This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
File:                     D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft (raw, json)
Hash identifier:          rLrp1ANnyC2xjCxz/Un0CjM9diSf/xaCJ+y6NgiKrIk=
Subject key identifier:   D9:0E:6E:CA:C2:F5:F1:8B:23:63:2E:1D:46:07:2C:1B:09:F0:AC:C7
Authority key identifier: 0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08
Certificate issuer:       /CN=F3626CB6AF/serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
Certificate serial:       06FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
Manifest number:          06FC
Signing time:             Wed 31 Dec 2025 02:04:54 +0000
Manifest this update:     Wed 31 Dec 2025 02:04:54 +0000
Manifest next update:     Fri 02 Jan 2026 02:04:54 +0000
Files and hashes:         1: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl (hash: FM5EhDPkOugMLN32lPw+QCBjVYk7AtwgGX9axCjt0BQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AF, serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
        Validity
            Not Before: Dec 31 02:04:54 2025 GMT
            Not After : Jan  2 02:04:54 2026 GMT
        Subject: CN=695484c6-466c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:1c:36:8e:dc:6f:df:0f:bc:c6:92:36:25:
                    cd:bd:be:b6:ff:94:27:a2:75:7b:17:0d:3d:20:27:
                    db:8e:e1:f0:74:e8:5d:39:1d:55:85:a2:f1:87:5d:
                    d4:5c:68:00:af:f4:b1:6d:37:cf:fb:11:52:24:56:
                    97:e9:3b:2c:94:2c:9a:91:19:14:d2:d0:0e:c6:b4:
                    a4:33:2d:5f:37:02:f2:1f:30:4c:d8:37:32:b5:23:
                    d5:b4:35:c3:0e:3a:c6:fa:de:7e:1b:60:c4:53:b8:
                    68:57:1e:44:f0:6b:d1:9f:9b:07:34:ba:e6:53:d4:
                    c1:c7:a3:64:14:07:28:a0:c4:44:01:66:56:d7:85:
                    20:a5:ab:9a:ab:92:64:31:7b:2c:d2:fe:81:0c:07:
                    8e:9b:08:45:17:b3:0a:8f:6e:6b:ee:fa:cf:75:f4:
                    78:9d:92:be:27:ba:e8:e7:7e:0d:0f:a1:02:10:96:
                    56:a1:f8:17:2a:f3:21:ec:57:3e:af:cf:43:1b:76:
                    b1:4d:ec:d2:5f:66:51:bc:e9:52:b2:2a:d5:92:48:
                    2d:c8:a1:08:bc:4c:a7:b1:16:d4:3a:b4:13:15:1d:
                    42:30:9a:62:86:5a:09:06:3e:77:d5:07:7b:b9:48:
                    4d:1e:6c:b4:19:fe:20:5d:56:a7:de:9c:e5:9d:d1:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0E:6E:CA:C2:F5:F1:8B:23:63:2E:1D:46:07:2C:1B:09:F0:AC:C7
            X509v3 Authority Key Identifier:
                keyid:0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:f2:1b:fe:43:f3:c4:ef:a4:b9:93:20:de:cf:30:c7:08:
         3b:6f:98:6d:35:64:98:d2:82:f4:51:35:86:02:8f:13:54:6d:
         af:e8:2a:47:12:f0:32:c8:d4:13:07:8e:76:89:0b:6e:86:74:
         11:0c:20:88:a8:7d:10:f3:36:34:34:99:df:35:ab:5f:e8:70:
         1e:8f:ea:4b:23:37:bd:e3:3a:bc:b0:7a:79:73:f9:49:1f:30:
         79:d3:57:aa:9d:51:60:73:b3:6f:0f:82:74:d5:07:69:97:9a:
         bc:bf:47:01:49:bc:31:36:eb:c5:b5:1e:05:d5:5f:50:73:a3:
         13:b8:23:81:8f:c2:ff:64:ca:23:29:08:38:69:e4:93:6c:58:
         7c:37:36:f9:65:b1:20:a2:73:4e:65:10:b8:ac:48:6b:fa:d8:
         e8:e1:36:e3:87:69:32:07:33:84:0a:ee:73:aa:cc:6c:27:80:
         40:47:0b:ca:d7:ee:a4:ed:37:c3:7b:2f:32:9f:90:8c:01:72:
         47:fe:6c:42:b9:fa:95:2d:6c:14:e9:5c:40:72:7b:ed:2e:3d:
         ee:a3:e6:8f:ae:f2:4f:ef:f7:91:8f:1d:05:97:6d:87:98:2d:
         d5:4a:9f:eb:02:3e:cc:0e:99:d9:9f:31:8d:81:d5:c2:01:f7:
         35:22:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:30:48 2025 by rpki-client