This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File:                     lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier:          JHXwZDU+YxMtYxtx/MCKmNXOhcZLJRD87fERZWobVrY=
Subject key identifier:   50:4E:60:37:05:99:CF:B8:A1:B8:C1:3E:FC:26:F2:55:D6:69:74:FE
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer:       /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial:       06B9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number:          06B8
Signing time:             Mon 22 Dec 2025 02:10:58 +0000
Manifest this update:     Mon 22 Dec 2025 02:10:58 +0000
Manifest next update:     Wed 24 Dec 2025 02:10:58 +0000
Files and hashes:         1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: K9hVkLz8gLI+UyJaW6NGu0DvR06/9RU6aZCoYe0diSo=)
                          2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                          rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
        Validity
            Not Before: Dec 22 02:10:58 2025 GMT
            Not After : Dec 24 02:10:58 2025 GMT
        Subject: CN=6948a8b2-117a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4e:53:b8:69:5b:df:17:2d:1b:61:f5:05:14:
                    91:93:19:92:cd:b8:79:78:0d:b3:0d:4a:5d:fa:c4:
                    e7:98:9e:37:8f:63:67:c7:a8:bf:65:81:7c:69:95:
                    29:72:64:2b:c3:ba:d6:34:51:f3:83:5c:e6:5c:60:
                    8e:86:4d:16:bd:ec:d9:4f:fd:f1:ea:f4:77:62:30:
                    08:fc:a0:41:94:0d:1d:71:15:4e:ff:d0:00:d6:8d:
                    b6:b1:7e:10:3f:7d:62:87:2a:2c:7b:fd:21:f7:c5:
                    6e:6d:24:4d:09:14:49:a4:b5:6b:d1:e5:ec:9e:ef:
                    fa:4c:a6:c7:75:1d:f8:f2:f6:ac:12:fb:32:ac:5b:
                    c9:e5:9f:d1:ee:5d:6d:67:c1:08:87:c2:64:38:f2:
                    a2:7e:61:2a:04:7f:05:ee:e4:95:e5:eb:4d:ea:23:
                    39:34:a7:53:3b:8c:f6:e3:24:ed:5b:f0:25:c7:f6:
                    2a:5a:ba:10:f8:dc:28:ab:4d:2b:7c:4b:16:2b:65:
                    a6:b6:f7:73:78:20:e8:28:7e:f9:ac:62:da:ba:be:
                    1b:7a:fe:83:b1:c0:e1:f5:34:1b:8b:75:7b:99:ec:
                    a5:39:3b:f8:c3:26:b1:f0:0a:27:d2:5f:99:f5:79:
                    e4:bc:4a:05:75:7d:17:e0:b6:ec:9c:c6:44:0a:db:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4E:60:37:05:99:CF:B8:A1:B8:C1:3E:FC:26:F2:55:D6:69:74:FE
            X509v3 Authority Key Identifier:
                keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c1:9a:0f:7e:e6:01:6d:75:62:ad:fc:42:eb:3b:bc:f6:85:
         72:18:e3:54:12:c5:ca:98:ea:38:03:3a:f2:59:c4:dc:f1:a8:
         8a:56:e2:bb:0c:e7:fb:30:e3:a2:02:a3:a6:9a:c7:0c:82:37:
         82:b2:94:f6:7b:02:f5:8e:25:80:97:0e:27:4d:ad:e3:97:70:
         f0:8c:62:37:7d:e6:e8:53:ea:e9:60:89:5a:c5:7a:91:16:44:
         29:77:33:f8:fc:a1:7a:18:2c:de:37:8f:7d:84:93:93:5d:65:
         ba:12:88:96:04:77:9d:65:a7:f3:5e:f5:c3:22:2e:ea:5f:9c:
         b3:ca:99:3c:41:38:94:bd:b3:18:56:ac:13:f3:3d:e6:08:25:
         63:af:95:a2:b0:17:f2:94:92:42:b6:eb:4f:53:6a:17:5b:90:
         6f:0c:af:40:aa:be:98:a3:ce:4e:2a:4d:ac:6d:a4:26:c2:c4:
         18:bc:dd:19:48:99:8a:a7:c8:f4:41:d9:99:f9:d0:0b:bb:f5:
         2e:9c:13:11:ba:b3:e6:9f:f9:43:40:be:40:2b:01:b2:14:c2:
         ca:26:5a:0c:b0:ce:55:36:c1:bb:81:0f:25:5f:3d:9b:17:66:
         89:c5:ed:15:4c:30:f2:30:62:8d:53:53:23:35:67:60:15:be:
         63:c4:a5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:16:03 2025 by rpki-client