This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft (raw, json)
Hash identifier:          3ie/5fHKJiG4i9uf+DOATsE4dXBfJkj5Z9zxoyY7Q+I=
Subject key identifier:   2F:DA:ED:C9:47:5C:02:72:07:2F:61:AA:57:C8:6B:98:44:75:9C:69
Authority key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Certificate issuer:       /CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Certificate serial:       02A1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
Manifest number:          029F
Signing time:             Thu 18 Dec 2025 06:20:26 +0000
Manifest this update:     Thu 18 Dec 2025 06:20:25 +0000
Manifest next update:     Sat 20 Dec 2025 06:20:25 +0000
Files and hashes:         1: OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl (hash: PfsRp+Fb8CSu1Ium8DdYAS6/CowTrP3sN829gC7zzA8=)
                          2: FCC5AF24DAF811EE935BB276775412E6.roa (hash: lFol3HpR6fMYzPmNkPhAztGIiqTs04+UE2qgxyB1A54=)
                          3: 8FEDACA2DBAD11EEB79EC1A0775412E6.roa (hash: v3lIrrWZHaGAgIYY4ddWroI+DgCBWv6OTEzoRUSn5vA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                          rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9RI, serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
        Validity
            Not Before: Dec 18 06:20:25 2025 GMT
            Not After : Dec 20 06:20:25 2025 GMT
        Subject: CN=69439d2a-e7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:48:33:74:3f:8f:37:21:f0:81:fe:e8:5a:
                    e8:bd:36:3f:3f:cd:2b:ba:2d:65:ef:67:4b:7c:d5:
                    82:67:fd:87:f8:b6:45:bf:08:0b:32:91:55:a6:a9:
                    a0:a4:df:40:f9:10:31:71:61:55:fc:f3:4e:d1:ec:
                    fd:07:bd:2d:c7:80:c5:88:52:94:a0:b6:26:eb:52:
                    73:14:e2:67:87:a7:6d:77:d5:f8:3c:3e:92:cc:aa:
                    67:71:25:3e:81:20:1a:65:7c:e7:b1:d8:69:8b:e2:
                    f8:65:cb:04:01:17:05:08:88:e2:4a:f8:38:3f:ed:
                    3b:f6:38:ef:03:f0:ea:12:4c:3b:48:1b:1b:1c:07:
                    7f:35:ee:e7:a5:c8:6b:ad:93:f2:67:de:72:d9:21:
                    e4:76:40:8e:c5:ef:c4:7e:4a:eb:40:83:fe:59:3f:
                    3a:5a:55:b8:78:66:b3:75:be:e1:51:9d:f6:a4:60:
                    b8:04:0b:0d:5a:e9:46:3e:ef:c6:ad:a2:41:fa:fb:
                    fa:0c:2e:d6:60:ac:c0:59:01:cd:72:5e:e2:65:fe:
                    e3:42:bd:72:ed:57:6e:8d:44:5b:9c:54:8d:ef:2b:
                    e8:af:8f:c2:40:9a:04:20:c2:c7:0d:4b:cb:36:d8:
                    0d:56:4e:57:5f:fa:39:04:52:ca:51:7c:7f:8f:69:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:ED:C9:47:5C:02:72:07:2F:61:AA:57:C8:6B:98:44:75:9C:69
            X509v3 Authority Key Identifier:
                keyid:39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:22:c9:f4:97:68:5b:7d:8a:56:6f:27:a7:9e:fe:9c:a4:
         b6:c3:45:2d:a5:4c:ac:ec:dd:78:1e:9d:ef:5d:98:39:15:47:
         b5:4a:25:77:a0:d1:3c:ad:65:74:63:5f:fb:07:a6:a3:07:85:
         c5:00:a5:7a:3f:4f:f8:6e:52:01:be:4c:b6:dd:c9:e8:f3:de:
         09:bd:a7:5a:70:94:d0:93:3c:e0:d0:74:2b:a3:30:a2:11:90:
         17:39:4f:cf:38:3e:06:4e:eb:79:c3:76:00:1c:b4:c2:34:15:
         70:e4:13:46:65:71:ac:22:9d:1b:51:6e:1b:52:81:4b:3c:9b:
         62:c9:3b:1b:67:e1:6d:1c:c5:a5:de:f2:04:7d:97:1c:76:c7:
         7d:7a:23:5a:d4:4f:e9:87:1e:15:45:7f:42:2d:8f:71:78:1c:
         5c:95:42:de:6e:4a:5b:b8:28:74:24:fa:bd:6d:ef:f6:81:cf:
         67:6a:ac:a1:6c:a5:2f:52:d4:8b:11:19:94:be:1b:08:2a:55:
         52:fb:ed:76:e7:a0:69:3f:3e:31:a1:35:21:6b:cb:86:12:14:
         cd:ca:1a:04:ad:08:a5:50:4b:fd:2a:1b:2a:f5:07:84:67:bd:
         f8:c5:a7:45:76:a4:d2:72:d7:31:d7:fd:c9:ff:69:87:fa:0e:
         d8:0f:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:29:20 2025 by rpki-client