This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          ksyYIz1Yh5UVUVQsPsEV8Bba680jKHYaBbJwM2rZTWU=
Subject key identifier:   A4:87:5F:FC:F2:18:27:F2:E3:17:FE:19:E3:7D:F7:CC:B2:37:F5:3C
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       02D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          02CD
Signing time:             Sun 28 Dec 2025 04:12:52 +0000
Manifest this update:     Sun 28 Dec 2025 04:12:51 +0000
Manifest next update:     Tue 30 Dec 2025 04:12:51 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: xOhrVQpWAauYg/Fs+oy3TvKKJ3638h8SEqeF35nyPxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 04:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Dec 28 04:12:51 2025 GMT
            Not After : Dec 30 04:12:51 2025 GMT
        Subject: CN=6950ae44-9ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:2a:d4:91:11:06:92:ff:fd:c8:5d:0a:07:
                    c4:f2:79:38:26:54:df:b2:51:16:85:56:3d:9a:98:
                    f2:95:93:02:a5:60:a2:ab:77:0c:96:ca:00:b8:e5:
                    66:b6:db:c1:39:f7:7b:a8:bc:6d:32:73:a3:69:ec:
                    b5:c4:4c:e9:31:73:3a:e5:d8:72:1a:26:c6:96:43:
                    da:d1:ce:30:69:27:f3:71:62:9c:d7:16:23:db:99:
                    55:11:9b:75:31:7b:d4:a9:b4:1d:b0:ea:b1:95:49:
                    8e:2c:1a:ee:a4:34:bf:ce:90:71:cd:fc:74:e3:b6:
                    66:26:72:df:8d:7a:8b:93:6c:d1:22:15:82:d3:2d:
                    5c:a9:7c:94:3d:34:a2:65:00:eb:2f:25:cc:07:f7:
                    07:38:83:1f:b6:70:53:dc:16:06:a9:99:3c:2f:e8:
                    9b:ee:e0:9f:92:34:37:8e:b7:08:46:cc:46:ba:d4:
                    3a:16:f2:f7:24:51:15:e9:8c:8b:12:85:08:47:56:
                    e0:b0:3a:29:75:e9:43:11:0b:27:f0:b0:6d:d4:cb:
                    df:42:fc:09:e3:d9:51:b3:25:9b:b0:eb:4e:c9:2e:
                    da:54:34:9b:10:ac:d2:47:1b:7f:df:e0:4f:e8:7c:
                    aa:35:3e:63:cd:93:97:fb:29:ab:ee:1b:f9:42:ea:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:87:5F:FC:F2:18:27:F2:E3:17:FE:19:E3:7D:F7:CC:B2:37:F5:3C
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:a2:a7:60:80:63:83:7a:16:55:bd:08:80:93:cf:0c:d3:
         08:09:dc:ed:c4:c4:20:96:7f:64:a9:a0:d3:a9:43:24:17:53:
         98:e4:1b:1f:07:c1:9d:25:36:a3:16:bf:c6:23:1e:1c:df:9a:
         3d:0b:6c:f2:81:a5:30:58:61:9e:e1:5d:38:fc:f7:a4:c3:60:
         31:84:f2:ca:17:98:17:a2:8c:d1:b4:7a:54:bc:16:8c:ac:cc:
         b2:31:2a:2a:eb:ff:b4:75:a5:2b:3a:af:be:3c:44:bb:22:31:
         6e:af:ed:8c:60:35:da:be:01:d0:61:f7:42:63:64:d5:bc:2e:
         bc:03:e5:ff:f7:c3:c3:b6:6a:ce:dd:3e:fc:73:b9:e4:a5:84:
         48:9c:8c:48:a3:74:6d:3a:9e:63:95:7f:14:fb:5c:e4:77:1d:
         72:82:ed:a1:28:43:ce:e4:b1:c2:a8:3f:10:ca:4e:43:f6:5c:
         61:77:36:f9:b9:46:4e:36:54:2d:b6:84:41:96:5f:3e:ec:3e:
         27:64:6d:0e:57:4d:25:39:26:d6:29:5f:d6:66:18:f5:86:be:
         91:c6:b0:e4:d2:e6:4d:f0:1e:12:b4:e0:79:71:68:2e:9d:92:
         49:6b:18:2c:bf:2b:40:9f:05:32:8c:82:dc:14:73:a5:1d:a9:
         27:15:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 05:22:26 2025 by rpki-client