This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          sCyxQKq+jau9NHHwtvyhYGm8qh9Uc3IraaDUhOkj0Ww=
Subject key identifier:   CF:6B:BC:24:4B:6D:7B:38:58:6C:4E:20:10:9A:F0:EA:20:D6:A7:EC
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       0378
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          0377
Signing time:             Sat 20 Dec 2025 03:41:40 +0000
Manifest this update:     Sat 20 Dec 2025 03:41:39 +0000
Manifest next update:     Mon 22 Dec 2025 03:41:39 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: YwMESEvWdJ2iTpPzAsOB0RSaDyf9/umOEc9Tb5vUQ1U=)
                          2: FC67525472E011F0A5185D9CDAE4EC9C.roa (hash: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 03:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Dec 20 03:41:39 2025 GMT
            Not After : Dec 22 03:41:39 2025 GMT
        Subject: CN=69461af4-49b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:ed:48:3f:f3:41:5d:ed:e0:c1:c5:5e:0f:
                    88:47:12:d9:ae:d5:b0:80:97:39:b2:41:b1:a4:2f:
                    9e:49:f7:73:24:97:63:42:97:0b:22:13:2a:96:1e:
                    c7:bf:40:55:f6:3c:e4:57:b6:bf:e4:d9:50:27:aa:
                    64:81:a0:2a:34:2d:ad:9b:94:6b:5d:35:70:36:eb:
                    ab:55:6e:e7:16:5c:09:eb:86:93:a0:7f:e7:92:6a:
                    49:c1:ab:06:2f:f1:73:50:2c:54:3c:78:c1:b9:a8:
                    65:d9:78:85:51:1f:77:45:94:e7:20:af:bc:db:9c:
                    67:ae:ca:53:f0:48:a6:b5:07:4c:02:3b:13:e4:8a:
                    11:f3:67:ef:2f:3f:2c:9e:1c:82:53:99:39:19:b2:
                    71:2d:bf:dd:2e:84:f1:ea:4d:1d:35:7f:8b:f3:cd:
                    ad:0a:bd:b1:ec:58:88:0f:92:e7:71:b2:02:52:5b:
                    25:9f:3f:dd:ff:f6:34:c7:c7:bb:77:e5:83:2e:5c:
                    a4:ba:cf:a1:34:e3:bd:4d:d8:60:f2:f6:b0:1c:4a:
                    b4:0d:f8:38:4c:a3:35:3c:2f:fe:65:0d:9b:bd:00:
                    a4:b3:32:7b:01:7f:74:46:90:c6:e7:e0:86:a3:3a:
                    b1:08:91:32:e1:2b:1a:b8:8a:f7:d0:4c:d0:d1:44:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:BC:24:4B:6D:7B:38:58:6C:4E:20:10:9A:F0:EA:20:D6:A7:EC
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:81:c2:96:52:77:2d:94:82:b1:b0:85:42:8d:c9:1d:6d:
         45:88:ab:51:f4:19:98:54:ea:69:a1:f3:27:34:b3:e3:56:94:
         d1:99:62:82:5b:a0:cd:be:ed:28:21:28:54:fb:87:11:20:85:
         65:73:f6:d8:67:6b:ff:96:75:c4:c7:c8:d2:89:a5:44:26:ec:
         75:c8:e9:e4:c5:6e:00:d7:25:e2:16:e5:92:e8:f8:bf:3e:06:
         64:47:16:84:80:26:86:f7:01:ba:00:21:b0:77:2d:52:d9:3a:
         e7:27:58:5b:6d:f1:21:1d:a4:e6:e3:73:4c:3b:76:b8:d0:3f:
         9d:4a:63:89:53:5f:bf:b0:cb:a3:bc:65:bf:d5:eb:99:34:73:
         bf:74:32:26:3f:a6:7f:6c:00:ba:95:f5:de:bb:51:8e:bd:77:
         72:55:ae:f1:6b:fc:e2:cf:91:7a:e7:34:b1:52:a7:05:03:41:
         89:49:a3:de:83:71:e0:a9:0e:0d:bd:e1:f4:61:84:b9:bd:8c:
         4a:8d:68:6b:dc:e3:51:5f:32:cc:66:f9:e5:db:35:55:95:c5:
         e4:94:69:7f:6d:b2:8b:7b:80:4d:bb:a8:77:37:1d:be:cb:a8:
         c8:1b:2d:66:22:71:63:d2:9d:87:64:56:f1:e4:69:ad:af:16:
         0c:f7:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:10:40 2025 by rpki-client