This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
File:                     wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft (raw, json)
Hash identifier:          efiHu9t7PWVhWH3yAQ5DBhhjl7CF1MHLyS1iTEDD/cM=
Subject key identifier:   3A:D5:FC:57:CF:50:9F:5D:E6:1C:E0:48:35:1F:05:EF:2A:0A:E2:95
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       36
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
Manifest number:          32
Signing time:             Sat 20 Dec 2025 05:18:41 +0000
Manifest this update:     Sat 20 Dec 2025 05:18:41 +0000
Manifest next update:     Mon 22 Dec 2025 05:18:41 +0000
Files and hashes:         1: wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl (hash: iA7TITffloRyVNWtBtsKf5l7AOV4dObSWCHnuF5zl6w=)
                          2: 16E842F8BDAC11F0B472F08BDAE4EC9C.roa (hash: EhpKapZP+bvJ8pIPWPKsjy23/0JHazNOFIbhIW5/eUc=)
                          3: DD8F2E9EBDAC11F08F343E90DAE4EC9C.roa (hash: 5WJzxDy5nvQm6CqVL268mDqdJo4LFUDkVHR+SznmwYg=)
                          4: 86422D44BDAC11F0A5532990DAE4EC9C.roa (hash: W7FXh+hNR8i93yao767hDspLMIQ2YRE4D3awbUVSIG0=)
                          5: 5F1173FCBDAB11F0BA239987DAE4EC9C.roa (hash: jVv5VcWRpd8J/KSQpIqnUe5qOeAoFnD/nSVjJMGdGek=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 20 05:18:41 2025 GMT
            Not After : Dec 22 05:18:41 2025 GMT
        Subject: CN=694631b1-d14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:e2:36:b8:28:f0:8d:5f:d1:d5:a6:35:d3:
                    e3:66:9a:f4:24:76:ea:8d:7d:d1:d2:24:f9:fa:70:
                    b1:50:2a:1c:9d:fb:f6:6b:86:58:bd:1e:78:28:df:
                    53:10:7c:a8:de:75:0e:3a:16:c1:e9:a7:fb:a1:2f:
                    04:2b:6b:5f:b5:0f:6c:73:28:6a:44:fd:c2:9a:ac:
                    ef:12:96:ca:a5:1d:6f:6b:95:44:3d:f9:00:a0:ba:
                    aa:70:1f:ed:dc:b4:d6:0d:d5:7a:23:8a:eb:f4:f2:
                    19:b9:d8:e0:58:7e:1b:cd:a7:99:f6:22:38:fd:37:
                    58:de:68:fa:05:f8:05:26:88:d8:26:cc:79:6f:8a:
                    77:84:fb:5a:09:93:c8:83:71:4c:37:1f:47:56:ca:
                    01:41:7c:90:b1:6e:01:2d:22:b6:3b:4e:d7:6f:72:
                    ab:92:90:f5:44:8b:4a:83:4c:99:65:57:e2:ec:55:
                    c7:89:14:40:62:28:50:c2:fd:03:ab:6d:53:d1:31:
                    4e:e5:c9:7e:8b:f2:eb:56:6f:1a:dd:74:6d:a8:90:
                    84:ba:11:5f:5e:8e:ee:93:e3:5d:32:76:ab:6c:0d:
                    b8:ff:39:3f:5f:35:9a:e1:f5:f3:ed:a7:7c:d5:fa:
                    ac:e7:35:c8:28:ec:77:f2:0a:ba:e9:0f:58:f1:1d:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D5:FC:57:CF:50:9F:5D:E6:1C:E0:48:35:1F:05:EF:2A:0A:E2:95
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:87:b2:a8:8e:32:9e:dd:b0:eb:23:4c:d5:80:5f:e3:79:
         2e:e9:4d:85:31:29:84:24:31:f8:ba:00:33:a9:00:e6:cc:d4:
         65:e7:46:b2:dd:ae:c8:d5:53:26:c9:aa:61:51:0b:b2:91:11:
         96:08:a5:c8:50:de:6f:36:b4:46:3d:a0:78:5c:3f:01:f2:63:
         5e:01:d9:49:47:a1:e9:59:69:73:35:df:4a:a6:bf:66:5d:94:
         8d:a4:84:e1:85:ab:68:1c:ac:13:8d:aa:a7:a0:62:24:8e:7b:
         4f:e6:95:dc:bf:f5:cd:f4:8e:cf:bb:4b:81:c8:59:e1:35:5f:
         8c:90:54:54:a1:3a:90:80:ba:d3:98:f3:0b:fc:84:eb:02:48:
         03:79:85:f9:71:13:d1:3a:cc:46:21:84:7b:ea:08:ab:9a:d6:
         23:9a:1c:fa:89:6d:2a:d2:23:d2:86:15:ee:39:6d:1f:36:20:
         af:6e:0d:d5:71:e6:60:db:b7:52:3a:6f:dc:29:ce:68:83:47:
         71:25:c0:80:db:1b:0e:bb:eb:4e:8a:31:82:e8:49:61:5f:f9:
         3c:de:23:9e:39:e3:33:ca:e0:f5:5c:58:46:bb:92:e7:46:3b:
         a9:59:72:dd:9e:e0:31:5a:ee:a6:f9:af:e1:5c:48:c6:8d:d8:
         c4:a2:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:59:21 2025 by rpki-client