This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File:                     _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier:          YeInNBgSpdYFCn2DnYwb+QZ2P+s+F0YshOg3hfFxzvY=
Subject key identifier:   BA:52:24:B1:DF:A8:CE:29:B7:CB:F4:61:17:05:09:75:DC:FE:D8:0A
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer:       /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial:       02C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number:          02C0
Signing time:             Sun 28 Dec 2025 04:11:25 +0000
Manifest this update:     Sun 28 Dec 2025 04:11:24 +0000
Manifest next update:     Tue 30 Dec 2025 04:11:24 +0000
Files and hashes:         1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: R1plHzVuZkEGNAsInAywzz4SymurPCGinyIFkNov9Wo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
        Validity
            Not Before: Dec 28 04:11:24 2025 GMT
            Not After : Dec 30 04:11:24 2025 GMT
        Subject: CN=6950aded-22e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:68:24:c4:0f:fc:15:d9:a3:9f:46:df:e9:
                    b1:9d:57:39:9b:15:1b:53:78:ae:72:13:36:8a:a4:
                    c6:55:28:02:37:a4:e5:b2:6b:2a:f7:13:cc:2e:2c:
                    8b:29:66:ba:ac:80:ce:ad:f2:dc:ee:c7:23:70:45:
                    00:2e:37:fd:52:0a:80:a5:2f:27:51:2a:f5:3d:c6:
                    9f:85:6a:16:f9:1c:8c:a4:45:7c:2a:0d:6f:32:7f:
                    59:34:14:91:ec:2b:0f:bb:da:80:50:7b:7d:54:c0:
                    bd:d6:0d:d5:96:14:41:8d:71:f6:c4:8f:8b:ee:ad:
                    99:43:ed:49:8d:f0:69:b3:19:04:ba:5e:c9:67:3a:
                    2a:eb:3c:41:a0:e6:db:78:92:eb:38:00:29:d3:7f:
                    e5:ee:14:34:27:77:22:57:e2:97:7e:f3:f5:07:48:
                    8f:da:af:77:01:00:6e:39:43:4a:85:db:f4:6c:4e:
                    12:a1:f7:3d:97:11:38:67:ec:3a:f5:f6:e6:a9:17:
                    46:78:e1:9e:50:b4:9e:26:0b:b4:88:dc:10:9d:0e:
                    14:4f:90:e1:a7:58:86:f3:6d:c2:7a:8b:2c:c0:d4:
                    0f:5a:a8:81:f0:3b:fc:88:75:60:60:c6:1f:6e:2f:
                    a3:25:e8:2a:17:6a:40:bb:e7:b2:34:cf:c9:ab:42:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:24:B1:DF:A8:CE:29:B7:CB:F4:61:17:05:09:75:DC:FE:D8:0A
            X509v3 Authority Key Identifier:
                keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:99:c1:aa:d5:0b:5d:9e:4f:8e:b1:6a:5b:df:a5:ab:47:
         e3:0e:5a:06:a5:1c:af:84:4a:de:d5:51:54:54:f0:6e:4c:2f:
         c4:b7:15:d4:6d:d7:7d:ed:2a:90:e5:bc:9b:5b:15:67:f5:ec:
         67:f2:d5:37:21:1d:da:af:52:12:2c:3e:7b:da:bf:84:35:4d:
         73:e3:17:38:db:57:c2:d6:5e:88:e8:12:1a:6e:2c:ba:6b:7c:
         85:72:8d:b4:df:7b:f3:95:85:ec:46:79:a4:93:61:d7:04:73:
         ac:4b:1d:d5:bd:99:b2:d7:37:04:62:5d:67:69:02:1f:8a:58:
         71:5e:13:4e:52:d7:44:db:97:ab:04:a5:4a:f5:fb:98:83:9b:
         0a:12:d7:dd:c7:86:55:69:eb:1f:63:bc:d9:ac:10:86:02:fc:
         2e:db:8d:b6:ca:6a:27:28:ef:db:3c:cd:40:00:47:46:f8:45:
         9d:dd:0b:af:3c:a1:5b:87:16:67:fd:84:f9:db:08:f8:3e:99:
         37:da:ec:27:9f:91:4a:05:27:3e:c6:d8:5e:c3:f8:0e:c5:6c:
         d2:64:cc:4d:31:f7:20:5e:25:46:59:d3:06:65:89:e6:37:eb:
         35:24:7c:a1:b6:81:0a:14:2d:97:15:f4:bc:d8:19:d1:73:c1:
         72:cc:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:15:25 2025 by rpki-client