This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          YL9XY9bAD7ZRGKPRinx0ceEzVoiMgpsgDmbnbUoVlKQ=
Subject key identifier:   47:57:5A:85:78:38:85:08:65:24:E4:6B:99:12:E1:34:88:6F:4D:5D
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          C8
Signing time:             Tue 09 Dec 2025 04:59:02 +0000
Manifest this update:     Tue 09 Dec 2025 04:59:01 +0000
Manifest next update:     Thu 11 Dec 2025 04:59:01 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: Gn2pG3RVG8zbEyN1AOhhGkCbxD5jx+cLkI5CxX1b48c=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Dec  9 04:59:01 2025 GMT
            Not After : Dec 11 04:59:01 2025 GMT
        Subject: CN=6937ac96-a391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:dd:65:0f:50:46:5c:30:71:24:e9:92:f5:
                    a3:f5:75:37:16:1d:37:d9:18:33:1c:0c:27:b3:eb:
                    29:4e:79:09:63:17:a7:85:7e:f8:62:ac:36:ef:d0:
                    90:f2:ce:7d:7b:63:4d:6d:9f:eb:92:c3:b4:c2:45:
                    e3:47:a1:c7:a4:82:c3:aa:62:87:6a:fd:92:ca:21:
                    69:0c:4a:f2:aa:31:a7:0f:66:61:53:28:d5:58:fa:
                    d9:d4:cb:9a:0e:d8:11:32:61:fa:c4:cc:4f:da:fc:
                    84:39:2c:d8:85:57:0d:42:49:1f:a2:50:83:14:5d:
                    37:e8:03:2f:96:63:e1:d8:70:ad:57:37:f0:57:8b:
                    20:e9:e0:39:09:42:20:84:bf:77:be:c9:cd:28:d6:
                    fc:11:10:3d:39:88:47:47:3a:7d:4a:cd:a3:13:7f:
                    b9:5b:8d:ef:c3:c4:7c:37:5f:f0:06:76:a1:40:75:
                    87:f1:f9:13:30:b5:03:99:e2:0a:e1:0d:ca:93:a2:
                    91:60:8f:b0:24:37:18:90:e0:fa:b1:b8:b8:65:f9:
                    8e:1b:ee:be:d3:53:ed:e0:84:cb:86:c7:7b:24:a4:
                    85:09:60:dc:90:e1:a9:bb:1d:87:fd:00:ab:e6:ee:
                    a1:c1:b9:1f:2a:c6:0a:42:40:5c:29:4e:99:13:cf:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:57:5A:85:78:38:85:08:65:24:E4:6B:99:12:E1:34:88:6F:4D:5D
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:06:59:cb:53:b1:fc:43:c8:8a:5f:fa:f5:69:ba:6f:02:9e:
         07:98:3b:fb:fa:5c:cb:8f:07:08:5d:04:ce:39:eb:9f:1c:ae:
         35:d1:fb:9c:7e:79:84:bf:78:65:1b:73:ea:61:59:cd:f1:4e:
         55:4d:8e:5a:a4:47:a3:b9:2e:8a:cf:63:7f:0d:59:e4:00:8d:
         ba:68:3d:fa:7b:eb:9a:04:c5:65:7c:41:bc:f5:71:47:70:e6:
         e0:88:3c:81:c6:42:0b:83:7a:ff:e4:3a:d2:ec:ad:cd:be:5a:
         c1:a2:27:aa:30:84:ba:f6:37:3b:54:66:1e:2a:5e:54:df:b1:
         cd:02:5f:0c:87:a3:f0:89:9d:f7:2e:4f:04:de:1f:72:3e:0b:
         8d:29:0a:ac:cd:8e:cd:81:fa:cf:c3:1d:e1:33:ba:1f:2f:66:
         4e:42:04:8e:33:1b:be:ab:a7:9c:40:5e:a7:46:69:8f:67:13:
         25:18:b9:93:c6:fb:e3:8d:b6:cd:4e:de:58:65:57:dd:b9:87:
         12:73:a1:64:77:f1:4d:6b:75:67:53:7d:27:c6:1d:64:df:d6:
         07:d0:0b:08:fa:2d:2d:c5:39:63:a5:6f:fc:2b:ce:b4:2b:93:
         54:c6:ab:a5:8a:f0:f1:be:59:85:5d:4d:d0:d4:8d:82:ee:d4:
         76:c9:86:13
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzVDNDhBRjExMC8GA1UEBRMoQzgzRkQwRTE1RDE0M0MzN0Y5OTQ3NDk3Q0Y4NjZG
OEZBRTc0NzBCOTAeFw0yNTEyMDkwNDU5MDFaFw0yNTEyMTEwNDU5MDFaMBgxFjAU
BgNVBAMTDTY5MzdhYzk2LWEzOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnPd1lD1BGXDBxJOmS9aP1dTcWHTfZGDMcDCez6ylOeQljF6eFfvhirDbv
0JDyzn17Y01tn+uSw7TCReNHocekgsOqYodq/ZLKIWkMSvKqMacPZmFTKNVY+tnU
y5oO2BEyYfrEzE/a/IQ5LNiFVw1CSR+iUIMUXTfoAy+WY+HYcK1XN/BXiyDp4DkJ
QiCEv3e+yc0o1vwRED05iEdHOn1KzaMTf7lbje/DxHw3X/AGdqFAdYfx+RMwtQOZ
4grhDcqTopFgj7AkNxiQ4PqxuLhl+Y4b7r7TU+3ghMuGx3skpIUJYNyQ4am7HYf9
AKvm7qHBuR8qxgpCQFwpTpkTz9vRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUR1da
hXg4hQhlJORrmRLhNIhvTV0wHwYDVR0jBBgwFoAUyD/Q4V0UPDf5lHSXz4Zvj650
cLkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1QzQ4LzkwMkM4Qjg0M0M2NDExRjBBREJFODc4RERBRTRFQzlDL3lEX1E0
VjBVUERmNWxIU1h6NFp2ajY1MGNMay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lEX1E0VjBVUERmNWxIU1h6NFp2ajY1MGNMay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzVDNDgvOTAyQzhCODQzQzY0MTFGMEFEQkU4NzhEREFF
NEVDOUMveURfUTRWMFVQRGY1bEhTWHo0WnZqNjUwY0xrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4BlnLU7H8Q8iKX/r1abpvAp4HmDv7
+lzLjwcIXQTOOeufHK410fucfnmEv3hlG3PqYVnN8U5VTY5apEejuS6Kz2N/DVnk
AI26aD36e+uaBMVlfEG89XFHcObgiDyBxkILg3r/5DrS7K3NvlrBoieqMIS69jc7
VGYeKl5U37HNAl8Mh6PwiZ33Lk8E3h9yPguNKQqszY7NgfrPwx3hM7ofL2ZOQgSO
Mxu+q6ecQF6nRmmPZxMlGLmTxvvjjbbNTt5YZVfduYcSc6Fkd/FNa3VnU30nxh1k
39YH0AsI+i0txTljpW/8K860K5NUxqulivDxvlmFXU3Q1I2C7tR2yYYT
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:21:15 2025 by rpki-client