This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
File:                     W8VPKEgipxexrUw3z2nQls5_Z3M.mft (raw, json)
Hash identifier:          3yXNL1T3cYSS3i/7RPJvSIG8UERv7JebB2hpnh9qzA0=
Subject key identifier:   4A:11:BC:C2:1D:DB:16:34:25:D6:87:7B:30:8B:43:10:45:B5:0F:D3
Authority key identifier: 5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73
Certificate issuer:       /CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
Certificate serial:       0636
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
Manifest number:          0631
Signing time:             Sat 20 Dec 2025 02:29:20 +0000
Manifest this update:     Sat 20 Dec 2025 02:29:19 +0000
Manifest next update:     Mon 22 Dec 2025 02:29:19 +0000
Files and hashes:         1: W8VPKEgipxexrUw3z2nQls5_Z3M.crl (hash: sbHMh0uE3itPzi+dQCKw3RhZN3tvSR36pfGYz1p/9Zo=)
                          2: 7D4DF23EBD5E11F0AC3505AFDAE4EC9C.roa (hash: 66WTE1t1auuEEXYPV89TT/2BRb9tAd4Yku3NmYbxCrY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                          rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FRI, serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
        Validity
            Not Before: Dec 20 02:29:19 2025 GMT
            Not After : Dec 22 02:29:19 2025 GMT
        Subject: CN=69460a00-6557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:84:d8:24:35:09:44:59:35:a6:d2:24:1a:
                    be:2a:33:a1:27:92:3b:ed:43:09:da:fd:ac:3a:b8:
                    d5:c6:09:37:5d:18:31:34:6a:bc:d9:c4:71:73:eb:
                    26:c1:9c:54:e5:38:4c:d8:cb:d2:04:3f:02:b8:a5:
                    b6:96:7f:73:77:ad:07:85:02:cf:17:6c:f7:f6:0e:
                    28:70:7c:ec:22:16:b4:2a:08:b1:51:82:b1:06:ca:
                    ad:04:e9:7b:99:2e:98:25:20:ca:f4:b2:0b:70:e0:
                    ce:93:22:dd:01:eb:3b:65:a0:60:47:1c:84:e0:b9:
                    34:f0:1c:f5:a0:3a:96:24:86:95:88:6e:ce:95:7b:
                    20:d9:e1:e4:58:28:2a:e8:64:e9:9e:c0:a8:34:0f:
                    94:15:fb:c1:aa:60:42:10:18:3a:79:d1:7b:63:01:
                    95:70:c3:97:55:06:c9:3e:0d:50:9f:91:59:dc:26:
                    49:58:16:f7:69:6b:6f:a2:b3:65:01:d8:d4:9d:19:
                    7a:3c:aa:96:96:19:0e:79:7d:0d:53:1e:12:7d:7c:
                    2e:8f:b2:c6:a2:55:07:64:06:a3:d5:27:87:d9:60:
                    f7:5a:37:8a:a7:d6:93:3c:b9:0a:97:e3:01:7a:ed:
                    5e:0c:21:3a:0e:29:66:49:cd:21:71:cd:f8:ac:d9:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:11:BC:C2:1D:DB:16:34:25:D6:87:7B:30:8B:43:10:45:B5:0F:D3
            X509v3 Authority Key Identifier:
                keyid:5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:61:00:14:f8:61:5e:1d:af:40:4c:7b:ce:26:7d:71:d1:4d:
         4f:03:d4:c2:74:22:d2:d3:1b:82:05:df:6a:08:07:fd:d0:ef:
         43:06:21:e8:6d:ce:dc:17:7c:79:c9:c1:f4:2c:0c:0e:f1:70:
         0a:0f:ee:8d:33:6f:6c:7a:29:c7:24:a1:3c:fc:d3:b4:40:f1:
         7d:28:50:85:45:37:1f:0c:03:6c:ec:e4:70:fc:e4:8d:21:01:
         62:9f:f8:b4:16:d1:dd:cc:f4:ad:22:d5:8b:4b:8b:ce:59:7b:
         e2:eb:52:0d:0f:9b:1a:f7:ee:53:61:1e:dd:f0:e8:43:66:44:
         83:b0:2e:de:f9:1a:2c:51:f7:f7:b8:1b:97:fd:76:47:15:10:
         25:b7:c7:d1:f7:50:63:c8:99:fe:e7:cd:eb:df:7e:a7:84:24:
         e6:e7:b7:63:32:88:25:3a:b9:08:b1:a6:5f:b5:9f:39:98:7b:
         db:31:75:ee:94:e9:1c:47:49:6b:4c:bc:5c:4f:a8:29:a7:00:
         8e:5d:1b:80:37:4b:27:06:0b:49:00:01:5b:f2:f9:3d:3c:19:
         dd:48:c2:28:05:98:50:15:e1:4f:f3:8d:44:e2:a7:24:69:43:
         bf:8b:af:11:23:b1:08:99:55:15:54:be:bb:01:d2:dc:da:a6:
         08:75:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:38:54 2025 by rpki-client