This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          vMlyuwJDbdeW7BMy8oQ5KHUq6laUI9Mcx8lC4RzBwpI=
Subject key identifier:   E6:8B:44:C9:12:DC:D2:D4:28:55:89:D9:AE:79:59:45:45:18:8F:90
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       06B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          06B5
Signing time:             Tue 09 Dec 2025 02:09:12 +0000
Manifest this update:     Tue 09 Dec 2025 02:09:11 +0000
Manifest next update:     Thu 11 Dec 2025 02:09:11 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: gL+Fz6Nma6Iq+xgh2RLQMXWmj4kPBMIDlwfovIwu+4o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Dec  9 02:09:11 2025 GMT
            Not After : Dec 11 02:09:11 2025 GMT
        Subject: CN=693784c8-1dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9e:14:08:78:4d:10:7b:4d:35:ac:1d:2f:fb:
                    9b:c7:61:61:dd:03:74:8e:f5:78:e1:0f:70:91:71:
                    8a:35:9f:fd:fa:9c:2c:86:ef:3a:20:30:fd:c9:03:
                    c0:58:9d:03:e0:bd:fe:e0:34:43:f8:df:84:ac:eb:
                    23:df:2c:ec:7b:c3:ff:cc:27:1c:5e:43:2f:f1:81:
                    fe:2f:ea:cb:65:a3:22:1b:7c:e0:af:9e:d8:ca:bb:
                    08:80:2c:20:38:e6:82:77:4f:ab:77:83:f4:0d:f2:
                    ab:80:13:78:63:b1:f1:70:39:82:69:40:09:36:07:
                    ea:c1:da:d3:c4:93:54:91:a8:f3:20:6f:5e:1a:7e:
                    8b:32:c9:5a:7e:ac:e4:90:c0:0e:ca:00:90:c8:da:
                    68:ce:5a:b0:2e:07:a4:38:c6:6a:c7:bb:f0:60:8c:
                    d4:d5:7d:0f:b4:0f:c3:87:b2:c8:6f:32:27:09:79:
                    50:7f:9d:98:fa:98:79:78:5c:bf:d4:e1:06:29:03:
                    95:43:e5:f0:b5:7b:3d:7e:e2:cc:10:bc:d9:5e:1c:
                    79:c2:0b:e9:fd:e2:2c:0c:a9:70:3a:39:c0:f3:9f:
                    e6:02:71:58:22:9a:b1:25:cc:a8:59:d6:b4:5f:c5:
                    e4:73:e8:67:81:42:47:0d:ef:5c:4c:84:c9:3b:19:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8B:44:C9:12:DC:D2:D4:28:55:89:D9:AE:79:59:45:45:18:8F:90
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2d:8e:b8:b5:8d:8e:79:9a:83:48:7a:ca:39:7d:c1:3b:45:
         81:b5:2b:cc:1c:64:70:fe:57:aa:e5:51:44:b5:54:7c:c8:96:
         97:d4:6b:e4:79:1e:3e:3f:9c:21:48:cd:af:54:18:70:5d:2d:
         25:96:c6:95:e2:4a:24:7c:3e:6c:e6:47:12:5e:a3:27:37:9d:
         74:06:12:fb:6f:b1:43:a5:8b:01:ba:0b:36:c7:ae:ff:eb:1f:
         67:02:c0:48:82:cc:ae:87:3a:15:2b:a0:cf:be:0e:4d:ce:de:
         f2:f2:82:f2:d6:73:50:31:89:74:f5:7e:32:b8:c0:50:d6:c6:
         1b:7b:e7:e3:ed:2f:b8:1e:70:17:1e:a3:73:06:73:d8:6a:cc:
         fc:e3:aa:23:d1:54:c6:2d:2f:18:98:29:56:38:ec:86:f7:d5:
         63:5d:80:a8:d6:a4:23:ad:f0:0b:96:58:c8:b7:18:84:51:f3:
         bd:84:d0:c9:8f:6f:5b:95:d5:f9:8a:94:65:06:b7:f9:bb:58:
         44:73:e3:90:40:89:e0:2d:14:35:63:03:25:75:bc:3d:e7:43:
         df:52:f2:74:03:0e:d5:35:95:ec:24:7d:6d:56:2c:fd:10:7e:
         41:0e:51:94:85:ec:9a:3f:22:54:e9:b8:0d:1d:25:c2:78:b8:
         a4:7a:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:53 2025 by rpki-client