This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
File:                     rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json)
Hash identifier:          A+Ztyyk/5aeHNZX9cN+194HA4fKjDNwyqIgW4nVAtE4=
Subject key identifier:   69:58:C4:D3:C1:6D:8D:8D:3A:0F:F6:C5:8A:E1:EE:E1:A1:4E:79:72
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Certificate issuer:       /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial:       0898
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
Manifest number:          0888
Signing time:             Tue 09 Dec 2025 01:43:20 +0000
Manifest this update:     Tue 09 Dec 2025 01:43:19 +0000
Manifest next update:     Thu 11 Dec 2025 01:43:19 +0000
Files and hashes:         1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: 2jzB+oeCj+fB8kIL7dj+YtK8ZisCyOmPE/2+n5YulSo=)
                          2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=)
                          3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=)
                          4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=)
                          5: 924F80688A4E11EC8639028F5A40D577.roa (hash: tnumgrytmuyUCUVB2UaM2OC8r2VqINNEld+/gxdsqJk=)
                          6: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=)
                          7: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=)
                          8: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=)
                          9: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=)
                          10: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=)
                          11: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=)
                          12: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=)
                          13: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
        Validity
            Not Before: Dec  9 01:43:19 2025 GMT
            Not After : Dec 11 01:43:19 2025 GMT
        Subject: CN=69377eb7-a166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:de:f3:0b:b3:6d:ac:27:bc:ae:57:a2:40:
                    99:fb:46:0a:60:db:90:9f:99:3d:24:1f:5c:64:0d:
                    5b:bf:cc:59:65:65:75:d7:2e:dc:9a:71:b2:2e:f9:
                    b7:ed:2f:75:da:72:dc:ad:c9:f4:0f:53:d3:7f:79:
                    9e:44:fc:c0:c9:c1:61:1a:39:6d:7b:64:91:7a:ea:
                    f4:01:c3:03:55:c2:46:9c:5e:00:9b:c1:a5:8f:5c:
                    e1:f3:26:76:2e:b3:b4:df:7e:4f:ad:56:2f:e2:b8:
                    2f:fa:99:d3:ae:85:ec:e9:2b:e8:8d:c6:fa:9b:58:
                    c1:47:92:5c:e9:fa:ad:ce:f2:6c:a6:a7:7c:e8:d3:
                    90:db:dd:7f:43:96:fe:4b:f6:de:7b:b1:42:e4:80:
                    50:da:30:81:53:d3:dd:fc:01:07:9a:e2:a9:4f:78:
                    31:23:3d:ba:41:17:b3:55:b3:02:27:6d:32:e1:8b:
                    cd:b9:e2:2f:60:9c:6f:8c:66:ab:c4:6d:98:34:3f:
                    90:44:47:82:be:c5:4c:b6:ab:da:9e:c2:25:e8:34:
                    ae:b5:67:ac:3f:50:d9:c5:fd:aa:f7:fe:a3:79:88:
                    03:bf:d4:2e:3f:27:33:79:e8:92:d1:11:80:db:fd:
                    e4:9f:ad:3c:3c:55:8a:a1:38:f1:1f:09:94:d1:1c:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:C4:D3:C1:6D:8D:8D:3A:0F:F6:C5:8A:E1:EE:E1:A1:4E:79:72
            X509v3 Authority Key Identifier:
                keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:69:9b:66:9f:bb:8c:2a:71:63:e1:be:43:bb:23:0d:22:
         7a:50:97:d4:94:b7:b4:2d:37:73:20:36:50:f8:e9:e8:2c:f1:
         e5:9a:6b:31:94:12:44:a7:15:78:ac:53:8e:8c:aa:62:9e:db:
         cb:ea:27:c9:7f:05:ae:d5:25:e8:0e:98:f1:de:a0:bd:e2:92:
         3d:5f:45:3e:6a:ba:2b:c2:3c:49:79:32:01:cc:81:dd:5f:e3:
         bb:e6:58:db:f4:a2:91:b5:fb:bd:8d:40:ab:4d:be:1c:35:89:
         32:d6:86:10:09:a6:e8:e7:6e:0d:75:d5:15:f7:5f:bb:fe:6f:
         a3:3a:f1:38:29:ed:6a:24:83:79:6f:e5:85:b0:fd:6b:e8:7d:
         13:5a:46:d1:c6:56:2a:ff:69:53:dc:6b:0a:eb:b2:e8:dd:fd:
         bc:f2:c6:c9:c8:b8:9f:7b:0d:ae:59:08:8f:d4:0b:d3:76:81:
         aa:d5:32:ef:c5:87:24:39:4b:d8:10:62:ee:bc:e3:6d:72:ba:
         59:27:03:1d:a4:d3:52:fe:23:ae:33:e6:04:9c:22:d1:b5:e8:
         4a:0e:62:60:cc:04:58:2b:06:3d:5a:0c:ab:52:9e:7c:e8:23:
         c7:7c:90:05:e5:64:37:73:33:34:bb:cb:14:82:cc:b7:d4:97:
         98:63:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:20 2025 by rpki-client