This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft (raw, json)
Hash identifier:          bCEjEaqgW3/JJoUgRyTyi3Dx5UlRbLV9fUT7iLhngCU=
Subject key identifier:   05:8F:BD:95:FF:B6:E6:06:17:7F:C2:A4:91:8B:9B:15:3D:DC:3B:DC
Authority key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Certificate issuer:       /CN=F3674908AR/serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
Certificate serial:       B0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
Manifest number:          AF
Signing time:             Fri 19 Dec 2025 05:03:10 +0000
Manifest this update:     Fri 19 Dec 2025 05:03:09 +0000
Manifest next update:     Sun 21 Dec 2025 05:03:09 +0000
Files and hashes:         1: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl (hash: lCY8ly5oHT+h6DI6KeSezkUtAPSIFM+YyN57Y6yo1z0=)
                          2: 1944E674564511F0983236F2DAE4EC9C.roa (hash: Y7C2EDuJLg0UUohvGlHcA8fBY7urPGjjAraukXhUClw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                          rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 05:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Validity
            Not Before: Dec 19 05:03:09 2025 GMT
            Not After : Dec 21 05:03:09 2025 GMT
        Subject: CN=6944dc8e-cb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:77:7b:7e:14:7e:14:b2:1a:bc:30:f6:fa:
                    78:1e:5a:74:09:ad:9b:98:6e:ff:07:e6:c0:b6:71:
                    eb:c6:9f:be:92:09:18:f5:ec:55:ed:87:0f:80:06:
                    3b:c7:d1:db:25:d1:f3:1b:68:b7:c2:af:95:71:b6:
                    fb:fb:c2:70:af:29:34:da:58:ef:55:b8:dd:8c:e6:
                    60:96:af:80:6e:4c:ec:5b:db:41:49:48:1d:b1:03:
                    52:2a:1a:8a:4a:db:eb:9e:c2:ab:80:e4:ec:45:f1:
                    08:1c:8d:9e:9a:0e:1f:d8:17:e8:4f:56:d4:ba:7a:
                    8d:79:b2:8d:50:ed:cf:bf:e7:8c:5e:43:5a:a1:8b:
                    57:0b:64:5e:f1:67:18:9b:c1:14:96:30:05:7f:b3:
                    81:57:89:c4:56:9e:08:e2:0b:cc:48:3a:38:63:54:
                    b0:ce:8a:f4:da:43:32:84:fd:7e:7c:26:73:b4:76:
                    d7:15:51:df:58:3a:b3:ee:b8:34:bf:db:36:b2:cf:
                    d7:9b:d4:60:3c:0e:d4:4b:74:a1:d6:58:36:90:31:
                    9f:54:7f:1a:dd:32:34:04:e4:98:55:40:fd:f7:7a:
                    1f:7b:d6:58:68:af:99:88:01:c8:be:ae:42:85:6b:
                    41:0e:cc:bc:c0:c9:ca:07:77:90:c4:39:a9:55:a3:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8F:BD:95:FF:B6:E6:06:17:7F:C2:A4:91:8B:9B:15:3D:DC:3B:DC
            X509v3 Authority Key Identifier:
                keyid:60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:59:45:ed:82:d2:50:c2:00:47:69:8d:6f:75:33:32:52:88:
         55:57:52:33:cd:dd:21:57:e4:eb:21:7e:1d:83:25:63:28:b4:
         1e:72:69:62:f9:00:f1:02:8f:2c:6a:a0:46:45:81:a7:bf:58:
         c0:07:f7:c7:37:af:09:e7:be:fa:b2:9e:02:dc:1c:3e:44:c6:
         42:d3:5a:09:3f:04:58:35:ee:89:3e:d4:ed:5d:ec:26:43:ee:
         2b:1a:86:d6:a9:13:e2:20:cd:7c:22:07:74:b2:f8:94:e2:f9:
         d3:97:b9:55:fe:67:b2:6d:ae:e4:86:f5:9d:dc:41:c1:e8:e4:
         3e:0f:15:2b:19:6e:9f:8a:a4:53:b9:95:3f:c9:c7:a9:83:a3:
         06:7c:93:6b:3b:91:0a:3e:ec:73:3b:5e:73:86:88:62:81:3e:
         29:cd:20:1d:65:05:3a:ea:ed:56:dd:5a:0d:03:84:e8:46:70:
         6e:83:1b:56:44:1f:66:05:56:bf:31:14:cc:70:cc:d1:0c:23:
         8b:f4:65:51:20:f4:46:62:3e:8f:8a:20:a5:a7:7c:f1:fd:4e:
         e2:ac:3a:8c:e4:da:6b:9d:5a:84:fd:7e:f0:3d:ca:ed:f4:89:
         d2:a1:cb:98:d6:fe:bc:04:60:70:b3:0c:84:6e:9d:ca:d7:49:
         f8:d5:ac:e0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICALAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ5MDhBUjExMC8GA1UEBRMoNjAyRjk4NkQ5REJFMzIyMTQxNzQ1NUQ1NEVGMjMz
NjFGNTQ3NkZFMjAeFw0yNTEyMTkwNTAzMDlaFw0yNTEyMjEwNTAzMDlaMBgxFjAU
BgNVBAMTDTY5NDRkYzhlLWNiNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYd3d7fhR+FLIavDD2+ngeWnQJrZuYbv8H5sC2cevGn76SCRj17FXthw+A
BjvH0dsl0fMbaLfCr5Vxtvv7wnCvKTTaWO9VuN2M5mCWr4BuTOxb20FJSB2xA1Iq
GopK2+uewquA5OxF8QgcjZ6aDh/YF+hPVtS6eo15so1Q7c+/54xeQ1qhi1cLZF7x
ZxibwRSWMAV/s4FXicRWngjiC8xIOjhjVLDOivTaQzKE/X58JnO0dtcVUd9YOrPu
uDS/2zayz9eb1GA8DtRLdKHWWDaQMZ9UfxrdMjQE5JhVQP33eh971lhor5mIAci+
rkKFa0EOzLzAycoHd5DEOalVoy1dAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBY+9
lf+25gYXf8KkkYubFT3cO9wwHwYDVR0jBBgwFoAUYC+YbZ2+MiFBdFXVTvIzYfVH
b+IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0OTA4LzdFQjgxMkRFNTY0NDExRjBCQ0I0RDVFRERBRTRFQzlDL1lDLVli
WjItTWlGQmRGWFZUdkl6WWZWSGItSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lDLVliWjItTWlGQmRGWFZUdkl6WWZWSGItSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzQ5MDgvN0VCODEyREU1NjQ0MTFGMEJDQjRENUVEREFFNEVD
OUMvWUMtWWJaMi1NaUZCZEZYVlR2SXpZZlZIYi1JLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRWUXtgtJQwgBHaY1vdTMyUohVV1Izzd0h
V+TrIX4dgyVjKLQecmli+QDxAo8saqBGRYGnv1jAB/fHN68J5776sp4C3Bw+RMZC
01oJPwRYNe6JPtTtXewmQ+4rGobWqRPiIM18Igd0sviU4vnTl7lV/meyba7khvWd
3EHB6OQ+DxUrGW6fiqRTuZU/ycepg6MGfJNrO5EKPuxzO15zhohigT4pzSAdZQU6
6u1W3VoNA4ToRnBugxtWRB9mBVa/MRTMcMzRDCOL9GVRIPRGYj6PiiClp3zx/U7i
rDqM5NprnVqE/X7wPcrt9InSocuY1v68BGBwswyEbp3K10n41azg
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:01:31 2025 by rpki-client