This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          sBSsBAXDBdHkGEukI4wHqLcLh9wIGXxwPKfd+ZM4z78=
Subject key identifier:   41:7F:A5:C9:1D:CA:0B:67:D3:8A:8A:CE:F0:03:ED:5A:70:61:65:F0
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       078C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          0786
Signing time:             Thu 11 Dec 2025 01:56:53 +0000
Manifest this update:     Thu 11 Dec 2025 01:56:52 +0000
Manifest next update:     Sat 13 Dec 2025 01:56:52 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: 4lW7v+S3zbY+YlAh3evaFYHom8DMivuNs/k2TcExAVs=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Dec 11 01:56:52 2025 GMT
            Not After : Dec 13 01:56:52 2025 GMT
        Subject: CN=693a24e5-3249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:2a:20:88:84:52:2a:ba:94:ae:ae:32:2d:aa:
                    47:2d:0d:07:b0:dd:10:e2:9b:ee:5c:a0:4d:53:d8:
                    fc:76:a9:a9:25:35:37:32:ea:03:1d:6e:67:af:47:
                    36:30:81:46:a1:72:5d:51:d8:04:dc:b6:5c:e7:e7:
                    0a:ab:18:87:4c:b6:e9:ed:d7:f3:36:93:2a:f1:9b:
                    94:dc:d5:ec:79:ba:1b:50:01:e2:2d:23:eb:c6:7e:
                    e6:a6:a8:cf:5d:63:29:bc:af:82:fa:62:cf:de:8c:
                    1d:b5:43:34:08:de:44:78:2d:14:e0:9c:50:e2:01:
                    ff:bf:8c:92:58:33:5f:51:dd:01:45:ba:0f:af:d1:
                    7a:d0:57:12:71:10:57:e9:4f:16:36:7c:3b:b9:dd:
                    2a:a0:f9:64:4d:bb:26:86:ee:21:ee:df:a2:0a:aa:
                    00:57:46:0e:09:d3:e6:60:56:32:03:25:8c:04:7a:
                    1d:ee:59:84:19:77:9b:b7:1c:2a:8b:21:e1:34:1c:
                    d2:97:ac:59:3c:21:9e:7e:88:05:be:82:09:ff:56:
                    43:bc:7f:98:6e:b1:c8:8d:e3:22:89:f1:f1:e4:64:
                    ef:da:7c:d1:54:19:99:9b:5c:0a:43:07:51:c4:1e:
                    a9:5f:d3:da:7e:99:9a:48:8f:83:f3:13:4e:43:08:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7F:A5:C9:1D:CA:0B:67:D3:8A:8A:CE:F0:03:ED:5A:70:61:65:F0
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:db:47:d0:5e:09:17:fd:0d:d8:f2:55:8d:3a:14:e1:e2:
         e6:bf:8b:40:52:ef:ab:41:64:4a:8a:02:11:53:e8:6d:5f:88:
         54:14:e9:39:70:a0:64:7c:d0:a7:50:fb:f2:82:e4:32:2f:b4:
         f1:d5:2f:ac:3f:8e:2f:53:d8:ac:da:80:f9:42:34:bc:ba:be:
         03:f1:40:f3:3e:8a:82:e8:54:86:bc:e4:b4:62:b3:7f:2f:64:
         ce:83:87:f1:82:49:61:93:33:74:97:e0:0a:39:e9:7b:b0:e4:
         11:e2:ec:69:11:6a:74:e9:04:74:fa:7f:2c:64:bf:32:85:65:
         62:63:16:5b:83:f6:d3:a7:0e:4d:5b:94:e6:e8:0a:3e:c3:1f:
         a0:4d:7c:04:60:05:ac:66:b5:37:2c:0b:37:29:cb:4a:3b:0d:
         ed:18:f9:72:e3:84:1e:d8:90:78:72:01:09:c6:67:b9:bd:44:
         65:0d:8e:90:cb:3a:29:76:00:5b:04:7f:66:fe:bb:60:4e:6b:
         0d:72:b0:56:90:e5:1b:29:4b:b9:6b:50:5e:94:44:84:f1:f3:
         11:ba:a5:a8:2f:47:e2:c3:e1:69:e5:0d:50:2e:1c:74:25:93:
         eb:80:36:79:8a:7f:e1:ce:ff:a5:35:57:d0:1a:ee:c0:6e:0b:
         7d:52:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:09:48 2025 by rpki-client