This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
File:                     Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft (raw, json)
Hash identifier:          mjkRP1l/sfBeRk8rJbXHtn07dAatinhPA4oaMdo7+Hg=
Subject key identifier:   48:43:71:B1:43:58:AF:5A:59:C4:F4:77:BA:46:5B:E2:F3:5E:C7:13
Authority key identifier: 43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
Certificate issuer:       /CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Certificate serial:       09BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
Manifest number:          09BB
Signing time:             Wed 31 Dec 2025 01:20:52 +0000
Manifest this update:     Wed 31 Dec 2025 01:20:51 +0000
Manifest next update:     Fri 02 Jan 2026 01:20:51 +0000
Files and hashes:         1: Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl (hash: XpfRfUOYuNUMHEq8tC1KfZVfaV3ZCfhdYHfqYEB0YVQ=)
                          2: 3E2B9236734711E9B82EF41FF8AEA228.roa (hash: sHavROAEkdgwvUhdTRWjp16c0hkbhCfTH2dCNlT1fQc=)
                          3: 02D94732CD3911EDB44730E4F1222468.roa (hash: hdUJSRvpanPiNqPIFPGVK06JZp+d865/mAWTIg6oHiI=)
                          4: 086D98B0CCA811EDB662B1A7F1222468.roa (hash: nnMjPyXhgx6XEhhcx/f+j045cw3LDYD0M4TZuc1eZmM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E61B7AF, serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
        Validity
            Not Before: Dec 31 01:20:51 2025 GMT
            Not After : Jan  2 01:20:51 2026 GMT
        Subject: CN=69547a74-d951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:6a:f0:ff:5d:de:ff:4b:f5:8d:04:8d:b9:
                    5c:65:25:ba:48:2b:c9:e4:e0:0d:fb:6e:5e:31:d0:
                    dc:fe:9f:bf:d5:ed:d5:1c:ee:ae:61:8b:8f:06:51:
                    c6:fa:40:2b:69:a7:d8:1e:bf:61:38:0e:38:25:3e:
                    dd:98:f7:c0:5c:bc:d6:5d:66:da:5b:19:80:c6:32:
                    9a:99:58:bf:2d:e9:ed:d0:7d:8a:a3:17:8a:08:33:
                    f8:31:a4:63:66:0c:55:0b:25:18:25:23:7d:da:03:
                    67:66:96:13:39:1a:dd:47:1f:5a:db:42:74:1c:cd:
                    2d:90:da:a0:6d:36:47:59:73:b6:0b:1a:8a:c4:42:
                    4b:6d:5b:ca:fb:a1:08:3d:4d:4a:aa:a7:41:84:f7:
                    26:63:28:54:10:21:b9:9d:d4:d6:9b:c1:68:b0:5f:
                    04:36:c2:1a:9a:b3:11:96:fa:a9:f9:2a:65:33:ca:
                    8f:6f:10:0e:10:f3:6e:8f:4d:d5:9a:9d:03:c7:9a:
                    ba:95:7d:14:c4:f8:34:9f:67:7d:88:1c:8f:d3:35:
                    b5:8a:1d:64:a7:c9:e2:b7:41:23:58:b7:67:91:70:
                    eb:e9:4f:24:91:ca:b5:e1:64:e3:bd:ba:e3:a2:33:
                    79:22:cf:3f:92:ec:b9:fe:bc:84:78:ac:3b:23:c3:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:43:71:B1:43:58:AF:5A:59:C4:F4:77:BA:46:5B:E2:F3:5E:C7:13
            X509v3 Authority Key Identifier:
                keyid:43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:23:9a:74:57:2c:32:97:c0:3b:9d:38:f9:18:6b:01:44:
         e5:96:9a:82:3d:da:96:9a:8b:a7:48:75:2e:e5:7b:61:a1:f9:
         36:65:84:fb:ec:59:49:a4:e6:3c:60:94:7a:5e:ad:17:ba:9d:
         b4:6b:96:01:f1:e8:a8:11:fc:da:36:34:77:27:f7:b5:ff:0b:
         c3:0d:3b:9a:6a:bd:1f:c0:b0:9f:95:67:24:b9:d8:ad:0f:58:
         e8:0d:66:57:14:bb:d3:a2:49:c4:b7:14:30:7f:fc:26:11:5b:
         81:e6:58:1e:f1:c6:91:5e:9a:97:9a:69:ac:31:51:35:e2:8a:
         dc:cb:aa:c6:d2:1c:5e:24:bd:65:b9:d6:50:30:d3:8a:75:df:
         54:b3:9c:68:6a:e1:c9:e5:28:b6:29:29:a5:ed:b5:bc:ca:3e:
         8f:ee:21:ec:48:db:f4:13:bc:fc:8d:17:a7:cd:a2:60:d2:42:
         f3:e2:36:ed:aa:a6:60:c4:77:5b:01:69:73:5f:e2:2f:9c:bd:
         d6:a6:2e:4d:25:af:03:a7:8e:9f:f8:e5:ab:56:3b:b6:7c:5d:
         5f:dc:d2:73:ec:68:fa:0d:57:a7:de:da:7a:b9:dc:a1:ed:30:
         1a:8c:2d:3e:13:6f:47:b2:86:4e:60:46:98:1e:51:4f:49:95:
         4e:de:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 23:32:23 2025 by rpki-client