This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
File:                     DcakyCEJ_yyznB0aWMOOMDPFoP4.mft (raw, json)
Hash identifier:          FGwg2txLyqwX+pKUSsPKzxPQm/HSSbVTntb/9arIvcM=
Subject key identifier:   E2:AB:63:87:C4:73:E0:81:EA:D4:5B:24:E4:E9:4B:C3:9A:D9:D4:32
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Certificate issuer:       /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
Manifest number:          0287
Signing time:             Tue 23 Dec 2025 04:15:20 +0000
Manifest this update:     Tue 23 Dec 2025 04:15:20 +0000
Manifest next update:     Thu 25 Dec 2025 04:15:20 +0000
Files and hashes:         1: DcakyCEJ_yyznB0aWMOOMDPFoP4.crl (hash: qjZKFZiFvBkbEsyQPdq/u+FWEeUloohqaS1TeyZaDj4=)
                          2: D36F9FC09E1211F0966632AEDAE4EC9C.roa (hash: bJSVRApPrsDM0DOSvCfvAqU85OY/qAv2av1QekfCggw=)
                          3: 7DD153FE514D11F0A35C1C97DAE4EC9C.roa (hash: 8bWJ3tM27kTbYQCS7pka2UKCEjGC//pzMPNEA8dwKMk=)
                          4: 840BAFE4D5CE11EF9F26DD77762E951A.roa (hash: sKdcVkYo4xUul2xhcopwWLTEZ0Coub2IAaU4zBm9Qoc=)
                          5: 5391E35A514E11F0B3FBEA9BDAE4EC9C.roa (hash: FgqtDyexUlItVpAKSV/WBoPJSeqrXF4SEH2sFDGm9KI=)
                          6: 44F7A312514D11F0BE5B7493DAE4EC9C.roa (hash: JjfCaY/DSyk/x0PG88+ivHyCCCQmlDsXI+ZkbsOp9Bk=)
                          7: C4B25498D5CF11EF8B385380762E951A.roa (hash: c0lIUY0MI/RJ9MopAqogt6LcUcP2aw6oEoJwJbuApDA=)
                          8: F28EE676D5B911EFB1FFC972762E951A.roa (hash: EzqsSk1Co9k9NgSov+FZr7H05V+t9uoO/FrO5hKwcOM=)
                          9: 23D3EB78D5BA11EF86DD9F74762E951A.roa (hash: G4Ai8yoQfjwUNFDDrcLjtsPrrCfGiIRKwRB24pEHxY8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 04:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
        Validity
            Not Before: Dec 23 04:15:20 2025 GMT
            Not After : Dec 25 04:15:20 2025 GMT
        Subject: CN=694a1758-f79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:6f:f3:b5:32:c8:4b:f4:62:17:0d:42:bb:
                    ff:e6:e3:f4:b9:29:ba:d9:86:00:91:9c:ef:8c:7c:
                    79:85:4a:e6:79:e2:20:30:ec:ce:88:fc:c6:b8:52:
                    00:a4:44:45:be:b8:12:99:b8:06:e7:e6:f3:0e:d2:
                    63:da:2e:46:ba:7b:fb:79:d1:47:c5:6e:e3:4f:77:
                    9d:d7:c7:11:ff:10:16:5d:bd:85:f3:bf:54:1d:fa:
                    32:1b:55:a4:0d:58:5a:49:49:31:e0:84:08:d9:6d:
                    9c:46:bc:ad:da:a1:0a:6d:8b:03:f3:98:ad:75:2c:
                    50:36:16:de:82:4a:73:c3:eb:3e:de:fc:1e:96:f1:
                    c3:22:ac:23:cc:c2:0a:e6:de:53:7e:e6:56:44:21:
                    b0:d1:7b:0d:89:9b:2b:b0:b6:bd:83:a3:8d:cd:ec:
                    5f:e1:31:91:93:09:7b:18:a1:da:4c:d3:b1:5f:5d:
                    6a:76:27:13:23:e6:58:cf:3b:14:87:f2:b0:ee:94:
                    30:f9:ab:3c:6b:42:f5:07:d3:4e:af:67:de:e1:e5:
                    df:51:d9:c2:f9:49:88:07:09:56:40:3e:95:67:3a:
                    ef:c2:0d:ee:54:9b:1d:87:2a:76:d0:83:04:e8:22:
                    d5:a2:ee:48:8d:be:d7:7f:fc:af:00:78:42:95:15:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:63:87:C4:73:E0:81:EA:D4:5B:24:E4:E9:4B:C3:9A:D9:D4:32
            X509v3 Authority Key Identifier:
                keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:fb:e1:d6:45:d3:d5:d7:9f:9f:47:9e:83:21:e9:cf:08:
         0c:06:9f:2b:cf:b1:d6:50:be:d1:7f:82:61:77:5f:78:c3:42:
         36:11:ba:b9:6b:41:b7:f9:5b:b8:d7:08:e5:ce:d3:17:17:15:
         74:54:16:98:47:af:81:c9:0f:d4:32:12:5b:04:41:2b:8a:a4:
         6b:22:f7:38:60:2d:04:b7:d7:8e:e3:29:25:06:7f:09:ad:b7:
         0d:ee:f4:ac:03:56:f1:10:a7:cd:c3:21:ba:35:58:5e:a5:b0:
         fc:4c:0c:aa:b0:98:ec:7a:28:f1:1b:0d:34:88:4f:ce:ea:9d:
         54:64:96:d8:d8:52:cb:2a:f3:1b:e9:9c:19:f2:28:5e:99:a4:
         c9:fa:07:43:a7:4f:73:20:23:30:48:fe:81:27:39:51:ef:26:
         44:70:52:63:ae:be:61:7c:50:5f:87:c3:e6:88:5b:ff:bf:ea:
         0d:1d:51:02:31:fc:07:66:b4:2c:67:c2:1b:f9:94:3a:aa:b1:
         7c:ef:8b:77:a3:41:42:1c:a9:aa:62:bd:7f:cb:0d:01:31:cb:
         23:fc:34:d4:57:5d:e0:7a:e6:9a:94:e0:6b:72:d2:f1:4c:1d:
         3d:48:82:c4:b5:9f:e4:70:40:87:75:93:0f:77:9a:0d:51:f6:
         dc:22:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:32:50 2025 by rpki-client