This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          wQnor+YluDlRddNezcIjPHiivOxytymmq/m7gCgvHPI=
Subject key identifier:   BB:56:64:BC:6D:D1:04:FD:FD:0B:DC:65:7C:FF:F4:0B:53:13:3B:03
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       0679
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          0679
Signing time:             Mon 08 Dec 2025 02:15:42 +0000
Manifest this update:     Mon 08 Dec 2025 02:15:42 +0000
Manifest next update:     Wed 10 Dec 2025 02:15:42 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: 3fRRhWx+gTejAz4c/oksAF1+ETRtQduH+/OOKrN8gEw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Dec  8 02:15:42 2025 GMT
            Not After : Dec 10 02:15:42 2025 GMT
        Subject: CN=693634ce-f631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:43:88:3b:3b:d5:3f:3d:27:6c:e1:b4:3d:
                    f5:68:dc:dc:92:f7:f3:75:65:cb:be:c2:c7:8f:e0:
                    d3:ae:ba:82:71:d1:d4:64:d3:55:49:97:43:aa:15:
                    f6:7d:e0:99:56:0a:f0:80:56:8d:b0:cd:05:0d:ec:
                    71:bd:ca:5d:cf:60:e4:f0:0f:1b:95:de:aa:75:d5:
                    38:a6:87:63:4b:f8:21:24:57:3f:a6:86:40:00:21:
                    d9:a0:dc:33:60:20:3d:22:ee:a4:65:ee:6f:ab:56:
                    18:69:41:fe:c3:d5:04:62:ef:da:7c:63:48:05:87:
                    83:be:ef:41:ad:ce:00:0c:bb:66:18:50:c9:4b:dd:
                    3b:17:a4:15:8a:8f:35:bd:dd:b1:49:89:d7:32:8c:
                    84:c2:8d:1a:ac:1e:c8:3b:7a:b3:85:cd:ec:ea:67:
                    4c:dd:51:0b:1a:03:ff:15:89:10:83:d5:f2:9a:ef:
                    f3:5f:6e:a6:3f:2d:01:e9:c9:0a:1f:07:6e:f7:ce:
                    5d:a2:34:47:d0:8f:26:45:56:20:75:fc:4a:26:fc:
                    e1:57:7d:84:8f:6c:2c:4a:39:9f:81:31:b9:98:70:
                    33:cc:c1:54:ba:c6:d3:62:81:e7:1b:b9:37:2e:f5:
                    1a:2b:6b:11:48:b5:6b:6b:85:6f:b5:ec:16:fc:dd:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:56:64:BC:6D:D1:04:FD:FD:0B:DC:65:7C:FF:F4:0B:53:13:3B:03
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:27:f2:19:c5:c1:9d:9b:79:97:f4:34:cd:a6:4a:fe:16:7f:
         b2:a4:20:ba:64:3f:8b:f5:3b:45:34:b6:1c:64:f8:d0:5e:e6:
         08:bb:ea:08:aa:4f:ea:07:95:50:96:22:a1:83:0e:3b:e2:46:
         17:65:39:93:eb:35:d2:f7:49:e5:09:d2:88:ce:3a:1e:f7:cd:
         e9:21:af:7b:f2:31:38:28:28:03:11:2f:ac:34:93:18:06:d7:
         b6:e4:80:c0:52:b9:11:07:00:33:40:23:df:c7:f0:83:d3:26:
         73:04:0e:41:08:04:3e:be:07:9e:ca:3c:a6:db:50:6a:46:17:
         29:88:ab:d2:9f:c5:18:16:e6:d8:59:26:03:f3:45:b6:0d:29:
         b0:89:a9:05:a9:b5:78:d7:d1:be:5b:96:f6:3d:ac:f8:db:1b:
         c8:5b:a6:a5:f9:d9:67:84:92:35:20:03:73:87:af:6c:82:a3:
         e8:70:24:e6:2f:3a:48:fc:c1:05:0a:78:70:13:3a:cd:e0:8d:
         71:ea:cc:0e:0a:e7:7d:0f:42:f1:c7:af:4a:32:b0:e9:9d:1a:
         85:54:a9:c4:c9:22:8b:65:9f:af:9d:65:e1:18:60:a5:db:96:
         3e:8e:7b:c6:6c:f8:3b:bc:4c:93:27:b4:b3:8d:32:7f:db:fa:
         a4:65:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:07 2025 by rpki-client