This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
File:                     _eoOU4nJlJDK7YKxckgBHMMy7tk.mft (raw, json)
Hash identifier:          3tKBkkXxptbsZ/S80sexsnXWZldOoIL8j3xGugI63qc=
Subject key identifier:   79:41:AC:10:D1:6B:34:13:96:E5:02:F9:17:4B:D0:49:FB:8A:BA:97
Authority key identifier: FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
Certificate issuer:       /CN=F36593EDAF/serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
Certificate serial:       2F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
Manifest number:          2C
Signing time:             Fri 19 Dec 2025 05:19:19 +0000
Manifest this update:     Fri 19 Dec 2025 05:19:18 +0000
Manifest next update:     Sun 21 Dec 2025 05:19:18 +0000
Files and hashes:         1: _eoOU4nJlJDK7YKxckgBHMMy7tk.crl (hash: 9uX2D3YLYT04g14IrV0WiAXIkZauk2dvRNLmlA5G4r0=)
                          2: 4ADCA614BE4511F083697AD7DAE4EC9C.roa (hash: KsRE8YxYfAamy8KQbWjEE04hfq5hfQMC2xTIjicbIBs=)
                          3: A9197C02BE4511F0A56D70D9DAE4EC9C.roa (hash: sDj0YyIRtK97M4F56g15Jln7lJ0EnGTXSqsDxsiEbSM=)
                          4: 861C7CAEBE4511F0B75667D9DAE4EC9C.roa (hash: OkqebA0OWr7M0W+78GzAZtR6dGZ8IZSnDyQyYfbN3aQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36593EDAF, serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
        Validity
            Not Before: Dec 19 05:19:18 2025 GMT
            Not After : Dec 21 05:19:18 2025 GMT
        Subject: CN=6944e057-100c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:47:3a:f3:ff:4c:50:21:43:af:83:c7:0a:
                    85:d3:b7:47:99:2d:06:1e:b6:c1:f1:24:79:42:f3:
                    de:d4:88:38:97:4b:f7:a1:5b:ab:c6:b9:67:ab:7f:
                    36:d4:99:65:c5:d9:cf:c3:d1:ed:a2:02:0b:75:c4:
                    c0:56:d3:99:b1:a3:40:84:57:f7:d9:62:ac:f2:38:
                    e3:fe:52:db:05:db:e6:3b:44:be:8c:a3:d0:73:61:
                    92:da:f5:4c:45:40:1d:9f:48:c7:fc:e7:63:60:fc:
                    07:70:a7:91:ea:de:ac:89:d8:fe:0d:9e:2a:83:cd:
                    7c:64:fb:a8:ef:3d:df:b4:e2:3a:ea:a5:11:a8:7c:
                    37:fb:ac:7a:3c:f9:69:08:5a:d1:87:a9:94:1f:55:
                    8f:83:2b:c1:fc:39:5e:1f:ef:e8:e5:2c:96:07:ba:
                    d7:cc:4d:33:c5:86:70:39:a5:a4:4b:48:ce:55:45:
                    c8:27:86:6d:16:73:70:63:05:14:49:d3:21:1e:7a:
                    64:4a:64:82:7a:f2:18:ec:8f:8b:87:01:e6:46:1f:
                    89:8c:7a:f8:1f:6e:a3:44:a4:69:2e:e1:59:21:4c:
                    1e:b6:7a:48:d5:01:9b:97:2e:2e:a5:aa:f0:a5:17:
                    e3:7e:a9:a0:f9:c6:d7:1f:65:5c:aa:7d:7f:d0:16:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:AC:10:D1:6B:34:13:96:E5:02:F9:17:4B:D0:49:FB:8A:BA:97
            X509v3 Authority Key Identifier:
                keyid:FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:96:02:82:df:ab:1a:4d:d5:42:67:3f:69:62:bc:9c:b2:01:
         f8:5f:a0:93:34:90:77:d2:6a:24:7d:69:e2:04:ed:73:38:da:
         a3:80:03:b6:17:d2:88:09:21:13:bb:d8:6c:9f:d3:f1:b4:b0:
         04:5e:94:c2:0e:37:87:b1:4a:75:a5:2c:1b:2d:33:b8:a3:b1:
         86:cc:fb:e2:24:cb:53:07:6b:9d:d6:60:c5:9c:a1:44:ed:7e:
         b4:5a:fb:67:e2:7a:8e:17:de:6a:f9:01:05:7c:3a:af:d1:26:
         97:b9:98:05:08:80:2e:55:12:1a:c9:18:2e:ff:55:d1:3c:22:
         07:33:b3:c6:1a:f8:60:86:50:ff:dc:1c:a0:04:c5:f9:b5:99:
         62:c9:c4:c3:f7:01:1a:93:30:38:2d:ee:af:f6:c0:e4:7b:ff:
         3e:2e:2d:12:dc:0c:de:85:c1:be:a3:08:0a:d6:51:a8:c8:30:
         6e:b1:e6:28:3f:ba:e8:a2:61:9d:ef:02:a0:34:3e:9f:cb:5f:
         ba:d4:6a:fc:13:2c:63:1d:6a:f4:ed:03:e6:be:13:84:33:7e:
         06:f7:92:ff:ae:f6:74:a0:41:c4:4a:25:3d:d1:ee:b0:0d:a9:
         15:17:31:2a:70:a9:4b:b4:6d:dc:9e:a5:9b:6c:f1:e7:fb:89:
         cb:db:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:48:51 2025 by rpki-client