This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
File:                     rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft (raw, json)
Hash identifier:          C4BPbk6uT5vUX9wucbjb/2xZfwenJ1iZsEUcNef6T6c=
Subject key identifier:   2D:98:D6:0D:13:C7:BF:7C:33:BE:B4:B8:D1:B2:8C:44:BE:19:4B:20
Authority key identifier: AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89
Certificate issuer:       /CN=F36E4353AF/serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
Certificate serial:       0638
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
Manifest number:          0634
Signing time:             Tue 09 Dec 2025 02:24:08 +0000
Manifest this update:     Tue 09 Dec 2025 02:24:07 +0000
Manifest next update:     Thu 11 Dec 2025 02:24:07 +0000
Files and hashes:         1: rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl (hash: aHUyqkeocaEjGc83Poa96HuzXFjOMqKyC+rRcoorcos=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4353AF, serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
        Validity
            Not Before: Dec  9 02:24:07 2025 GMT
            Not After : Dec 11 02:24:07 2025 GMT
        Subject: CN=69378847-7d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:02:6a:b3:0c:11:15:a6:c8:4e:7b:65:ed:
                    27:53:1a:7c:36:69:75:1e:b6:71:89:8b:84:88:fe:
                    6e:74:35:2f:a3:6c:2c:16:74:d1:ec:fe:66:c3:cc:
                    48:c9:d9:53:8c:e5:f6:4c:cb:f9:e0:83:6d:22:50:
                    3a:05:07:49:71:57:10:f7:39:a8:b5:92:06:d9:dc:
                    58:5b:c0:3f:54:64:9b:39:28:d5:2c:51:91:ba:6c:
                    da:78:4f:90:e3:0f:90:a1:72:4c:91:0b:82:e5:f1:
                    b9:e4:c7:f8:47:70:bb:e7:05:39:91:64:6b:a1:ad:
                    94:49:e9:83:b8:26:b4:25:38:7e:bb:94:c8:44:43:
                    ef:9d:de:10:4a:20:2f:c4:f9:78:65:48:6d:76:7d:
                    bb:72:09:0e:1b:ae:5f:9d:ee:77:43:d8:e8:83:51:
                    b6:78:8c:17:5a:ec:68:c7:6c:fc:c5:a3:d5:ad:1e:
                    8b:0c:06:89:2a:3f:9f:db:9b:36:05:49:98:29:5b:
                    a1:7f:c9:58:2b:60:e7:d1:e9:fd:e8:d8:a3:3c:25:
                    63:b3:87:73:52:08:e9:81:d5:23:36:7b:e4:ca:3a:
                    76:a0:9c:e7:03:8b:b3:46:c7:5e:4e:e9:7e:d1:d9:
                    4b:65:a6:7f:14:e1:3b:ce:eb:6c:bc:49:f2:82:61:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:98:D6:0D:13:C7:BF:7C:33:BE:B4:B8:D1:B2:8C:44:BE:19:4B:20
            X509v3 Authority Key Identifier:
                keyid:AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:a0:af:33:80:43:43:cb:cb:e1:6d:ed:e1:18:ee:16:e2:
         16:d7:16:8b:82:b0:5c:a5:c4:d2:ff:dc:e3:20:f8:7e:d6:fe:
         ee:a5:33:e0:3a:63:32:14:53:a6:09:bf:ca:26:96:0e:05:bf:
         2c:bd:1d:2f:ef:61:50:2e:4f:86:f6:56:c1:c8:00:fb:45:c9:
         a8:a8:b3:af:b8:e3:48:7a:72:27:d1:ec:08:14:a2:eb:41:ef:
         a5:62:ac:46:cc:c9:4d:91:86:05:50:11:70:c7:ce:cd:48:47:
         f2:24:46:e1:1b:53:5f:94:46:c1:80:9e:57:a8:86:b5:a9:79:
         e0:8d:61:50:21:4c:1c:95:a8:05:7c:2c:cf:df:38:44:e2:35:
         02:0e:0c:c7:dc:ac:1d:b7:20:d4:8b:15:9e:8d:b9:39:49:08:
         6c:51:05:60:ec:82:a3:d6:cc:37:ef:a7:40:fe:63:94:2e:ff:
         b6:8d:48:c4:02:2c:d0:84:56:ef:c4:cd:36:51:c8:e9:ce:fb:
         47:e4:c6:69:d5:07:81:d0:3c:f7:fe:87:37:7a:ba:4c:ab:60:
         ef:8f:7b:ad:a9:9b:67:fc:1a:5a:9a:92:7b:74:63:12:b4:5a:
         d4:88:b4:fa:63:6d:a2:60:a3:60:ca:4b:22:03:99:d0:3e:92:
         c2:85:d5:19
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTQzNTNBRjExMC8GA1UEBRMoQUMzNEYyM0NCMjZCMTkxRkE2QzI1NzM2NjZBNDE2
M0REOTg2ODM4OTAeFw0yNTEyMDkwMjI0MDdaFw0yNTEyMTEwMjI0MDdaMBgxFjAU
BgNVBAMTDTY5Mzc4ODQ3LTdkNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC//AJqswwRFabITntl7SdTGnw2aXUetnGJi4SI/m50NS+jbCwWdNHs/mbD
zEjJ2VOM5fZMy/ngg20iUDoFB0lxVxD3Oai1kgbZ3FhbwD9UZJs5KNUsUZG6bNp4
T5DjD5ChckyRC4Ll8bnkx/hHcLvnBTmRZGuhrZRJ6YO4JrQlOH67lMhEQ++d3hBK
IC/E+XhlSG12fbtyCQ4brl+d7ndD2OiDUbZ4jBda7GjHbPzFo9WtHosMBokqP5/b
mzYFSZgpW6F/yVgrYOfR6f3o2KM8JWOzh3NSCOmB1SM2e+TKOnagnOcDi7NGx15O
6X7R2Utlpn8U4TvO62y8SfKCYUUhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULZjW
DRPHv3wzvrS40bKMRL4ZSyAwHwYDVR0jBBgwFoAUrDTyPLJrGR+mwlc2ZqQWPdmG
g4kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU0MzUzLzhBRTA5QzJDMTlGNjExRUM5NkUxRDI3NkQ4QTAxNENFL3JEVHlQ
TEpyR1ItbXdsYzJacVFXUGRtR2c0ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JEVHlQTEpyR1ItbXdsYzJacVFXUGRtR2c0ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTQzNTMvOEFFMDlDMkMxOUY2MTFFQzk2RTFEMjc2RDhB
MDE0Q0UvckRUeVBMSnJHUi1td2xjMlpxUVdQZG1HZzRrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/W6CvM4BDQ8vL4W3t4RjuFuIW1xaL
grBcpcTS/9zjIPh+1v7upTPgOmMyFFOmCb/KJpYOBb8svR0v72FQLk+G9lbByAD7
RcmoqLOvuONIenIn0ewIFKLrQe+lYqxGzMlNkYYFUBFwx87NSEfyJEbhG1NflEbB
gJ5XqIa1qXngjWFQIUwclagFfCzP3zhE4jUCDgzH3KwdtyDUixWejbk5SQhsUQVg
7IKj1sw376dA/mOULv+2jUjEAizQhFbvxM02UcjpzvtH5MZp1QeB0Dz3/oc3erpM
q2Dvj3utqZtn/BpampJ7dGMStFrUiLT6Y22iYKNgyksiA5nQPpLChdUZ
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:10 2025 by rpki-client