This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
File:                     BinJnUdgwom4TNvs8bbBPPUl6q8.mft (raw, json)
Hash identifier:          2GW+IR5ToWuPbx5wO00BcAPWWszzfjZlHWaeNjtIRF8=
Subject key identifier:   68:E9:DC:25:34:42:CA:B6:61:9E:42:0F:98:DA:F3:82:72:DF:CB:7E
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       03C8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
Manifest number:          03B8
Signing time:             Thu 11 Dec 2025 03:33:22 +0000
Manifest this update:     Thu 11 Dec 2025 03:33:21 +0000
Manifest next update:     Sat 13 Dec 2025 03:33:21 +0000
Files and hashes:         1: BinJnUdgwom4TNvs8bbBPPUl6q8.crl (hash: oIdo6U48JEnqu4CT0BFQpRdMLuPVgKouMLL7QorDIIo=)
                          2: 2850010E216B11EFB3F618137DDC24C2.roa (hash: 0jME1ZzrI4sNnNZjfeG38v9huXsz3LZTpURGBtXzEAw=)
                          3: 51542E68216B11EF9F7AF3167DDC24C2.roa (hash: 4QCeXvrc6kg/JIOMdU4vEPvtTh3WWdhKcmrMjlVBHNk=)
                          4: A67CF5BA216A11EFA90D51127DDC24C2.roa (hash: lsxPoy4LkYh0ebWwRE+vefdBa5LLS6CukBLh7U9d9E4=)
                          5: 55EEE540216A11EF9A5E590E7DDC24C2.roa (hash: FgSrL2A61qR530yDTlLI1PpGN3TVb0JzE3QW/HRydIw=)
                          6: 1F5F2FF8216A11EFBE9F000E7DDC24C2.roa (hash: Lnp4R2zpiassu92nP7+9bZsA7WacYQhSdB9Irhb4Gho=)
                          7: CF99B532216A11EFBD87B3127DDC24C2.roa (hash: jOjj4Xh+2NT4yOAFMCOKRdCM3mQyy3CpEf+pl4OtA9Y=)
                          8: F7891F7E216A11EFAAB9DD127DDC24C2.roa (hash: gR6HfHMgVO0uVKQ4QeKo2uZ6uComtLRb0sTj4ZsT1hQ=)
                          9: 80627120216A11EF980B8E0E7DDC24C2.roa (hash: iJq4XGcPgxPLrs5UWbDYKLBJP1q4j5+vrVCECQwMuoM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI, serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Dec 11 03:33:21 2025 GMT
            Not After : Dec 13 03:33:21 2025 GMT
        Subject: CN=693a3b82-b1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:fb:a2:b1:5e:3c:f2:a7:52:82:eb:07:ee:
                    5f:ca:90:a4:c3:55:f4:48:3e:02:c3:f4:a1:97:3d:
                    e5:fc:df:bf:e5:17:ce:b8:71:d6:0c:ad:44:36:35:
                    81:db:c2:0b:49:f5:0f:c3:2d:47:a5:b2:bf:b2:88:
                    7a:15:ef:54:d9:6c:3f:4e:5e:25:48:7a:b0:7f:e9:
                    62:0b:0d:18:72:ae:e1:bb:0b:7d:41:f6:d4:97:ac:
                    d3:2f:f0:37:e5:1f:87:5b:a3:a9:e8:4b:55:8b:77:
                    07:f4:c9:e5:8b:55:41:8c:e3:ef:c6:01:85:cf:c6:
                    a6:f5:94:6e:1a:39:3a:3b:6a:4b:2d:3f:2b:fd:cb:
                    b2:2c:63:e6:64:a5:91:a4:1c:13:2e:7a:60:62:91:
                    f1:7c:62:d9:08:84:58:06:52:73:a9:f7:19:f1:d2:
                    46:73:d4:66:c6:a3:18:11:cd:ac:84:6e:7f:f4:b0:
                    89:a7:4b:8f:b0:f0:ad:87:ad:19:9a:1f:2d:06:cb:
                    39:9d:9e:77:7b:fb:dc:96:fa:4b:43:b9:cd:6f:82:
                    65:ca:fe:a7:2d:12:c7:02:55:73:b5:13:3a:46:9a:
                    83:6d:2c:42:80:4d:a3:f4:c1:f3:bc:c7:28:3f:4e:
                    34:ba:4c:01:bf:6c:1e:d8:ae:45:e2:21:d2:37:10:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:DC:25:34:42:CA:B6:61:9E:42:0F:98:DA:F3:82:72:DF:CB:7E
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:34:32:29:ea:37:2f:bd:8e:2b:44:a9:95:17:dc:86:a5:2c:
         90:49:fc:bb:8c:af:19:bd:90:cf:7a:6e:71:94:12:1d:76:a4:
         64:92:1e:69:34:be:2c:33:e7:44:bf:f3:27:93:a1:8c:95:66:
         6c:f6:1f:6b:da:cf:12:bb:b0:8e:12:8a:0a:26:7e:0e:4f:af:
         59:ed:bc:9c:1a:14:34:42:11:65:f7:2f:72:1f:ea:09:cf:6e:
         15:1c:18:47:8d:29:d1:50:72:1f:5f:64:f8:70:c0:79:29:c3:
         db:3e:bf:a5:fa:40:4e:37:6b:fd:2d:83:84:aa:21:d2:68:10:
         60:f1:3f:5d:0e:45:a1:3a:cd:0f:af:ee:87:1b:f1:9a:dc:75:
         33:1f:77:44:7e:9d:2e:d2:28:49:f1:e6:f2:39:b6:7a:10:8b:
         b3:c2:89:06:b8:67:98:d2:73:df:ea:09:50:e5:0d:20:63:42:
         75:d0:99:e4:b0:0f:37:5a:38:78:a0:7f:31:26:16:22:be:7e:
         b4:cd:78:4a:38:a7:25:a7:a3:24:72:80:6e:38:0d:2f:03:58:
         98:58:92:08:ac:d7:f2:2b:1c:a6:1e:b4:e0:3b:02:54:ef:35:
         98:84:36:78:ca:cb:3c:9a:03:e2:89:ef:0a:6f:57:d3:de:47:
         85:d5:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:09:49 2025 by rpki-client