This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File:                     YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier:          56qV9HDZ8Y+VpvKbqk7uaPruypefaZegms7ZQh8ni/8=
Subject key identifier:   F9:B3:B3:58:4D:B9:83:C6:15:DF:76:84:57:8B:72:A0:74:73:13:4A
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer:       /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial:       0577
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number:          0571
Signing time:             Wed 31 Dec 2025 02:45:09 +0000
Manifest this update:     Wed 31 Dec 2025 02:45:08 +0000
Manifest next update:     Fri 02 Jan 2026 02:45:08 +0000
Files and hashes:         1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: Jvlt4xQl75rhFH694zHlekCSYo7uadMU2Ad2i8stvFg=)
                          2: 78BBD498055511EEA313DE484AD9E6FC.roa (hash: gcOnw1oPuRTUxnfEp8Cnw2+KJImBfDvkykgZT1R/8jY=)
                          3: EC9655DEBAA211EEAEF6CA61775412E6.roa (hash: yvnXk52RrKBf5bxHjNgZoK+IZnQ2KvhA6TE4cpIiWLU=)
                          4: 1456D4A2586C11EEB137AB2E4AD9E6FC.roa (hash: 0m1O0dIgqFqkbHZ4x0YYbYO8gehKt7WacNKL0mWlsYk=)
                          5: D6EE1EFE055511EEA37AC8494AD9E6FC.roa (hash: oUt21oQyRcYFeyIoTpveRUVSzhhNTG7bwuYrK/bZUtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                          rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Validity
            Not Before: Dec 31 02:45:08 2025 GMT
            Not After : Jan  2 02:45:08 2026 GMT
        Subject: CN=69548e35-3e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:93:6c:b6:e1:35:b3:ef:c2:cd:47:d5:1c:
                    5f:dc:ed:27:10:02:7c:7a:13:0a:ed:c8:97:88:d7:
                    2f:a9:29:20:6c:32:25:77:e8:a1:d8:31:bb:27:fa:
                    e9:01:9c:b7:a5:f6:b1:08:be:b9:66:36:77:f9:5f:
                    75:98:0f:ee:3e:47:fd:d6:08:fa:22:02:d5:7b:3e:
                    82:87:bb:4c:43:af:00:b4:22:cd:76:7b:8a:ed:f1:
                    93:85:d6:ab:bc:b1:e6:89:82:90:3e:0a:6d:44:4c:
                    85:9c:d5:7f:72:28:b7:9e:89:2a:ab:9a:e4:6f:36:
                    cb:1c:9a:b5:61:3d:8e:1e:0e:39:c3:e9:08:8d:e6:
                    1b:4f:eb:91:98:66:5d:81:e4:cc:d8:99:72:d6:9a:
                    90:55:b2:d2:70:4b:e5:b6:23:15:c6:d2:3f:8e:bd:
                    07:ec:a9:ea:5d:7f:29:46:c1:83:c3:5c:3b:00:50:
                    43:0d:41:5a:f4:9e:d6:65:ee:07:59:98:c7:70:36:
                    1a:8e:4f:79:a6:44:7b:e2:a1:8f:69:c1:43:4d:20:
                    1a:e5:28:83:8d:49:34:a1:ec:42:29:19:68:1b:96:
                    f3:7c:aa:be:04:07:d1:43:33:5c:09:b6:56:ed:ab:
                    a8:1e:42:87:84:e8:a7:7b:ca:c2:aa:55:4f:60:81:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:B3:58:4D:B9:83:C6:15:DF:76:84:57:8B:72:A0:74:73:13:4A
            X509v3 Authority Key Identifier:
                keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:45:d8:38:77:7f:10:dc:0b:d8:1e:57:30:1b:d4:88:fd:
         8f:0b:70:be:07:11:6c:e0:0f:f0:bf:dc:3d:92:15:f9:21:d1:
         ca:3a:ed:22:88:99:f0:dc:84:21:77:9e:7b:da:0f:52:46:a2:
         13:93:99:0b:5a:cb:82:ee:65:fe:25:19:be:df:61:95:fd:34:
         f8:22:ce:10:5e:56:ea:5d:b9:d8:67:e3:f1:f1:0d:d1:40:8b:
         71:61:d4:4a:94:5a:7d:66:a7:97:c9:7a:46:33:95:d8:8f:9a:
         d6:bb:d4:0c:2e:09:c5:3b:a2:91:22:19:e5:28:be:3b:ef:3a:
         c0:be:30:61:74:19:0b:8a:db:61:bb:05:1c:51:e3:37:5e:5d:
         fb:4f:8d:ed:eb:98:be:ee:58:88:1f:54:c2:df:b5:59:36:eb:
         17:93:37:9c:d7:9c:cf:ed:5c:5a:d0:43:a5:f5:8e:e6:ca:10:
         ed:c7:7e:16:fa:b5:78:02:91:a6:62:88:9f:d9:63:2b:96:b8:
         a4:6a:3f:c7:41:29:ba:c4:28:48:b1:fb:5a:a9:c5:5b:f6:23:
         b8:21:ae:6a:cb:45:d1:7f:7c:08:24:f6:fc:53:91:3d:cd:01:
         0d:ef:ce:74:91:7c:46:72:fb:68:6f:0f:c0:ff:2b:31:08:0a:
         3c:30:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:28:11 2025 by rpki-client