This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft (raw, json)
Hash identifier:          po7OM/J7A6UOrIi31d+c6XS5Ll3XCXp9LZV+Ld4zDNQ=
Subject key identifier:   EF:EE:1D:D7:8E:08:F1:09:70:F9:3B:20:DF:37:B1:CA:49:CA:62:F3
Authority key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Certificate issuer:       /CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Certificate serial:       02A3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
Manifest number:          02A1
Signing time:             Sat 20 Dec 2025 04:07:27 +0000
Manifest this update:     Sat 20 Dec 2025 04:07:26 +0000
Manifest next update:     Mon 22 Dec 2025 04:07:26 +0000
Files and hashes:         1: OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl (hash: 8A+Bn7g5ZWA8i6GojdlqSuFVFKkVkxAqC6siRiBmoVo=)
                          2: FCC5AF24DAF811EE935BB276775412E6.roa (hash: lFol3HpR6fMYzPmNkPhAztGIiqTs04+UE2qgxyB1A54=)
                          3: 8FEDACA2DBAD11EEB79EC1A0775412E6.roa (hash: v3lIrrWZHaGAgIYY4ddWroI+DgCBWv6OTEzoRUSn5vA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                          rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9RI, serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
        Validity
            Not Before: Dec 20 04:07:26 2025 GMT
            Not After : Dec 22 04:07:26 2025 GMT
        Subject: CN=694620ff-9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:86:34:25:86:c5:fe:f5:c5:84:dc:97:14:
                    b4:50:c2:70:ad:a1:c1:f4:ad:ed:ac:83:ff:4f:4f:
                    44:31:60:0b:0b:33:b5:73:e8:36:c9:69:c8:ae:17:
                    07:61:c3:11:2c:46:09:d0:97:e1:74:66:f9:79:f8:
                    b3:73:f4:5f:d3:ce:d5:e8:56:04:ba:d1:8a:cb:cb:
                    f1:16:e9:16:46:fa:4a:a2:42:45:93:b2:f0:c7:9d:
                    92:24:a5:1e:2f:30:fe:04:31:3b:bd:45:a9:9a:3b:
                    36:d0:7d:d2:b9:73:4f:68:4d:01:43:02:62:85:ac:
                    2a:ad:a8:2e:7c:c1:8a:d0:33:47:8b:cc:5c:29:a0:
                    12:bd:58:60:1d:a8:bc:31:38:09:90:7f:81:34:b5:
                    c5:9d:3c:d2:24:73:70:4a:e4:f9:0c:bb:d5:68:f6:
                    b5:27:6e:91:ea:21:66:48:f4:b5:f6:e6:f5:39:dc:
                    32:96:8a:af:9a:6c:77:7d:cf:d6:97:68:b9:a2:c3:
                    86:34:5c:60:eb:a9:0b:d0:67:80:70:31:92:b2:a0:
                    e2:c2:95:7b:a5:77:61:ff:64:c6:c5:d6:a4:1b:99:
                    12:fd:cd:c2:42:90:8d:1b:08:3d:61:59:a4:69:86:
                    61:9a:46:b0:c0:c1:a8:98:46:ce:a7:c4:b0:54:77:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EE:1D:D7:8E:08:F1:09:70:F9:3B:20:DF:37:B1:CA:49:CA:62:F3
            X509v3 Authority Key Identifier:
                keyid:39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:12:69:9f:7d:d7:4b:67:17:ab:d6:c1:27:88:09:d1:74:11:
         e2:3c:68:ce:42:70:88:ee:b8:4a:15:97:35:46:98:53:63:4d:
         69:3c:c2:bf:70:56:32:af:f6:8d:f2:24:f1:dd:8f:b8:07:9e:
         e1:47:ab:c4:a0:1d:74:d9:00:be:c2:62:a5:65:cb:4b:b6:c9:
         94:f9:6e:6b:9d:96:5c:59:63:82:39:fa:d3:d2:af:a2:23:aa:
         ee:9d:92:e5:88:15:57:da:50:b3:0c:58:be:a3:c2:4a:22:f3:
         c4:05:f6:f3:76:d1:20:04:1f:11:e7:19:a4:af:bb:87:0d:3b:
         24:45:ea:af:c0:71:13:34:2c:56:d8:fc:2b:8e:c9:98:b3:ec:
         92:a2:52:f3:67:48:74:69:08:62:f9:f7:17:88:14:a1:aa:b7:
         23:73:bc:e3:88:80:ce:27:ae:6b:83:cf:df:cb:8d:dc:01:79:
         17:2c:f0:2b:da:a0:42:3f:79:10:7a:a2:21:73:fc:bc:94:42:
         ae:21:a6:a0:13:62:62:94:14:81:e3:fa:56:15:c4:5e:da:aa:
         81:b4:3b:d1:91:75:d7:67:a1:c9:1e:c2:16:98:ff:3b:1a:46:
         1b:10:1b:d0:0b:b1:d7:eb:0e:fe:c1:00:2a:83:2b:c0:b7:0e:
         c3:6c:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:01:44 2025 by rpki-client