This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
File:                     53ShMCOPlyuu0yi9QDj8r4LXhLc.mft (raw, json)
Hash identifier:          KNs3uOc8nbP5m3iVeY6YXUfMkPYQqD5oqnCEY1FCtt8=
Subject key identifier:   63:7E:82:E7:74:CD:0C:D2:1F:D8:E4:55:7C:1E:81:6A:A4:01:C5:17
Authority key identifier: E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7
Certificate issuer:       /CN=F364ECB6AF/serialNumber=E774A130238F972BAED328BD4038FCAF82D784B7
Certificate serial:       0525
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
Manifest number:          0523
Signing time:             Wed 31 Dec 2025 02:53:24 +0000
Manifest this update:     Wed 31 Dec 2025 02:53:23 +0000
Manifest next update:     Fri 02 Jan 2026 02:53:23 +0000
Files and hashes:         1: 53ShMCOPlyuu0yi9QDj8r4LXhLc.crl (hash: 4Zp284+cBDpGJnGEiRAKl7M81hmAIlX0eNdrr8iPyTI=)
                          2: 8A3DCB9072AE11F0B83B26D8DAE4EC9C.roa (hash: h7BfLem+lt8sj9UINDClAa5pp82tMDXEYcWtLgpqyKw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 02:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364ECB6AF, serialNumber=E774A130238F972BAED328BD4038FCAF82D784B7
        Validity
            Not Before: Dec 31 02:53:23 2025 GMT
            Not After : Jan  2 02:53:23 2026 GMT
        Subject: CN=69549024-34db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:a5:56:5f:bf:ae:c4:2c:a4:3b:c8:e3:49:
                    48:66:c8:95:d6:14:4a:b3:15:ea:39:71:be:7a:67:
                    a1:67:a5:ee:36:8d:53:62:c7:c5:7a:d9:0a:8f:08:
                    e0:31:7c:6f:c9:9e:45:2f:92:cc:3a:fb:38:9a:37:
                    ac:f4:c4:ff:04:00:8e:8a:ca:dd:a0:aa:a0:80:b6:
                    35:05:93:d4:1c:d5:e9:20:bb:77:7e:a7:46:ba:ab:
                    f2:5d:7e:54:6a:98:69:9b:ad:eb:46:f1:42:ef:b7:
                    32:32:9e:a6:c4:fa:ac:42:87:ec:22:f7:e8:9b:4d:
                    43:43:34:95:fd:b7:63:72:20:56:00:ac:4f:98:ad:
                    74:96:5e:9f:34:e1:f0:32:ba:58:7f:14:00:bd:86:
                    4d:77:8e:a3:34:03:b4:ff:c8:3d:87:55:3f:4f:76:
                    87:c7:80:eb:e2:a6:8f:4d:20:e3:11:1c:71:64:21:
                    e3:16:94:48:38:e6:0b:b2:bf:c4:e6:84:8e:18:25:
                    52:4e:af:a0:51:5d:3e:90:d9:ec:e4:5c:a7:2a:66:
                    b6:94:a6:53:2d:ab:a2:15:79:b8:2d:8e:68:aa:1f:
                    82:f6:96:3b:e7:35:84:d2:47:c0:d4:b9:af:f8:75:
                    64:a5:ad:13:61:6e:f9:05:af:d8:91:7d:27:50:7e:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7E:82:E7:74:CD:0C:D2:1F:D8:E4:55:7C:1E:81:6A:A4:01:C5:17
            X509v3 Authority Key Identifier:
                keyid:E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:95:3b:9f:a0:f7:a4:ab:74:bb:ad:6a:66:42:ac:4c:53:
         4a:05:f2:60:9f:b9:4e:a7:9e:6e:7b:2d:70:02:6c:9a:32:3d:
         df:27:ac:d3:8f:cc:b9:b3:8b:eb:ed:1e:f2:07:a6:4b:2d:dc:
         1c:a1:f2:e1:cf:e9:2c:02:ab:56:cf:eb:a8:71:15:5e:f6:58:
         00:ab:5f:53:bc:fb:ce:91:95:c7:8e:f8:fc:71:11:96:74:3a:
         49:b7:57:cd:15:c2:6b:82:15:83:5d:44:ab:cb:28:9c:6e:65:
         db:24:af:f2:00:48:5c:60:69:7c:f9:77:2c:f3:ec:2d:3e:db:
         ac:fd:b8:5c:3a:d9:41:e3:35:30:55:cd:72:78:7a:c7:d4:6e:
         10:f5:bd:2b:76:2c:1f:3b:c7:35:30:d3:48:6e:4d:7f:b1:82:
         ec:e4:6f:46:60:33:25:ec:84:0c:46:67:d8:ec:6c:46:90:e8:
         81:35:83:a6:a6:dc:89:1b:3e:fb:f4:bc:70:d5:75:6e:4a:98:
         db:6e:a8:7a:3a:9e:51:dc:c3:58:53:bc:45:8b:bc:3a:0f:af:
         96:4f:60:21:34:e3:42:cc:08:fd:be:71:ca:49:e7:ba:a2:20:
         be:86:a4:8f:22:dd:40:c7:dc:97:24:7e:63:1c:d5:88:06:6c:
         3f:20:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 02:50:34 2026 by rpki-client