This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
File:                     CodsoUE1QedntQSzPzNJ9CgxUrI.mft (raw, json)
Hash identifier:          RkcopWZQmHTAOkk6a0AaSgKYu5/1aDLBMwZSWqQjRtI=
Subject key identifier:   F5:57:00:98:1F:F0:6B:2E:6F:40:B8:D1:FA:9D:26:6E:1E:66:1F:0B
Authority key identifier: 0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2
Certificate issuer:       /CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
Certificate serial:       096D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
Manifest number:          0967
Signing time:             Sun 28 Dec 2025 01:37:15 +0000
Manifest this update:     Sun 28 Dec 2025 01:37:14 +0000
Manifest next update:     Tue 30 Dec 2025 01:37:14 +0000
Files and hashes:         1: CodsoUE1QedntQSzPzNJ9CgxUrI.crl (hash: o/467ih46y63oyJ/5RTv7hJAAKrv/UDEHiGY3EcLQKw=)
                          2: 980FA84EC4C311F09C5DBADCDAE4EC9C.roa (hash: 3NIWnHbxlUWkyosx3vdAIqsZ9qYLaISFPZqEgFBp27k=)
                          3: ED0F6D76C4C211F084BF89D8DAE4EC9C.roa (hash: EC71aq4NL9tN5YVZeMJv6LmO9eXOL8Co9e+u9TIC6lY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                          rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AR, serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
        Validity
            Not Before: Dec 28 01:37:14 2025 GMT
            Not After : Dec 30 01:37:14 2025 GMT
        Subject: CN=695089ca-f33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:cb:42:1a:56:c0:dc:bf:4a:35:f7:79:4f:
                    12:d2:c4:74:84:ab:ca:2c:9f:e5:00:7a:2e:51:e6:
                    6c:35:bb:38:d5:00:b4:1d:04:3f:3f:e3:f3:cf:ad:
                    13:c2:2c:2f:cb:66:ca:88:03:ee:7d:39:4c:9d:7b:
                    71:fc:91:07:9d:b3:37:9a:61:c5:da:0d:b6:9d:0b:
                    aa:d9:58:de:98:8b:51:0d:67:67:d4:41:1d:cc:64:
                    01:f7:fe:cb:cb:e2:ae:48:c6:ee:14:58:65:60:7b:
                    f2:20:5c:68:e3:94:f6:cf:d7:07:4d:b4:42:e3:ae:
                    6d:da:4d:d2:fe:ab:9f:40:81:c0:ed:2e:26:ba:bd:
                    40:a5:82:96:73:83:80:1f:01:9e:b4:eb:75:61:7a:
                    a1:95:8a:14:ba:b5:93:29:65:06:18:ff:12:f1:18:
                    5d:b8:12:6a:18:f2:02:55:b1:ee:56:78:4d:dc:19:
                    70:25:c5:ac:8a:91:7f:72:c4:46:0e:ef:34:b3:e0:
                    8d:39:9f:83:e9:38:6c:72:73:4b:5f:fd:ec:d1:ab:
                    4f:58:d4:40:07:d0:ad:74:28:c1:6d:c2:71:c2:47:
                    2e:3c:91:9d:23:c0:9d:95:ce:c2:ad:b1:b5:8e:a4:
                    58:d5:5f:41:ce:bd:fd:fa:99:88:c5:bc:0f:0d:67:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:57:00:98:1F:F0:6B:2E:6F:40:B8:D1:FA:9D:26:6E:1E:66:1F:0B
            X509v3 Authority Key Identifier:
                keyid:0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:51:66:c4:fb:6f:1e:93:be:62:3e:cd:22:85:af:31:58:f1:
         20:26:86:b7:f9:62:ab:cc:d0:00:ed:88:c0:31:ea:73:ec:96:
         2b:77:1b:4f:a6:4e:2b:4e:1f:34:29:7a:e9:d1:9d:d5:ee:7c:
         ef:55:e2:87:dd:37:e9:49:88:24:56:7c:bf:8d:97:0c:32:67:
         39:18:d1:9c:04:3a:97:57:fc:29:a1:59:d8:59:6a:84:b8:c6:
         aa:50:22:59:01:e1:6f:eb:c8:ad:e3:78:0f:08:db:07:b3:61:
         c0:11:00:0c:84:26:e6:b5:77:4e:55:46:7b:7f:13:85:9b:83:
         8a:b9:7b:94:b1:23:6a:63:f2:25:81:1a:75:0e:46:f3:4c:e6:
         be:34:d8:c4:bd:1e:99:6b:76:92:ee:38:7d:a0:e2:b2:e5:2b:
         ce:85:21:2f:73:b0:5f:c7:b9:6d:ba:b6:8d:6f:d5:70:f8:31:
         9d:3b:d2:dc:25:9f:20:3a:cf:4f:27:e2:2c:16:c4:68:11:9b:
         20:f6:28:61:6e:d6:2b:6a:c3:30:f9:59:a3:9c:d3:20:34:2a:
         02:e2:e3:e0:c3:30:db:97:c1:fa:e4:92:1d:5e:a8:db:dd:96:
         53:6b:04:89:64:24:d7:79:15:9a:d7:18:c6:a1:98:fc:4d:9e:
         da:ec:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 11:23:26 2025 by rpki-client