b:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:40:36:9A:78:73:45:BE:2E:00:CA:A9:9B:B4:8E:D1:A2:C9:2E:CD
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:be:44:a5:75:44:d5:f3:b8:2f:bf:90:30:bd:e1:34:d6:
         eb:45:f1:5a:60:96:b1:0c:18:cf:6e:4f:d0:16:b1:7f:35:a4:
         38:e8:e2:91:97:76:56:77:ee:94:0b:63:7a:64:4d:ac:ec:7c:
         b7:bd:c3:8e:cc:00:de:5d:0a:33:83:d6:8c:6e:3c:cd:4f:4c:
         16:96:0c:49:2e:89:fe:28:2c:eb:f1:a6:33:83:bd:59:d6:9d:
         2e:20:1a:e8:ab:8a:47:72:a6:d1:a6:05:54:b3:66:63:b5:5e:
         9a:96:e7:de:f1:a7:17:7b:1e:7e:f0:e3:43:be:7b:03:78:35:
         09:15:c8:95:50:58:37:59:b6:1f:6a:5b:29:80:4d:ef:87:52:
         53:54:c1:fc:9a:34:01:87:77:d1:31:70:27:8b:a1:ad:c1:53:
         99:48:4a:6c:e2:53:f8:0a:fd:05:8c:4e:75:92:13:44:03:f3:
         00:c7:8a:88:e2:eb:b6:7d:6a:d8:0f:58:13:1d:c6:8c:c2:0e:
         6f:cd:5b:11:cb:42:03:3c:95:bf:61:3d:ff:bb:be:19:9f:7f:
         7a:d8:9e:6b:91:4b:d6:33:0e:0f:4a:52:b9:2e:83:ce:6f:7d:
         cb:19:52:13:98:be:12:1e:59:67:2d:b6:ee:f0:3f:e5:0d:dd:
         15:34:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:31:39 2025 by rpki-client