This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
File:                     jipNb8UYDX1HWKp5jDiYAu7zv7M.mft (raw, json)
Hash identifier:          ThnBicQgad3Ey14MlnPSB500D/VDJn9bPBB1sPwkutY=
Subject key identifier:   8A:E9:3E:86:70:09:87:51:D5:16:C4:37:62:77:5B:DA:AC:3A:34:A5
Authority key identifier: 8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
Certificate issuer:       /CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
Manifest number:          02A1
Signing time:             Tue 09 Dec 2025 04:06:17 +0000
Manifest this update:     Tue 09 Dec 2025 04:06:17 +0000
Manifest next update:     Thu 11 Dec 2025 04:06:17 +0000
Files and hashes:         1: jipNb8UYDX1HWKp5jDiYAu7zv7M.crl (hash: rg6SGBuV74o8LQBWqWtRFObCQ4R/+650koTw2n9UJGo=)
                          2: BDA909CACFB911EEA2EBAB6A775412E6.roa (hash: oOsN7fS/FRC6cCK/W7sGcZ0zEfirLAaFD65Y5zMuPNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4212AF, serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
        Validity
            Not Before: Dec  9 04:06:17 2025 GMT
            Not After : Dec 11 04:06:17 2025 GMT
        Subject: CN=6937a039-5a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:48:96:d8:19:07:f8:9f:f7:0d:01:5b:31:
                    f7:1a:cb:2e:3d:51:67:1a:c3:09:e9:35:09:79:67:
                    d9:70:a7:c4:d3:df:5c:e2:f9:99:0a:63:a0:25:a0:
                    a8:3f:98:70:f6:cc:e5:99:cd:80:f6:db:c5:9f:1b:
                    55:03:53:f7:3d:77:13:86:55:84:98:2b:e9:aa:de:
                    22:89:e9:2f:9a:01:4e:e4:06:9b:5e:16:74:75:26:
                    c2:3c:1b:26:cb:e4:89:85:51:a3:df:7a:a6:61:74:
                    52:0f:cc:4f:88:fc:a0:f7:81:00:42:5d:d8:5f:75:
                    5b:a0:53:1f:a8:d9:fe:25:5f:dc:77:17:0f:e1:7a:
                    ec:31:8e:b5:5f:8a:ec:3b:53:2a:8b:00:68:cf:35:
                    07:f9:f6:cb:a4:f5:3b:28:f6:1c:27:de:61:bc:9e:
                    9e:b3:c4:09:ce:66:2a:12:06:d2:f4:62:91:9d:a2:
                    c2:d4:f8:30:4b:04:18:c3:c6:a9:11:a4:0f:bc:ad:
                    61:c5:60:32:d1:97:88:b4:dd:c9:2e:e3:2e:2f:3e:
                    62:a0:5e:39:fd:3f:88:ee:13:94:c8:9e:44:4d:85:
                    7e:31:ed:72:51:81:42:35:9c:cf:f9:df:2c:30:18:
                    b3:5e:f7:1e:36:da:00:b5:87:04:81:06:c8:ee:7e:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E9:3E:86:70:09:87:51:D5:16:C4:37:62:77:5B:DA:AC:3A:34:A5
            X509v3 Authority Key Identifier:
                keyid:8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:79:b9:b4:cb:1d:7a:9b:0e:57:dc:2f:db:e8:a7:fd:e1:93:
         35:89:8c:24:29:e4:e1:2c:42:6a:9c:3b:05:bd:8f:ad:54:c5:
         b6:be:7d:16:d5:35:18:56:11:9e:6b:09:e4:d0:74:0b:8a:82:
         86:8a:e7:a6:77:33:50:9c:0b:d7:07:9c:5f:04:6d:aa:5c:c0:
         42:66:6e:c3:46:0a:f6:63:d7:29:8f:7b:b1:bb:83:ca:72:00:
         08:5c:65:56:b3:59:67:7b:09:86:f5:d2:da:2d:87:6b:49:1e:
         6a:4f:d3:9b:d4:f4:11:03:9c:38:ca:55:49:a8:82:60:5f:59:
         8d:93:5f:e7:58:ba:78:ec:bc:fb:14:e4:43:5a:3b:86:0b:01:
         66:10:f4:4b:4d:eb:f5:43:bc:12:53:a1:1d:68:1c:b8:d2:b9:
         c2:91:f7:d4:4c:f9:49:b9:95:ea:c8:46:cb:51:b1:71:89:a9:
         f9:c4:4d:ac:e0:8b:02:a6:1e:d7:72:60:00:ae:11:ee:db:36:
         36:46:21:a8:6c:72:77:09:5f:40:fc:14:1c:71:cb:93:c5:55:
         03:5f:2c:1a:88:90:01:9a:c3:d5:3a:c3:ae:ff:7e:0b:48:61:
         55:be:46:27:73:2d:a2:90:08:21:3d:9c:44:9a:81:f9:de:de:
         60:d3:6b:7d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjQyMTJBRjExMC8GA1UEBRMoOEUyQTRENkZDNTE4MEQ3RDQ3NThBQTc5OEMzODk4
MDJFRUYzQkZCMzAeFw0yNTEyMDkwNDA2MTdaFw0yNTEyMTEwNDA2MTdaMBgxFjAU
BgNVBAMTDTY5MzdhMDM5LTVhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjvUiW2BkH+J/3DQFbMfcayy49UWcawwnpNQl5Z9lwp8TT31zi+ZkKY6Al
oKg/mHD2zOWZzYD228WfG1UDU/c9dxOGVYSYK+mq3iKJ6S+aAU7kBpteFnR1JsI8
GybL5ImFUaPfeqZhdFIPzE+I/KD3gQBCXdhfdVugUx+o2f4lX9x3Fw/heuwxjrVf
iuw7UyqLAGjPNQf59suk9Tso9hwn3mG8np6zxAnOZioSBtL0YpGdosLU+DBLBBjD
xqkRpA+8rWHFYDLRl4i03cku4y4vPmKgXjn9P4juE5TInkRNhX4x7XJRgUI1nM/5
3ywwGLNe9x422gC1hwSBBsjufvanAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiuk+
hnAJh1HVFsQ3Yndb2qw6NKUwHwYDVR0jBBgwFoAUjipNb8UYDX1HWKp5jDiYAu7z
v7MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY0MjEyLzUzQkQ3ODUyQ0ZCOTExRUVCQURGMUE2QTc3NTQxMkU2L2ppcE5i
OFVZRFgxSFdLcDVqRGlZQXU3enY3TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ppcE5iOFVZRFgxSFdLcDVqRGlZQXU3enY3TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjQyMTIvNTNCRDc4NTJDRkI5MTFFRUJBREYxQTZBNzc1
NDEyRTYvamlwTmI4VVlEWDFIV0twNWpEaVlBdTd6djdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvebm0yx16mw5X3C/b6Kf94ZM1iYwk
KeThLEJqnDsFvY+tVMW2vn0W1TUYVhGeawnk0HQLioKGiuemdzNQnAvXB5xfBG2q
XMBCZm7DRgr2Y9cpj3uxu4PKcgAIXGVWs1lnewmG9dLaLYdrSR5qT9Ob1PQRA5w4
ylVJqIJgX1mNk1/nWLp47Lz7FORDWjuGCwFmEPRLTev1Q7wSU6EdaBy40rnCkffU
TPlJuZXqyEbLUbFxian5xE2s4IsCph7XcmAArhHu2zY2RiGobHJ3CV9A/BQcccuT
xVUDXywaiJABmsPVOsOu/34LSGFVvkYncy2ikAghPZxEmoH53t5g02t9
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:31:58 2025 by rpki-client