This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
File:                     oHAxgIgisopRzqJ21BM9cIqlFO0.mft (raw, json)
Hash identifier:          /uuc9WlhukyHlEzvRFxggpcmL3+sZxHwWorJg4q/nLU=
Subject key identifier:   0E:E5:BA:81:F6:1C:4E:B8:21:69:2A:13:3D:96:14:84:DD:CB:5A:B7
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Certificate issuer:       /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial:       03
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
Manifest number:          02
Signing time:             Sun 21 Dec 2025 13:10:34 +0000
Manifest this update:     Sun 21 Dec 2025 13:10:34 +0000
Manifest next update:     Tue 23 Dec 2025 13:10:34 +0000
Files and hashes:         1: oHAxgIgisopRzqJ21BM9cIqlFO0.crl (hash: zmXQOxYxaKv9vjC0P8PyMUPD+dR3dlTP7g+uN6fYolM=)
                          2: 6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (hash: xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                          rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 12:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
        Validity
            Not Before: Dec 21 13:10:34 2025 GMT
            Not After : Dec 23 13:10:34 2025 GMT
        Subject: CN=6947f1ca-16ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:fa:cc:f8:7c:ef:4d:ad:88:cb:4a:f0:fe:
                    19:4f:b1:ff:d4:d3:7f:67:f5:91:c0:be:2c:15:81:
                    3c:8c:7f:e0:a7:1d:96:28:b8:77:9f:53:ca:83:3b:
                    e1:60:34:7b:c8:5f:6b:72:d8:1f:bc:ac:77:ce:8c:
                    82:0d:04:b3:dc:ea:db:d8:ac:82:8f:3b:df:cc:9a:
                    df:41:53:d7:cb:48:ae:0e:79:fe:72:c6:b0:11:f7:
                    98:a5:cf:22:1a:79:44:48:48:a8:77:ca:b9:42:f3:
                    32:16:6d:46:39:b5:7d:b8:8c:0b:f2:22:d2:94:68:
                    db:66:4b:8b:4b:17:7d:11:6f:0f:db:34:d7:73:8e:
                    a7:6b:ea:76:58:2b:f1:2f:ab:90:d1:5e:1c:6a:f2:
                    8f:6f:7f:6f:70:34:c3:05:b4:ae:8a:bc:78:b3:ce:
                    01:40:79:2d:b5:5d:19:70:12:f0:cf:f8:49:50:f0:
                    58:99:77:d5:0d:80:f2:ef:85:86:a9:12:70:82:fb:
                    0f:af:83:23:2e:03:6a:c3:a5:e7:b5:09:1c:3b:31:
                    60:66:fe:6f:e5:84:e1:84:6a:0f:ab:5d:32:7b:a5:
                    c4:28:16:82:97:b1:a7:59:27:d7:33:ea:ce:50:2d:
                    cf:ba:ce:af:2e:86:3f:ce:dc:f2:0d:1d:79:fb:8f:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:BA:81:F6:1C:4E:B8:21:69:2A:13:3D:96:14:84:DD:CB:5A:B7
            X509v3 Authority Key Identifier:
                keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:2b:c9:60:70:16:f2:ab:35:e9:88:a1:9a:5c:e9:57:d9:
         b6:f0:c1:b1:81:3b:6d:a7:34:97:eb:9d:6f:0b:e0:ab:05:93:
         b2:ec:be:12:91:d9:b5:53:6b:46:7a:16:f0:ab:74:05:45:19:
         cb:89:60:01:93:5f:21:fe:5e:cf:f8:5c:10:aa:73:f0:b5:91:
         81:94:b0:e1:44:88:a4:9e:19:bd:7c:56:f1:9b:57:70:f3:80:
         b1:7a:92:85:c9:4a:aa:80:ac:2f:2d:d4:27:e0:ab:9f:67:c9:
         09:8f:0d:15:05:03:01:32:dd:20:c8:4e:ef:1e:c8:f5:d9:db:
         e3:70:75:1b:3b:49:e7:f5:05:98:0d:1a:48:87:54:33:5b:cd:
         e6:01:94:24:ae:fb:69:c4:e8:65:35:c7:d8:4a:89:49:ab:38:
         70:e3:af:5f:fd:ce:e9:b5:c5:e8:bc:d7:37:76:ad:68:ae:0d:
         3f:84:57:77:17:b6:e2:e6:cb:d2:f5:cf:df:f5:dd:df:09:a8:
         f3:be:76:39:36:ea:86:60:a9:29:e1:e6:1b:41:65:88:09:03:
         4b:83:e4:b5:11:1f:32:58:c7:dc:cf:e5:0d:ad:81:85:4e:5c:
         d1:21:bd:9e:b1:0a:c4:d8:8d:78:ea:eb:28:8c:66:90:8f:ac:
         ca:ed:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:25:35 2025 by rpki-client