This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
File:                     VCiBspPW4uKh8hlSyLwDISbuu8k.mft (raw, json)
Hash identifier:          O0O121uKHdATz7pf/5ijZ0ONTL+1vO8xJBwxyoPSE6Y=
Subject key identifier:   7C:2C:F5:DA:DA:E3:E3:0F:CE:70:F9:FA:0B:47:CF:E5:8E:23:F9:A9
Authority key identifier: 54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
Certificate issuer:       /CN=F36B52A6RI/serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
Certificate serial:       09A9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
Manifest number:          09A8
Signing time:             Thu 11 Dec 2025 01:18:26 +0000
Manifest this update:     Thu 11 Dec 2025 01:18:26 +0000
Manifest next update:     Sat 13 Dec 2025 01:18:26 +0000
Files and hashes:         1: VCiBspPW4uKh8hlSyLwDISbuu8k.crl (hash: fS97vZevQny6BUQxHbYhK3d+iHV7MZ5J4oIX97kW5PI=)
                          2: 6B867142864C11EF92D39262762E951A.roa (hash: q/5PVa0Y5jiVYanPXInC3+mN2koWYpdxJKq6XS413jQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                          rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6RI, serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
        Validity
            Not Before: Dec 11 01:18:26 2025 GMT
            Not After : Dec 13 01:18:26 2025 GMT
        Subject: CN=693a1be2-7972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:45:84:5f:6d:1a:ad:2f:6d:0c:cb:f1:46:
                    8a:2a:56:a7:eb:ff:0d:b9:c5:05:71:e7:a0:65:1c:
                    70:97:2b:77:38:d5:ea:47:76:e2:a8:9e:ed:1b:6a:
                    ad:b8:d9:7a:93:88:f9:ee:d2:d6:8e:cb:ad:d0:58:
                    f2:d9:f0:14:98:57:b0:83:d6:1c:09:ba:5f:7e:33:
                    15:be:e9:5a:f5:66:75:07:12:c4:f5:10:97:d0:d9:
                    29:ce:6e:0b:fc:f3:b0:47:7f:77:75:3b:a6:00:59:
                    8c:75:ce:38:a8:41:77:61:3e:3c:09:06:d6:cc:3a:
                    0f:7f:7d:34:99:37:83:32:54:47:e7:a9:d4:19:37:
                    a0:2a:48:eb:ad:c1:67:c0:21:2a:c0:eb:39:33:a2:
                    71:5a:87:63:a0:ca:cc:32:f8:f7:29:18:6d:28:b1:
                    5c:64:66:20:b6:b7:02:c8:97:ca:ee:89:56:42:7e:
                    32:df:8c:bd:67:ca:8f:7b:53:71:cc:18:ef:30:00:
                    02:57:20:2d:51:a4:82:3d:82:70:a7:14:be:7f:be:
                    2c:69:17:31:96:18:ad:36:36:b0:53:fc:17:8b:5c:
                    92:06:0c:6d:df:74:0b:5f:02:58:c8:8c:7e:f1:ed:
                    27:b4:bf:14:1c:b1:3a:45:94:3e:da:48:14:ad:8a:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:F5:DA:DA:E3:E3:0F:CE:70:F9:FA:0B:47:CF:E5:8E:23:F9:A9
            X509v3 Authority Key Identifier:
                keyid:54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3d:cf:57:71:ae:11:ae:c4:50:f4:01:ad:da:cc:21:f0:54:
         77:a3:eb:e2:90:a8:a2:53:14:a0:d9:8c:2e:ce:93:2d:a2:c1:
         4c:65:cf:51:a0:6e:ba:5e:c8:80:c6:9f:ab:1d:08:80:45:40:
         96:93:36:6f:19:09:10:41:cf:be:5a:78:42:dd:77:ba:f3:c3:
         5d:5a:0a:49:12:4e:b1:fe:8f:4e:e4:da:6a:b8:dd:3b:c4:45:
         f6:18:57:2e:48:5a:d9:d2:f0:c3:80:0c:5c:20:54:32:46:0c:
         ee:e7:e6:28:31:63:c3:85:49:43:97:a5:3c:21:c5:c0:18:0f:
         5e:c3:5d:47:ad:ab:1f:81:c3:a2:65:5d:8b:ec:61:62:05:f1:
         ce:7f:13:d3:9f:ef:9f:05:d6:ad:93:8d:18:8b:43:6a:bb:53:
         af:3c:e4:51:ae:1c:67:0c:ff:3f:cc:11:f3:7e:d7:d4:eb:3e:
         27:c9:b3:c7:6e:a0:c0:2e:8c:8c:7d:02:e0:1b:3c:d4:cf:5a:
         80:bc:3b:06:95:39:81:6d:9a:52:e5:22:1c:08:b0:45:83:df:
         31:1a:cd:8f:05:ce:7d:24:47:8e:ab:66:38:a6:10:49:03:5a:
         77:5b:a4:e7:2d:c3:af:cd:f0:16:db:f7:63:71:24:9a:84:fe:
         65:58:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:08:17 2025 by rpki-client