This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
File:                     Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft (raw, json)
Hash identifier:          kdoTeCgm4EmPTsn1mL6x+DO5jhatON9V2d7ihkPQ7Uo=
Subject key identifier:   67:B5:CB:90:85:C8:45:40:DF:5D:AE:B9:FA:F5:F7:32:BB:25:28:0C
Authority key identifier: 46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Certificate issuer:       /CN=F36C29E6AF/serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
Certificate serial:       C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
Manifest number:          C5
Signing time:             Tue 09 Dec 2025 04:59:52 +0000
Manifest this update:     Tue 09 Dec 2025 04:59:51 +0000
Manifest next update:     Thu 11 Dec 2025 04:59:51 +0000
Files and hashes:         1: Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl (hash: BYKs99s9KTiAISTpppW+0+r2T0JCuMTqk/AHzXPNtTE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
        Validity
            Not Before: Dec  9 04:59:51 2025 GMT
            Not After : Dec 11 04:59:51 2025 GMT
        Subject: CN=6937acc7-2df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:79:ee:91:5a:c7:1f:ac:46:ec:2d:fd:f6:
                    00:6d:80:b5:cf:34:1f:c9:fe:07:9b:31:fa:9d:37:
                    12:fa:4e:fc:9e:2b:2b:26:7b:de:56:65:52:da:84:
                    50:48:d9:10:5f:94:05:a8:f7:d3:00:25:95:10:1f:
                    c7:1d:e3:8c:4d:32:ec:18:23:f5:91:55:78:11:da:
                    1e:b5:da:71:53:9e:38:d9:52:0a:6b:c2:cb:c7:bd:
                    b5:cd:35:fb:c1:ed:e2:77:c4:b2:59:67:54:88:ad:
                    70:0c:94:d6:6e:4b:e5:27:22:76:2e:6e:06:57:cb:
                    04:0e:7b:f2:65:e7:db:8b:d1:6c:28:ce:9f:e2:56:
                    0b:99:23:2f:a2:1c:2f:11:c5:34:fe:82:a1:8f:80:
                    39:dd:c5:ff:0b:1d:56:86:1a:af:b1:b7:bc:7c:f3:
                    43:60:00:c9:ef:a1:ce:56:0a:54:4e:ea:8a:d6:43:
                    eb:a4:c2:1d:63:fc:83:a0:fe:e1:a1:27:8a:05:f6:
                    04:6e:00:1c:54:c7:d3:8c:21:e9:31:c5:e2:68:f6:
                    6d:fd:a8:e9:36:2b:23:27:db:94:70:3d:34:35:0f:
                    2b:b8:ce:fc:8a:33:19:74:fb:91:92:52:a2:65:f9:
                    e4:9e:d1:4c:96:73:5c:64:69:07:41:fd:f3:9e:fc:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B5:CB:90:85:C8:45:40:DF:5D:AE:B9:FA:F5:F7:32:BB:25:28:0C
            X509v3 Authority Key Identifier:
                keyid:46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e4:d2:c5:df:ad:fd:b6:bd:0c:62:54:ed:d9:56:17:80:86:
         84:7c:d9:e6:45:0e:70:aa:c4:85:5a:c0:bc:16:2d:57:fb:f3:
         f2:5c:90:62:f8:62:c1:85:f9:7f:8d:7d:9b:a6:37:ee:06:59:
         e2:1f:42:77:48:42:80:9f:2d:5c:3f:8e:25:95:66:13:81:9c:
         ae:38:f9:a5:fe:59:6d:dd:21:d7:16:ec:f9:ff:84:70:90:2b:
         32:fc:42:36:f4:4f:dd:c5:d0:f8:8c:86:04:e0:f2:01:47:99:
         c9:49:ca:19:be:77:6c:af:b8:ea:7b:42:04:11:86:81:10:dd:
         43:74:7d:3d:50:32:79:cd:7d:c2:3c:63:0c:79:a4:a4:1a:0c:
         47:e1:b7:86:e6:f7:e0:a2:15:7a:43:ca:7c:68:b7:c0:ac:84:
         1a:fd:e1:be:8e:19:69:59:01:7b:c9:56:7e:07:e3:73:a1:5e:
         3e:de:0e:8b:c4:4b:9a:82:5c:b0:09:7a:2d:4c:50:3f:84:1a:
         01:a9:0c:98:bd:0f:29:a0:16:12:92:b0:7a:90:36:98:b2:19:
         8e:46:cd:17:bd:b2:c8:74:f0:9c:8d:4b:ef:7a:1f:e5:1d:c9:
         48:4a:55:4a:43:04:d5:78:5c:3e:f4:5b:77:95:0c:d7:32:6d:
         e7:6a:f5:c2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzI5RTZBRjExMC8GA1UEBRMoNDYzQzdBRjMzQkQyRjE0QUZENEQyQTM0NUQ5QzMx
ODE3Qzc4NzM3QzAeFw0yNTEyMDkwNDU5NTFaFw0yNTEyMTEwNDU5NTFaMBgxFjAU
BgNVBAMTDTY5MzdhY2M3LTJkZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjZ3nukVrHH6xG7C399gBtgLXPNB/J/gebMfqdNxL6TvyeKysme95WZVLa
hFBI2RBflAWo99MAJZUQH8cd44xNMuwYI/WRVXgR2h612nFTnjjZUgprwsvHvbXN
NfvB7eJ3xLJZZ1SIrXAMlNZuS+UnInYubgZXywQOe/Jl59uL0Wwozp/iVguZIy+i
HC8RxTT+gqGPgDndxf8LHVaGGq+xt7x880NgAMnvoc5WClRO6orWQ+ukwh1j/IOg
/uGhJ4oF9gRuABxUx9OMIekxxeJo9m39qOk2KyMn25RwPTQ1Dyu4zvyKMxl0+5GS
UqJl+eSe0UyWc1xkaQdB/fOe/GbxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZ7XL
kIXIRUDfXa65+vX3MrslKAwwHwYDVR0jBBgwFoAURjx68zvS8Ur9TSo0XZwxgXx4
c3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyOUU2L0JENDU3ODlFM0Q3MDExRjA4RkIyOTJEM0RBRTRFQzlDL1JqeDY4
enZTOFVyOVRTbzBYWnd4Z1h4NGMzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JqeDY4enZTOFVyOVRTbzBYWnd4Z1h4NGMzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzI5RTYvQkQ0NTc4OUUzRDcwMTFGMDhGQjI5MkQzREFF
NEVDOUMvUmp4Njh6dlM4VXI5VFNvMFhad3hnWHg0YzN3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB05NLF3639tr0MYlTt2VYXgIaEfNnm
RQ5wqsSFWsC8Fi1X+/PyXJBi+GLBhfl/jX2bpjfuBlniH0J3SEKAny1cP44llWYT
gZyuOPml/llt3SHXFuz5/4RwkCsy/EI29E/dxdD4jIYE4PIBR5nJScoZvndsr7jq
e0IEEYaBEN1DdH09UDJ5zX3CPGMMeaSkGgxH4beG5vfgohV6Q8p8aLfArIQa/eG+
jhlpWQF7yVZ+B+NzoV4+3g6LxEuaglywCXotTFA/hBoBqQyYvQ8poBYSkrB6kDaY
shmORs0XvbLIdPCcjUvveh/lHclISlVKQwTVeFw+9Ft3lQzXMm3navXC
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:58 2025 by rpki-client