This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          PzgyEn63iOPXdrxd0Kr79cwqAvwHUnFnovYZJ5YpvNw=
Subject key identifier:   3E:EE:48:72:ED:99:3A:20:2D:25:AB:87:FC:5E:1C:71:1E:59:E6:CD
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       0379
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          0378
Signing time:             Sun 21 Dec 2025 03:40:11 +0000
Manifest this update:     Sun 21 Dec 2025 03:40:11 +0000
Manifest next update:     Tue 23 Dec 2025 03:40:11 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: AL+1wppcQgHmiEMLbiOsUWEQR+HtJkMar5BKZzWPKDs=)
                          2: FC67525472E011F0A5185D9CDAE4EC9C.roa (hash: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 03:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Dec 21 03:40:11 2025 GMT
            Not After : Dec 23 03:40:11 2025 GMT
        Subject: CN=69476c1b-1642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:4e:e3:a9:8a:6f:2a:7c:d6:10:24:85:16:
                    89:1e:ec:ca:10:76:4a:9e:b5:a6:b2:b8:f0:7c:c3:
                    ee:4a:11:b3:21:14:96:6c:35:cd:22:ae:dc:27:f0:
                    ea:42:83:61:b8:56:58:db:14:4c:b7:5b:1c:6f:48:
                    4c:59:42:9c:4c:2c:10:32:fb:26:c0:33:02:71:71:
                    dd:ce:dd:ba:44:e0:6e:f2:e7:7f:81:e4:89:5b:d8:
                    36:b2:96:2a:ce:4e:dd:5b:25:95:11:de:fe:a8:68:
                    fb:8c:a4:4a:b6:29:d5:47:29:8a:3d:f1:65:b5:ec:
                    f4:b0:27:9d:07:ae:3c:dc:7b:5b:22:ad:5e:e5:df:
                    5e:dc:d3:7e:6b:32:09:76:98:c5:af:19:c8:16:90:
                    88:ec:dc:a3:60:ca:8b:85:31:0c:bc:61:59:9f:1c:
                    fe:b3:1d:b0:fe:09:43:a3:54:49:c6:8a:9a:28:77:
                    0d:54:76:8c:a7:40:75:5d:d1:61:50:63:cb:6c:88:
                    a2:52:dc:1b:bf:4f:60:ec:a5:0c:9e:aa:60:0e:e9:
                    d3:07:a9:04:0e:35:a4:e0:0a:fa:fa:64:ad:04:2c:
                    a1:10:14:cd:06:87:50:38:48:e4:b3:e6:3b:fe:51:
                    36:69:76:cb:64:e1:ad:fa:0e:0d:1d:09:33:b6:d8:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EE:48:72:ED:99:3A:20:2D:25:AB:87:FC:5E:1C:71:1E:59:E6:CD
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:9a:4e:a9:bf:e5:0f:c1:1c:c6:31:e3:db:fb:15:72:f4:
         e8:1c:03:9c:a9:51:96:91:e2:d1:49:dd:fa:14:d9:b6:8b:53:
         76:89:58:8f:32:f7:df:f8:8f:81:ed:19:c5:b0:83:84:10:e3:
         42:c8:70:d1:ab:a9:ff:ba:f6:97:bf:7f:14:2d:5c:05:c0:80:
         39:d9:ec:7c:83:48:56:59:da:18:f7:d3:47:06:dd:10:f8:59:
         3d:8d:ec:59:f0:fe:c1:b4:98:98:d9:c1:a8:1b:d3:da:fc:fc:
         79:78:3b:f4:1a:3b:cf:f6:60:07:f4:17:f8:3f:66:eb:11:6c:
         79:f8:3e:d6:ef:e0:68:3d:cd:03:86:67:6b:cb:fe:f3:e9:21:
         56:0a:cb:07:b2:b5:71:d1:6a:e3:c2:49:01:e8:79:b3:2c:cd:
         e8:0b:0b:96:ce:87:56:9a:3e:7c:36:ce:65:ae:16:12:8a:99:
         87:44:4f:76:1e:b8:0a:58:95:34:24:1e:b3:06:e6:1e:ea:98:
         1f:e0:05:36:31:30:7c:7d:57:6f:35:77:36:c4:2e:b5:28:33:
         a6:fb:41:e5:92:86:d1:19:da:db:5e:1a:dd:84:9b:36:91:94:
         d9:44:08:95:20:31:69:85:58:c1:a0:7f:05:b8:7c:98:7b:63:
         49:be:5f:08
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZSSTExMC8GA1UEBRMoRjE5MjNDREI3NTczRkIwOTczOTJFRTA2MDJCQzFE
QjFCNTdCRjBFMzAeFw0yNTEyMjEwMzQwMTFaFw0yNTEyMjMwMzQwMTFaMBgxFjAU
BgNVBAMTDTY5NDc2YzFiLTE2NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaCE7jqYpvKnzWECSFFoke7MoQdkqetaayuPB8w+5KEbMhFJZsNc0irtwn
8OpCg2G4VljbFEy3WxxvSExZQpxMLBAy+ybAMwJxcd3O3bpE4G7y53+B5Ilb2Day
lirOTt1bJZUR3v6oaPuMpEq2KdVHKYo98WW17PSwJ50Hrjzce1sirV7l317c035r
Mgl2mMWvGcgWkIjs3KNgyouFMQy8YVmfHP6zHbD+CUOjVEnGipoodw1UdoynQHVd
0WFQY8tsiKJS3Bu/T2DspQyeqmAO6dMHqQQONaTgCvr6ZK0ELKEQFM0Gh1A4SOSz
5jv+UTZpdstk4a36Dg0dCTO22NLPAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPu5I
cu2ZOiAtJauH/F4ccR5Z5s0wHwYDVR0jBBgwFoAU8ZI823Vz+wlzku4GArwdsbV7
8OMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGL0IxQ0FFMEQ0Mzc5NzExRUU4RUQ3RDkzMTRBRDlFNkZDLzhaSTgy
M1Z6LXdsemt1NEdBcndkc2JWNzhPTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzhaSTgyM1Z6LXdsemt1NEdBcndkc2JWNzhPTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjczMUYvQjFDQUUwRDQzNzk3MTFFRThFRDdEOTMxNEFEOUU2
RkMvOFpJODIzVnotd2x6a3U0R0Fyd2RzYlY3OE9NLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKU5pOqb/lD8EcxjHj2/sVcvToHAOcqVGW
keLRSd36FNm2i1N2iViPMvff+I+B7RnFsIOEEONCyHDRq6n/uvaXv38ULVwFwIA5
2ex8g0hWWdoY99NHBt0Q+Fk9jexZ8P7BtJiY2cGoG9Pa/Px5eDv0GjvP9mAH9Bf4
P2brEWx5+D7W7+BoPc0Dhmdry/7z6SFWCssHsrVx0WrjwkkB6HmzLM3oCwuWzodW
mj58Ns5lrhYSipmHRE92HrgKWJU0JB6zBuYe6pgf4AU2MTB8fVdvNXc2xC61KDOm
+0HlkobRGdrbXhrdhJs2kZTZRAiVIDFphVjBoH8FuHyYe2NJvl8I
-----END CERTIFICATE-----
Generated at Sun Dec 21 19:29:04 2025 by rpki-client