This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
File:                     R_ufMc9PLRlxHITTLiO9AG4ALpY.mft (raw, json)
Hash identifier:          a60H2sb2iQc/gOTE9j53bwn+GSFsu2RmqbwNnxUDSIw=
Subject key identifier:   E5:1E:27:15:E2:7F:A2:D3:FB:8C:A8:8F:03:52:B5:7D:93:F7:0F:16
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Certificate issuer:       /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial:       0633
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
Manifest number:          062F
Signing time:             Tue 09 Dec 2025 02:27:14 +0000
Manifest this update:     Tue 09 Dec 2025 02:27:13 +0000
Manifest next update:     Thu 11 Dec 2025 02:27:13 +0000
Files and hashes:         1: R_ufMc9PLRlxHITTLiO9AG4ALpY.crl (hash: g7f2uLMNFk/G7tWNBHYLdsjHbFD9LUapbCHGBCEhM5I=)
                          2: 3CBE5F76212011ECA2098832D8A014CE.roa (hash: 8d9G2F7SeXBUC0RrFhpkoC1cMwO502CPGYGL0obQDBM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A36C8AF, serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
        Validity
            Not Before: Dec  9 02:27:13 2025 GMT
            Not After : Dec 11 02:27:13 2025 GMT
        Subject: CN=69378902-7022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:11:d2:0e:55:d6:55:dc:03:18:61:fb:18:
                    fb:92:05:20:d4:61:63:49:d9:9b:42:a7:12:e1:76:
                    4d:b5:e3:df:e9:47:ef:71:c8:23:db:39:64:a7:e3:
                    66:00:2e:22:e7:3f:b9:27:9d:07:2e:78:a8:cc:b5:
                    b1:66:dd:74:7d:21:74:fb:2d:4f:2f:e6:8b:33:d8:
                    48:ec:ba:e3:c8:71:b7:7d:34:c1:45:38:d6:47:0f:
                    d8:c5:5f:8a:88:25:01:02:74:53:47:29:87:d7:d9:
                    5e:03:e0:b9:29:3a:a7:c5:51:d0:96:92:e0:0a:7d:
                    d5:20:d5:6f:03:95:ff:15:0d:7c:18:65:ad:48:39:
                    be:91:4a:e5:81:50:f5:d0:10:22:5e:1f:cc:fe:d7:
                    e2:65:f8:b8:30:00:fd:b0:c8:d3:60:76:4f:f4:79:
                    57:22:b0:7b:26:35:ef:a4:c1:c7:2e:e4:30:20:3a:
                    86:d2:7e:0a:79:af:df:4d:15:db:3d:07:e7:d3:f9:
                    d1:7a:69:46:d1:49:45:56:03:a5:75:2a:45:f6:63:
                    b6:34:b5:a0:0f:5c:96:c1:c6:b2:a5:a6:1c:44:30:
                    0e:e2:8e:cf:9b:37:68:27:4b:14:d4:6e:cf:91:92:
                    b4:4f:01:ce:f9:48:99:ec:48:ac:67:57:87:09:ed:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1E:27:15:E2:7F:A2:D3:FB:8C:A8:8F:03:52:B5:7D:93:F7:0F:16
            X509v3 Authority Key Identifier:
                keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:7a:0b:76:95:da:02:04:f5:ad:bc:9c:18:6b:49:e1:e2:
         a5:bf:20:80:43:43:9b:79:b1:8c:98:da:33:6d:e4:04:99:56:
         68:c1:a1:12:47:cf:5b:4c:59:60:c3:d3:a5:cb:fd:0e:71:c6:
         2f:8d:46:f4:1e:9b:42:c4:6b:4d:65:7d:a0:01:98:86:c8:4d:
         ac:72:fe:37:42:4e:1b:bf:5a:9d:86:97:f6:3e:2d:1e:f1:77:
         01:f2:3f:22:1b:d3:4f:66:cc:d5:ef:55:32:d1:a9:6b:58:49:
         ce:27:8e:2b:e0:c1:05:6f:e7:b2:e1:cd:5b:73:68:e3:da:8e:
         7c:b5:3e:80:bc:27:31:15:c1:db:36:f5:ad:d6:ed:02:36:07:
         a4:58:10:ff:5d:00:37:57:c9:32:8e:0b:dd:8a:75:ef:0d:4a:
         5a:39:a8:3f:0c:57:db:7e:7f:7f:40:14:91:86:9c:67:6f:a8:
         c4:50:80:40:d8:1c:da:28:ac:c0:8d:6d:ef:1e:98:43:c7:fd:
         45:08:17:f5:23:27:ae:26:69:89:fa:5c:e7:5d:ab:a3:e5:cc:
         87:94:54:95:c0:fb:6e:6e:01:a7:a8:00:99:fa:76:ee:9e:76:
         9b:dd:b0:fc:93:80:de:3a:18:b5:2a:2f:81:10:9b:30:aa:0e:
         0e:85:0a:90
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM2QzhBRjExMC8GA1UEBRMoNDdGQjlGMzFDRjRGMkQxOTcxMUM4NEQzMkUyM0JE
MDA2RTAwMkU5NjAeFw0yNTEyMDkwMjI3MTNaFw0yNTEyMTEwMjI3MTNaMBgxFjAU
BgNVBAMTDTY5Mzc4OTAyLTcwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeOxHSDlXWVdwDGGH7GPuSBSDUYWNJ2ZtCpxLhdk2149/pR+9xyCPbOWSn
42YALiLnP7knnQcueKjMtbFm3XR9IXT7LU8v5osz2EjsuuPIcbd9NMFFONZHD9jF
X4qIJQECdFNHKYfX2V4D4LkpOqfFUdCWkuAKfdUg1W8Dlf8VDXwYZa1IOb6RSuWB
UPXQECJeH8z+1+Jl+LgwAP2wyNNgdk/0eVcisHsmNe+kwccu5DAgOobSfgp5r99N
Fds9B+fT+dF6aUbRSUVWA6V1KkX2Y7Y0taAPXJbBxrKlphxEMA7ijs+bN2gnSxTU
bs+RkrRPAc75SJnsSKxnV4cJ7ZjFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5R4n
FeJ/otP7jKiPA1K1fZP3DxYwHwYDVR0jBBgwFoAUR/ufMc9PLRlxHITTLiO9AG4A
LpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNkM4LzgyQUExNTBBMjEwRTExRUNBNkY3Q0MxN0Q4QTAxNENFL1JfdWZN
YzlQTFJseEhJVFRMaU85QUc0QUxwWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JfdWZNYzlQTFJseEhJVFRMaU85QUc0QUxwWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTM2QzgvODJBQTE1MEEyMTBFMTFFQ0E2RjdDQzE3RDhB
MDE0Q0UvUl91Zk1jOVBMUmx4SElUVExpTzlBRzRBTHBZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCd8noLdpXaAgT1rbycGGtJ4eKlvyCA
Q0ObebGMmNozbeQEmVZowaESR89bTFlgw9Oly/0OccYvjUb0HptCxGtNZX2gAZiG
yE2scv43Qk4bv1qdhpf2Pi0e8XcB8j8iG9NPZszV71Uy0alrWEnOJ44r4MEFb+ey
4c1bc2jj2o58tT6AvCcxFcHbNvWt1u0CNgekWBD/XQA3V8kyjgvdinXvDUpaOag/
DFfbfn9/QBSRhpxnb6jEUIBA2BzaKKzAjW3vHphDx/1FCBf1IyeuJmmJ+lznXauj
5cyHlFSVwPtubgGnqACZ+nbunnab3bD8k4DeOhi1Ki+BEJswqg4OhQqQ
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:54 2025 by rpki-client