This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          4itIKrugAucA9u1Uk60aJdPAPiud+iGbP505sSk5sEs=
Subject key identifier:   2C:5D:2F:5D:32:81:31:0F:21:36:A3:56:69:CC:FA:30:69:48:C1:9D
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       0797
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          0791
Signing time:             Mon 22 Dec 2025 01:57:12 +0000
Manifest this update:     Mon 22 Dec 2025 01:57:11 +0000
Manifest next update:     Wed 24 Dec 2025 01:57:11 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: XzZo0CC/8FDKZxDrt4r+ossk0N3EurK+3FTzTdBk38Y=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943 (0x797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Dec 22 01:57:11 2025 GMT
            Not After : Dec 24 01:57:11 2025 GMT
        Subject: CN=6948a578-6b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:37:c6:7c:84:71:42:e8:ee:c9:11:8d:fe:
                    58:38:31:4d:ec:90:75:a5:f6:5d:70:c7:88:b7:c6:
                    e6:93:6b:37:71:16:ef:d2:aa:b5:c3:bc:8c:cb:b9:
                    10:f2:56:79:d5:47:9e:56:9e:cc:53:a5:14:c5:3c:
                    a0:fa:5e:6c:28:4f:23:20:6c:ce:9c:5a:48:8a:89:
                    db:6e:da:13:18:97:25:85:73:14:cb:13:6f:cf:9a:
                    75:34:3a:f6:6d:4c:6f:ad:df:28:22:36:8c:19:8a:
                    c4:db:f0:ca:af:20:56:92:13:9d:ba:0c:78:de:24:
                    c0:15:07:2a:e4:59:bb:ea:2a:77:a4:e6:27:df:2f:
                    ab:5c:f1:b4:3d:ae:d1:a0:60:f3:08:57:01:9f:b0:
                    76:c1:8e:23:2f:21:6f:f9:4d:f3:63:db:53:a2:ae:
                    8f:0c:dd:8c:01:61:c7:28:0e:1c:c7:12:2a:96:66:
                    a2:c2:49:ae:7e:bb:1b:b7:15:c1:b6:b2:43:e3:33:
                    a1:2b:0d:79:94:ad:00:d2:be:32:33:db:0a:78:4d:
                    01:8b:86:5f:d9:75:ad:aa:e3:a8:45:c7:79:40:32:
                    45:76:66:46:75:2b:b9:90:63:35:49:2b:de:e7:bf:
                    98:39:b1:d1:66:53:fc:e9:5c:9b:a2:50:0f:e9:2b:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5D:2F:5D:32:81:31:0F:21:36:A3:56:69:CC:FA:30:69:48:C1:9D
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:d8:b3:11:82:65:a1:48:1c:fd:ed:c5:22:09:17:db:9f:
         a9:d1:8f:9e:4e:85:9f:86:cd:9a:d7:0b:d8:a2:f2:ba:b5:1b:
         3f:9d:a6:fd:b2:49:cf:85:51:28:9b:0f:ae:5d:6b:e8:bd:46:
         27:cd:b6:32:6d:8d:e3:df:f2:52:b1:d9:01:74:88:72:1b:f4:
         fa:57:45:a8:0b:e9:be:e3:7c:fe:0e:4f:c3:95:5d:e2:c7:f5:
         a6:c2:8c:b9:36:86:f0:18:f9:c0:d1:7f:55:00:65:80:84:72:
         1f:df:e2:65:b4:89:dc:c1:81:63:bf:a1:47:4d:93:5b:80:06:
         32:db:40:dc:18:f2:8c:69:8c:88:f1:ca:4c:58:f8:4e:71:9b:
         c8:d8:5a:65:cb:b4:f4:be:80:ea:1d:4d:cc:a7:1a:bd:01:ef:
         f0:18:4c:2b:b8:95:84:9e:7f:d0:d8:93:3e:bc:2f:7d:dd:2b:
         07:70:72:f5:50:34:0a:f6:9a:e7:c4:a7:bc:7a:9a:6c:7a:fe:
         10:39:d9:fc:d8:f5:b2:50:0e:a9:ea:f7:99:cc:0b:d3:d3:8d:
         eb:c7:47:35:ce:64:83:b6:fa:a1:76:1a:6e:f7:14:b7:99:a8:
         7e:4c:48:65:53:ba:97:84:4f:bf:51:f5:57:46:a6:69:14:dd:
         44:c0:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:46:14 2025 by rpki-client