This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft (raw, json)
Hash identifier:          FbJ6FyE1lQSFqOaN6xquBupez2QwfCcKijpgIsfAZaA=
Subject key identifier:   6C:3E:0F:A4:43:BA:3B:2F:7D:70:D5:51:75:C4:D8:C9:EA:3C:BD:4A
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       0578
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
Manifest number:          0577
Signing time:             Sat 20 Dec 2025 02:41:55 +0000
Manifest this update:     Sat 20 Dec 2025 02:41:54 +0000
Manifest next update:     Mon 22 Dec 2025 02:41:54 +0000
Files and hashes:         1: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl (hash: gtee/Dmu/ggChFTASprHXAqhi6inmFvtvmpX+hNVqv0=)
                          2: A971279EB0EE11EC8D6592845A40D577.roa (hash: 0T+GuWqC72/c81r19BWbq4EQ4yHRxHBnW02fRB1Ftrs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: Dec 20 02:41:54 2025 GMT
            Not After : Dec 22 02:41:54 2025 GMT
        Subject: CN=69460cf3-d9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:5e:96:64:f7:90:62:df:ec:ff:74:81:26:
                    f4:77:52:bd:e9:6c:ec:40:9c:aa:f8:3c:2a:0f:44:
                    87:a5:90:0e:8d:1c:b4:41:7b:b8:8f:82:d2:52:1a:
                    5a:ec:7d:92:0b:7a:e4:67:68:0b:34:51:5d:72:d4:
                    6a:35:ef:6a:0c:c1:2f:16:3f:cb:8e:a3:cb:a1:8a:
                    38:a9:5d:c7:1e:46:87:86:f3:1a:46:1f:a9:2e:9b:
                    b2:e2:6e:0a:da:6b:ad:3f:39:bd:6a:13:dc:2b:e5:
                    35:e9:f7:69:84:55:a4:06:6c:dd:5b:a1:48:e5:fb:
                    67:3d:2b:17:d2:1d:b6:41:0e:a8:fc:0e:b9:d0:39:
                    73:68:51:14:e9:64:4e:e4:8b:43:19:0c:0a:cd:72:
                    0d:a9:8c:a1:a8:4e:e9:c9:2a:f8:57:65:05:76:df:
                    62:26:47:36:fc:39:f0:99:4d:b3:5d:7d:15:0c:b2:
                    52:12:7a:4b:29:97:a2:cc:a5:22:68:f0:bc:9f:52:
                    56:01:6f:54:17:09:ca:c2:70:2b:69:6d:1e:e4:b5:
                    ee:4a:c6:af:1a:49:fa:e6:50:ae:f5:da:5a:9d:db:
                    d4:23:1c:a6:a8:1d:ef:3b:a4:0d:12:71:73:df:3e:
                    7f:62:e8:fe:08:75:76:9d:ff:eb:b9:89:4b:06:7a:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3E:0F:A4:43:BA:3B:2F:7D:70:D5:51:75:C4:D8:C9:EA:3C:BD:4A
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:33:88:25:44:8a:a2:d5:64:40:23:fd:bd:dc:ff:f3:d1:
         fa:4e:e3:1c:f8:ca:c5:e1:41:66:ff:08:43:b2:3a:db:00:7c:
         0c:28:df:50:c6:26:35:e4:f8:3f:e7:fc:30:16:bf:d9:b6:0d:
         37:f3:62:4d:46:56:eb:c1:5f:dd:56:73:be:eb:7a:4c:8d:0b:
         7b:d6:17:43:4d:51:0a:1e:e1:d6:75:2e:21:0c:4d:cb:65:ff:
         f8:3e:24:c3:2c:32:b2:bb:dc:d6:08:02:e6:1a:b6:82:86:0e:
         4b:55:de:f1:a7:b1:2f:a6:76:93:3d:11:ad:55:9f:df:cc:6b:
         78:b2:91:e8:0e:ae:82:2e:1c:70:15:46:51:d4:92:8d:59:2d:
         65:0e:a0:62:60:da:66:31:b0:77:8a:3d:72:72:3a:7c:ef:d4:
         10:4d:d0:2b:96:9c:70:2f:b2:c3:30:e4:04:48:df:c0:a9:86:
         5c:8d:89:48:7b:f9:d4:43:44:51:54:02:1b:ec:50:6d:23:48:
         98:49:b1:f9:cf:cc:f4:40:a2:36:e2:2e:06:ab:bc:23:54:a6:
         79:36:bc:08:6c:70:9d:b3:9e:f7:62:af:c2:b7:1e:83:d0:55:
         1b:f2:c0:2b:3c:a3:6b:e9:7b:d6:d7:15:7e:b5:8b:2d:7f:68:
         16:3c:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:11:02 2025 by rpki-client