This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File:                     3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier:          fMJ/44Y5Dvb2iNXUtezEalqgCZKt2Mzw8LA5HskrXt4=
Subject key identifier:   58:9B:4A:1C:C7:90:79:0D:E2:24:BF:C5:46:43:5C:39:22:8E:77:0E
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       066A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number:          0668
Signing time:             Wed 24 Dec 2025 02:26:42 +0000
Manifest this update:     Wed 24 Dec 2025 02:26:42 +0000
Manifest next update:     Fri 26 Dec 2025 02:26:42 +0000
Files and hashes:         1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: cQnRTzs5zQmN/YNcOmK1eGaStPZeWNk97RiqlgY1DTI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 02:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Dec 24 02:26:42 2025 GMT
            Not After : Dec 26 02:26:42 2025 GMT
        Subject: CN=694b4f62-4b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:c8:35:e3:15:e6:99:0a:e8:ce:c1:3b:64:
                    e4:76:6b:96:f4:59:6a:e7:e5:6a:2a:6a:46:84:62:
                    e6:7a:c7:17:01:04:51:6a:2e:e6:f2:4e:c6:97:fd:
                    46:aa:d3:49:91:98:08:20:c7:27:cc:52:f4:f5:e8:
                    ca:11:30:17:e5:70:02:7d:f5:80:70:c2:6a:d5:47:
                    3e:7f:ae:a6:38:e9:d6:7c:fc:fd:83:16:a5:9a:90:
                    bc:54:65:4b:0c:ec:23:43:15:db:81:b4:9f:99:1e:
                    76:69:bf:7b:8d:60:89:e2:58:aa:6a:5e:5f:ad:12:
                    2b:13:97:3a:5e:dc:c1:08:32:86:c6:0b:aa:bd:47:
                    3a:d8:7b:a4:43:92:d9:75:76:de:9c:91:52:a6:59:
                    8f:d6:06:b3:83:4c:f0:57:96:4e:1e:7a:0a:74:e4:
                    4c:da:14:91:6a:b8:84:82:de:8a:64:e1:21:fc:4e:
                    85:14:d7:1d:6a:dc:16:12:5d:f0:67:2b:dd:57:4f:
                    7e:eb:63:98:44:73:04:9c:cb:5c:4d:84:fa:4d:c8:
                    3a:34:bc:37:fd:87:7c:d7:64:aa:ac:52:83:3e:c2:
                    bf:dd:be:11:31:07:15:f0:cb:ed:c9:70:67:9b:a7:
                    5f:6a:f8:f8:f7:4c:7e:0a:42:df:8f:dc:15:e9:68:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:4A:1C:C7:90:79:0D:E2:24:BF:C5:46:43:5C:39:22:8E:77:0E
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:d3:3a:7d:78:87:a8:ae:e0:1e:3f:39:6a:96:05:cb:c5:
         29:50:2a:ab:f7:57:c2:61:5e:05:82:af:7c:9d:4f:d9:96:f7:
         43:d0:1c:dc:70:35:e5:0b:9e:45:32:e9:6f:bc:0e:7f:61:3f:
         1a:39:38:fc:6a:46:06:07:15:de:42:3d:fd:bf:0d:94:14:f5:
         4a:54:75:3a:b4:33:12:6b:a2:f9:94:dc:69:01:5a:5c:80:9a:
         fa:e3:cc:61:93:79:83:10:cb:52:af:ab:43:af:06:f7:61:58:
         10:e2:73:a0:dd:f5:da:7d:0f:f2:69:1c:05:ed:d2:8a:d5:b2:
         d1:a6:8a:64:5c:5a:ef:7b:d9:e7:60:b5:98:74:58:ee:da:ab:
         5f:c7:e2:c7:f6:07:a8:8d:55:ca:7b:08:af:d7:31:97:fa:e1:
         43:fd:94:28:66:b4:2c:70:e2:d8:bb:ce:63:9c:21:ac:6a:47:
         ed:88:b1:e7:c6:78:be:37:6b:12:ab:fe:43:db:21:bb:d3:6a:
         f1:39:83:8b:fb:dc:37:bb:48:f3:ea:f7:e8:48:fb:a3:14:9e:
         c8:39:a0:51:37:8f:09:8c:64:dd:2b:9c:b3:20:19:1b:fa:1c:
         53:de:93:2f:55:0c:97:a8:3f:bd:f6:88:8f:29:59:5f:85:d0:
         78:7a:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:54:04 2025 by rpki-client