This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          mIl+jUnOUL6jYkvWX19PDh6PfPPzbailPdmqDS4Fu94=
Subject key identifier:   B4:DD:45:49:89:0C:B0:91:43:DA:C0:2C:DA:42:D7:7F:4C:1F:DD:76
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       01EB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          01EB
Signing time:             Sat 20 Dec 2025 04:30:08 +0000
Manifest this update:     Sat 20 Dec 2025 04:30:07 +0000
Manifest next update:     Mon 22 Dec 2025 04:30:07 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: +bI5S9hP4sduujParJJhZzIhv6Kbl38xbduSz4PGfRE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Dec 20 04:30:07 2025 GMT
            Not After : Dec 22 04:30:07 2025 GMT
        Subject: CN=69462650-2e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:0c:a9:54:a5:f1:14:27:fd:b0:5e:c3:64:
                    b9:b2:d7:3c:a1:52:17:a2:5e:09:af:ef:81:8c:db:
                    b2:5a:82:dd:a3:29:b2:2a:92:6e:61:1e:aa:fd:7f:
                    04:9c:74:37:13:79:a2:bc:b3:98:ae:0e:c4:f1:33:
                    fe:73:5c:e5:69:5f:bd:09:37:06:53:36:41:ac:37:
                    ec:98:be:76:5b:9e:04:3b:97:d0:e9:0e:62:2b:cc:
                    db:d2:05:1d:f9:88:a7:29:5f:42:77:06:c7:2e:b4:
                    67:92:78:03:07:24:8d:99:47:d7:50:08:c4:6a:cc:
                    3f:9e:e8:0d:d3:c7:69:40:fa:e9:c4:a6:9b:05:fe:
                    41:52:4c:0f:e2:8b:5c:0f:7c:ae:5c:a1:67:fb:e0:
                    dd:d2:f5:d3:1c:61:e8:17:21:2e:93:d3:95:cf:e4:
                    52:51:d2:5a:d1:49:62:27:2d:6b:38:e4:d3:b8:09:
                    c0:43:6c:ed:07:36:aa:4d:3c:45:ed:22:45:7c:e8:
                    d1:78:40:51:ed:47:84:bf:ac:41:da:44:78:19:b4:
                    54:c9:79:d6:ed:d9:ef:ad:c9:d9:3e:ec:88:ac:63:
                    f9:35:bf:af:9b:ea:57:24:5a:95:4d:a0:5c:77:46:
                    ca:84:73:c4:0c:c9:73:b3:28:53:5d:b7:14:e9:d2:
                    9a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DD:45:49:89:0C:B0:91:43:DA:C0:2C:DA:42:D7:7F:4C:1F:DD:76
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:04:57:11:79:73:1b:4a:c8:49:96:78:07:9d:77:3f:bb:
         38:30:de:5b:ad:1f:5b:42:c4:02:07:49:b6:0f:b1:c8:5b:1d:
         ca:75:5f:bb:3b:e2:61:ba:b7:8c:d3:5e:ed:31:22:59:c1:f1:
         91:12:de:70:8e:b1:ba:de:f2:b4:07:97:49:ef:f4:b8:80:e6:
         52:eb:7c:63:ef:6c:cc:01:e3:b9:46:db:2a:7d:61:6e:bb:e7:
         04:c4:85:25:8c:33:3a:bf:cc:02:cb:9d:b3:02:29:11:5f:8c:
         c2:ff:06:1b:9d:28:94:9c:94:ce:2e:f1:e8:6f:c1:b8:d7:3d:
         96:30:b9:1e:90:4b:54:04:dc:f3:33:3f:64:4e:e6:b4:59:2c:
         f5:f9:fa:22:bb:7e:db:bf:15:e9:9a:49:d0:5b:a6:4b:35:23:
         44:4f:f8:30:67:ea:85:e4:12:43:27:95:c4:26:73:a7:32:8d:
         66:4b:15:df:1a:ce:a3:22:55:28:b2:a7:80:a8:c7:05:a2:85:
         e3:fc:e9:8b:50:da:4c:00:09:0f:83:5b:f5:3e:6f:c2:c8:1d:
         01:c6:df:3d:40:9f:9d:97:43:01:93:9a:ed:1b:45:4c:11:05:
         1e:ad:57:21:df:12:63:af:6b:e7:4f:4c:1f:4b:2b:7c:23:0b:
         e8:83:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:09:51 2025 by rpki-client