This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
File:                     PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft (raw, json)
Hash identifier:          EoCDugKOPAqj4hw/vQ2i46+XrqX0mZLmGDBmUQT3jc8=
Subject key identifier:   DC:8E:D6:F3:45:80:F1:04:26:3E:D5:F5:66:04:64:C5:CB:6B:27:D9
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       0F18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
Manifest number:          0F0C
Signing time:             Sun 28 Dec 2025 00:57:35 +0000
Manifest this update:     Sun 28 Dec 2025 00:57:34 +0000
Manifest next update:     Tue 30 Dec 2025 00:57:34 +0000
Files and hashes:         1: PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl (hash: J5ZlFA8RxS703eFtaFqzSRn93iWYKiJSsHUlpriPFQU=)
                          2: 27245A66C4C411F09B86D9E0DAE4EC9C.roa (hash: RhP+q0hcR9r0TqI0DJg5TlVHEkwdaQaUB4Vwe66w/4w=)
                          3: A19476D4C4C211F098DC65D8DAE4EC9C.roa (hash: ChEp6ZWIlk0DrDsY4PbxeB0oWgH6YxSvcg1AG3DA7vw=)
                          4: 699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa (hash: MbciLgOo/FZXT6pICHx7XJwIWDJbakWY3mBA3T6dzSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3864 (0xf18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Dec 28 00:57:34 2025 GMT
            Not After : Dec 30 00:57:34 2025 GMT
        Subject: CN=6950807f-5f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:92:27:88:6b:8e:57:4a:db:ca:15:ed:78:
                    cd:72:f8:70:ae:ba:4f:33:1e:f1:28:b9:36:46:be:
                    cd:f5:d1:a4:49:7a:85:08:eb:e8:45:23:47:4f:98:
                    7e:95:3a:58:c8:e9:b8:12:94:b3:14:cc:c4:86:1b:
                    e1:44:dd:7b:14:44:27:fc:2a:02:d8:b7:4a:a3:be:
                    b1:16:a5:9d:2b:c7:d7:22:0d:62:25:02:77:4c:90:
                    66:82:45:9f:30:85:e2:91:03:6c:eb:bd:6e:91:57:
                    fe:c8:0b:92:6d:7b:dd:0f:80:b6:ef:03:d9:b6:a8:
                    bb:f5:ea:5f:79:b7:c8:a5:ab:e3:02:4c:27:79:1a:
                    87:eb:e1:62:38:22:2c:52:c8:1a:f0:85:e9:11:62:
                    87:3d:45:e7:e8:46:6e:71:57:71:dc:64:6e:8a:63:
                    e6:34:69:d7:10:35:02:63:fe:67:c9:01:9f:5e:5a:
                    3e:e1:4d:59:29:fc:09:a9:95:42:10:fa:e5:a6:dd:
                    b7:62:d8:58:1e:91:9d:52:44:d5:37:f8:18:3f:ad:
                    12:61:95:68:1e:e6:b7:0e:95:e0:11:bb:5f:e5:55:
                    fa:11:6c:be:5c:7e:ee:e3:08:17:86:b2:f6:29:e2:
                    c9:d5:0a:a6:a6:4e:1e:3b:76:f2:96:ae:98:27:71:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:D6:F3:45:80:F1:04:26:3E:D5:F5:66:04:64:C5:CB:6B:27:D9
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:b3:8e:ad:cc:9f:42:df:1c:22:fb:ab:72:01:2b:d7:7c:
         a5:fc:17:30:35:21:36:16:1c:17:a8:11:ab:17:94:bf:66:d8:
         90:ad:9f:5a:b2:bb:f2:1e:6a:1a:05:9d:eb:a2:7d:7e:12:74:
         ea:d5:d9:63:c2:7a:39:19:ce:0b:20:a3:f3:f0:67:14:46:e0:
         ad:db:96:f0:8f:31:27:53:a0:79:1f:11:c1:ed:71:4c:c7:9e:
         cc:69:d5:5b:f2:33:8f:25:ad:8a:51:af:cc:03:2a:7a:c1:d6:
         d3:f2:83:72:58:16:f9:7e:fc:3e:ab:9b:2b:93:8f:f9:69:14:
         2a:a0:dc:58:93:b3:68:b3:20:0f:9d:43:a1:4f:1d:dd:aa:af:
         0c:38:67:78:5c:82:ea:79:5d:d4:76:96:b3:6d:43:8c:63:d6:
         71:7d:8b:54:b4:c1:0b:46:b1:5d:3d:10:c5:05:6b:7e:b2:dc:
         a0:f7:fe:77:18:30:7f:bb:ca:be:1d:94:17:87:e4:e0:ce:73:
         16:bc:a3:8a:e1:54:cb:4c:ee:29:3d:55:68:4d:a0:ef:0e:08:
         f4:3f:a7:8f:90:be:cc:2b:b3:42:8d:df:98:57:f9:6a:08:46:
         d8:4e:a6:51:ee:9c:da:52:34:f0:0e:a0:b8:2f:7b:91:3a:c3:
         24:90:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 13:02:20 2025 by rpki-client