This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
File:                     9e2RvGqsS_b5N0e41TmTDZwMAis.mft (raw, json)
Hash identifier:          OJVsFbzaWDUkA+Jad7uez8j7SBNCUoBNarKKAcaW5HI=
Subject key identifier:   66:62:9A:44:23:7F:6E:AB:5A:19:B1:06:C0:A5:FC:87:C2:D1:69:E6
Authority key identifier: F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Certificate issuer:       /CN=F36E558EAF/serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
Certificate serial:       5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
Manifest number:          5F
Signing time:             Tue 09 Dec 2025 05:14:07 +0000
Manifest this update:     Tue 09 Dec 2025 05:14:06 +0000
Manifest next update:     Thu 11 Dec 2025 05:14:06 +0000
Files and hashes:         1: 9e2RvGqsS_b5N0e41TmTDZwMAis.crl (hash: iOiZMJPmGPtLYjScZxXDwMdhCmhJ+S46wbrV1KgeRY0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
        Validity
            Not Before: Dec  9 05:14:06 2025 GMT
            Not After : Dec 11 05:14:06 2025 GMT
        Subject: CN=6937b01e-6340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:c8:c6:e3:4d:0e:6b:51:57:a4:c7:ee:b3:
                    d9:40:58:bf:37:e4:03:cf:19:72:cc:8c:b7:e8:49:
                    44:b2:b5:ac:de:e4:92:7f:51:31:dc:f9:4b:26:b2:
                    6e:f8:89:17:16:84:7c:04:88:9f:78:2a:9d:49:e1:
                    7c:b0:e1:33:c2:cb:25:c4:cb:26:58:7c:00:00:81:
                    e3:fe:dd:e0:96:e2:43:1f:4a:04:fc:4e:df:1f:2f:
                    90:24:63:2d:b1:d3:83:be:53:3f:bb:d9:4f:13:ec:
                    8f:d7:37:b8:1e:36:10:61:5b:16:37:76:61:a6:dd:
                    e1:61:02:70:ae:65:e7:b6:7f:5f:e6:36:2c:58:d8:
                    6e:f2:41:24:a3:5f:37:0b:ff:9c:3c:1b:f5:a0:95:
                    57:a1:cd:af:f6:af:59:7e:8e:01:88:ba:6e:c3:45:
                    2e:00:b1:1e:be:82:e9:e6:1e:24:5f:02:6b:a0:c7:
                    56:b2:bf:6b:ef:a6:b3:3f:9c:d8:64:c7:8d:3e:72:
                    a7:b7:fc:65:7e:f1:8a:a1:d4:58:d9:49:a5:4d:bf:
                    90:c1:c4:87:7b:a1:2a:9c:40:05:81:c3:a5:38:72:
                    fe:79:54:78:a4:dd:66:4a:91:79:96:b8:8c:01:49:
                    3e:4d:06:03:82:27:55:8e:e9:38:9f:2f:d1:7a:01:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:62:9A:44:23:7F:6E:AB:5A:19:B1:06:C0:A5:FC:87:C2:D1:69:E6
            X509v3 Authority Key Identifier:
                keyid:F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:55:dd:b7:d2:48:5a:4b:26:71:8d:8f:ca:b8:7a:d6:de:
         0b:78:0f:e5:00:6c:e4:5f:6b:b4:ee:26:24:89:3f:b7:77:70:
         5f:8d:36:a7:4b:55:0c:fe:35:79:85:55:f4:8b:9a:5a:12:9e:
         cb:92:90:6c:7a:58:3e:99:a4:a3:2a:0c:97:77:00:9a:38:a3:
         a5:9c:98:d7:1b:c9:ea:10:2b:8a:1e:9c:0e:11:a9:f9:cc:03:
         d8:06:bd:dd:2e:4f:bd:c2:24:3f:14:ad:4e:2b:8b:81:c1:bb:
         9f:b8:2b:78:91:70:15:59:e5:c4:03:ac:8a:2a:96:ed:f8:21:
         25:cd:f9:6e:f9:6b:14:bc:f2:36:e2:1b:02:12:ff:08:44:4d:
         e6:22:d9:3b:3c:c6:48:af:5a:bb:35:ba:af:39:51:02:82:75:
         f9:fd:ed:95:b7:e7:79:75:ae:02:6a:bd:76:0b:5e:3e:3e:3f:
         90:04:f7:ec:11:e5:1c:84:56:35:a5:ea:55:e3:2e:a1:17:41:
         95:63:fb:df:05:1a:fc:71:77:59:85:60:3a:0d:96:01:1b:94:
         bb:38:a5:54:18:16:3e:5a:e5:1e:92:23:77:f9:c2:e0:ba:ab:
         17:d0:43:e1:15:a1:5f:5e:01:8e:7a:ee:28:9a:4f:2b:8a:30:
         c6:f2:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:54 2025 by rpki-client