This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
File:                     wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft (raw, json)
Hash identifier:          1NxIm5T4vYtUR2Q5pa5mV6aT3gF88HTj3QjY68HIfyc=
Subject key identifier:   6D:62:57:53:D3:B0:E4:F8:63:1D:63:2B:73:D5:9F:D5:15:B0:CB:E3
Authority key identifier: C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB
Certificate issuer:       /CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
Certificate serial:       043E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
Manifest number:          043B
Signing time:             Thu 18 Dec 2025 05:28:27 +0000
Manifest this update:     Thu 18 Dec 2025 05:28:26 +0000
Manifest next update:     Sat 20 Dec 2025 05:28:26 +0000
Files and hashes:         1: wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl (hash: kDkxEGYCWzQJ3t7lIEC1xOKzvBVg8rAOdaW5WKZRwUs=)
                          2: 3F8E935AA61311EDBFCFB3D4F1222468.roa (hash: 33rmpZ6jAdIVqLdS11HAE3Yq5xllMzQt+c6T/OCJsiA=)
                          3: 81387E54007811EF99B9F139017001B1.roa (hash: 5WAmHZAoZlINNKx4PNswtykKpm0E6nuOZQfU//JL8dM=)
                          4: 0391042A007911EFAE93753B017001B1.roa (hash: ROy7IXIOSH9P9duj13zOuIMfsAHkd1TqIfObC5Gq/2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C10D8AF, serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
        Validity
            Not Before: Dec 18 05:28:26 2025 GMT
            Not After : Dec 20 05:28:26 2025 GMT
        Subject: CN=694390fb-638e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:25:ec:04:a8:93:70:fe:72:83:aa:14:93:
                    7c:65:69:dc:2b:12:1b:c8:ea:c6:54:34:14:a6:36:
                    e6:62:1c:0a:7d:ef:0a:1d:37:29:e0:8a:4e:4d:0e:
                    b1:3f:6c:3b:8e:db:d6:f5:df:86:0d:38:2e:44:d4:
                    8d:7e:9e:a1:ea:5c:fa:83:be:5a:53:6e:e1:be:a2:
                    19:70:8b:c1:9e:68:1a:6f:ec:9f:13:4f:51:31:c9:
                    3c:e6:d3:96:09:80:13:d6:4a:65:7d:20:98:25:43:
                    e7:cd:23:a0:9e:ed:57:44:02:61:35:a0:24:d0:da:
                    fb:df:6c:7d:24:77:4d:2c:48:b3:5a:68:76:66:5b:
                    ee:3b:2e:f0:87:e3:7e:bc:c1:58:55:4a:3c:99:0d:
                    ea:67:fd:84:39:1f:d0:74:81:62:97:dd:26:16:98:
                    72:fa:3e:19:dc:66:c9:bd:e7:2d:e4:17:25:f3:c2:
                    de:e0:79:1a:5a:67:ef:37:d8:92:e4:ea:a5:49:a6:
                    f9:43:d8:67:15:1f:f5:50:e4:34:79:35:ee:b4:62:
                    76:2f:71:53:7c:3a:80:86:e4:ff:88:74:84:8b:ef:
                    0e:e1:38:27:b0:89:c2:ca:07:00:02:eb:67:25:74:
                    3b:1d:81:b2:e0:65:63:6d:9a:22:b0:38:40:18:1c:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:57:53:D3:B0:E4:F8:63:1D:63:2B:73:D5:9F:D5:15:B0:CB:E3
            X509v3 Authority Key Identifier:
                keyid:C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:40:19:f0:15:ac:fb:72:86:35:7a:f3:ac:50:6c:01:e8:98:
         aa:cf:38:fe:4c:3b:5a:39:6c:1c:d3:e9:97:ed:12:35:75:82:
         36:d8:ea:41:f5:59:d6:8c:95:d9:0c:03:22:cc:7f:45:e2:6e:
         c6:b9:17:93:62:af:94:0c:24:84:a7:de:2b:c2:a3:72:55:84:
         8b:f0:39:d2:ec:44:eb:f6:d7:64:66:21:f6:a1:fd:75:b5:f1:
         4b:21:c9:a4:03:c6:a3:c0:21:1e:74:64:a7:b0:27:12:1c:1e:
         69:26:ee:fd:7a:3b:3e:34:e1:38:90:a6:f5:16:97:ee:1b:92:
         3a:54:56:14:10:d6:29:0d:68:04:c5:da:a5:d6:22:d2:34:d8:
         a6:15:47:58:68:75:48:c1:f5:23:c8:e6:4a:79:c8:e1:ad:6f:
         43:fc:df:92:3d:5e:86:d8:62:4b:52:92:9a:f6:c2:8f:df:22:
         3c:8e:b6:4d:2d:ff:cd:a5:89:d2:dd:c1:35:80:11:10:77:56:
         fc:03:e6:d3:7e:93:c0:1e:f5:86:96:02:79:68:c4:ca:10:f2:
         ff:11:0f:34:11:5b:5b:fb:43:d8:c4:37:fa:78:ff:ef:3b:20:
         a2:a7:21:0a:a7:d1:c1:1d:2a:3e:eb:95:55:33:cf:fe:24:92:
         83:3e:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:55:45 2025 by rpki-client