This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
File:                     Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft (raw, json)
Hash identifier:          y5QujApW2xjBOBPuLcGFlNBCs0QIZwBOsn6THu+azeE=
Subject key identifier:   A8:F7:4A:49:20:CD:43:8F:AF:C2:AF:D8:BE:31:50:AE:A9:6F:EF:0F
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Certificate issuer:       /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial:       0AE1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
Manifest number:          0AD9
Signing time:             Sun 21 Dec 2025 01:14:05 +0000
Manifest this update:     Sun 21 Dec 2025 01:14:04 +0000
Manifest next update:     Tue 23 Dec 2025 01:14:04 +0000
Files and hashes:         1: Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl (hash: PBJjCy65TflsoWdq7aO06gWXZzUOf5VtjO7vB9hb8t0=)
                          2: 20F7E19E955B11E88F26617FF8AEA228.roa (hash: sfkjh7zAV15jSl9QHHQklWNOaiXkSZouLreAi3kdb8o=)
                          3: 7E3B3DC8D0A211EE9C1C0C61775412E6.roa (hash: BmRCYuiQPjmiqgCkPMHoi7HMNfeBckz/l/PWc6bOGFU=)
                          4: 62DBF3287AA611ECB00F35925A40D577.roa (hash: tALfNPzHnY562sC/KfiJZ8OxU2WOBMyF4rVL2OaSfWI=)
                          5: 9D9A3A6C955B11E8A202E380F8AEA228.roa (hash: +I0HAW1gRUHoR+hm5FaXpkLRZEuabi7h8ckCvRV7EsI=)
                          6: 6525E138568511ECA1829575D8A014CE.roa (hash: mtSlARG8Is3GqsjXdmOkSw/1dAtIj6lyy56MNr8QGO0=)
                          7: 3E1770AC568511EC8ABA3175D8A014CE.roa (hash: FnTn7fdtE2yiT5gkUCelWCWTNl/5nT6fafG4r56LwRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2785 (0xae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AF, serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
        Validity
            Not Before: Dec 21 01:14:04 2025 GMT
            Not After : Dec 23 01:14:04 2025 GMT
        Subject: CN=694749dd-af2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:68:5e:45:b7:eb:26:e9:55:15:1b:b4:49:
                    e8:65:38:a7:50:6c:92:0a:df:ec:3b:90:32:44:bc:
                    b8:36:52:a7:a2:cd:65:92:3a:00:21:9d:ba:cc:7b:
                    13:1b:7c:db:7c:c8:4d:e3:4c:67:19:10:7c:25:97:
                    2a:1c:00:00:f6:f4:df:89:ca:0a:2b:68:95:50:e5:
                    5a:1a:26:77:a9:a1:2e:56:76:4e:91:a1:ee:77:31:
                    ce:63:50:1d:df:3c:69:93:3e:ba:53:f5:d4:87:24:
                    2f:98:9f:fc:84:ec:83:01:54:7e:25:ad:9f:4f:f8:
                    05:68:d0:fc:46:1b:f7:9d:df:bd:73:ba:f3:b0:5d:
                    f6:75:89:67:90:86:54:77:5e:0a:f7:b4:af:48:f0:
                    36:80:e9:c1:90:99:85:6d:10:e7:2c:ff:5e:df:b2:
                    51:c9:e8:e5:a4:94:7e:30:02:43:50:55:3a:b9:e6:
                    1f:42:74:44:ca:86:b8:65:93:6d:58:00:45:7d:63:
                    cc:07:f3:43:56:d2:90:80:25:67:4f:02:27:b3:82:
                    7b:93:9d:b5:a0:02:9d:eb:d2:65:2f:8c:c0:bd:5c:
                    e7:20:e8:90:4c:56:51:65:c0:75:5d:5c:aa:98:9d:
                    83:1a:e4:64:63:37:3d:83:73:60:38:85:c1:bb:9c:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:4A:49:20:CD:43:8F:AF:C2:AF:D8:BE:31:50:AE:A9:6F:EF:0F
            X509v3 Authority Key Identifier:
                keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:90:b0:37:a2:7c:9d:10:1b:98:f1:22:29:80:f2:b5:76:3f:
         ce:4c:60:77:1c:7b:16:40:f0:e6:9b:0c:fd:90:e1:26:b1:cc:
         e0:38:a2:94:79:48:ed:8f:0d:f3:da:2d:40:6d:14:8b:71:bc:
         15:87:e3:7b:d0:ce:99:15:7b:0b:bd:20:19:0c:5e:35:c6:56:
         55:94:b1:77:f3:44:14:90:88:7e:9a:0f:fc:70:dd:de:5d:3b:
         fc:dc:e4:e1:9d:68:f8:1b:d3:c0:3e:f4:a9:24:11:46:6d:8e:
         97:b9:2c:14:4d:4b:7e:63:6d:79:9b:9a:61:a3:fe:6a:cd:47:
         74:91:20:04:b5:7e:00:c7:a5:6c:ef:e0:1d:cd:9f:3a:50:1a:
         28:69:b8:08:fd:02:f3:04:13:97:c0:4a:5e:20:18:52:da:29:
         37:4c:a2:b3:ab:6f:47:fb:56:ab:33:83:c1:da:47:ba:b0:5f:
         78:d2:78:5a:10:33:1c:ab:7b:58:d5:84:dd:05:e9:2e:5d:9f:
         d5:0e:bb:8f:27:f5:5a:8d:ea:ea:61:be:6a:47:7f:23:58:58:
         03:50:49:11:ac:c4:b2:c3:86:fb:0b:36:ff:1d:5d:40:64:03:
         ad:8f:49:ea:35:a8:ac:da:f6:0f:06:0b:08:39:35:21:fd:7d:
         df:91:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:52:06 2025 by rpki-client