This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          Vs8QdQbvOrC+m3nUrkae7onurG9wcK3t+nLO2zgjQGs=
Subject key identifier:   98:E8:8B:2E:B4:90:67:2D:D8:A6:49:A6:C4:A9:33:32:E0:40:6B:A7
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       0274
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          026E
Signing time:             Tue 09 Dec 2025 04:12:39 +0000
Manifest this update:     Tue 09 Dec 2025 04:12:38 +0000
Manifest next update:     Thu 11 Dec 2025 04:12:38 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: xlQ9zigZwsSXmznKfCuCxyfFk53da2yBpRZ6LnNcyXU=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Dec  9 04:12:38 2025 GMT
            Not After : Dec 11 04:12:38 2025 GMT
        Subject: CN=6937a1b7-149a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:da:34:67:4f:97:ce:ca:f3:98:e2:23:7b:
                    58:db:1c:12:0a:9d:28:96:86:a6:a7:aa:21:1e:55:
                    a7:f7:77:48:dd:c3:37:1e:40:0f:5c:a0:57:e7:d7:
                    88:ae:ea:8c:ea:42:9b:9c:26:ed:b7:57:55:f1:0d:
                    8c:3e:1e:37:d4:46:33:2b:92:3a:ab:f4:a7:97:15:
                    2b:7f:21:d0:f8:06:66:f6:cd:d5:64:05:28:81:9e:
                    38:31:a6:47:78:bf:bc:d1:62:93:0b:5e:d7:01:d4:
                    d6:e5:6d:2c:81:e1:62:d9:04:97:f5:2b:f0:86:22:
                    32:ac:fd:98:c2:1f:75:b4:41:12:3b:1a:96:da:6b:
                    8c:f0:27:1e:26:10:67:df:96:74:64:09:93:09:1a:
                    37:75:87:b2:da:58:c6:6f:f9:6d:86:12:a4:57:11:
                    8c:b3:c5:f8:de:55:a3:89:6b:84:2b:f5:17:b6:1b:
                    15:ea:66:1c:cf:d6:99:7e:d3:fa:7c:8e:80:04:7e:
                    a3:01:f4:05:57:ba:57:57:6a:dc:ce:4e:00:33:13:
                    c7:bd:a3:44:eb:30:b3:31:67:86:a4:e2:04:05:9d:
                    25:28:6c:a3:00:40:50:e7:2e:b4:05:fc:51:fa:bc:
                    8b:11:d0:40:26:d8:e7:58:c7:5f:d6:51:13:35:71:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:8B:2E:B4:90:67:2D:D8:A6:49:A6:C4:A9:33:32:E0:40:6B:A7
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9f:2f:c8:29:b7:91:af:ee:e2:3c:23:64:29:0d:72:f8:43:
         ef:58:93:d3:1f:c6:22:ee:b0:4e:77:d6:88:d2:4b:74:8e:64:
         e7:1a:7b:59:19:9d:3d:c0:cc:f1:9f:0f:4c:9d:e1:7e:4c:5c:
         80:bd:f6:e7:eb:73:b4:11:34:38:b3:2d:4d:54:80:38:72:76:
         7f:e5:75:41:4d:88:ac:6c:f6:44:3e:ae:ff:ee:19:58:3e:6c:
         07:b1:72:7b:6c:73:8b:3b:44:99:4c:98:d3:d7:63:91:fc:82:
         4a:84:6c:fd:3a:d4:b7:bf:1b:ac:9f:97:e1:a4:09:20:8b:c6:
         57:63:a3:72:98:6a:44:23:c3:12:00:a0:c1:ad:d2:13:82:1c:
         43:7a:ca:1b:0a:69:8f:aa:62:cc:40:14:78:b8:7b:51:a0:f9:
         5d:1e:f9:b2:f5:3e:e6:53:f2:10:8f:b6:1e:23:d3:83:5c:dc:
         bb:a2:1d:f4:47:64:a1:28:17:4c:38:10:9b:98:8f:12:c4:0f:
         e7:91:e7:ed:2d:76:03:a6:71:8a:f3:10:28:31:69:83:15:fc:
         eb:28:33:39:60:87:33:76:55:da:05:95:64:01:ce:7d:6c:6e:
         0d:ba:1f:b5:b3:34:3f:68:5e:49:51:fb:c2:19:f2:28:7d:72:
         e2:b8:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:45 2025 by rpki-client