This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
File:                     BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft (raw, json)
Hash identifier:          A4MifrdXQCuVKB0rpODnoq5Wpk8MmIevxXPEbkfi8YE=
Subject key identifier:   EB:6E:EC:74:B8:49:89:1E:57:E9:FB:F6:A2:C9:38:47:D6:CD:C4:79
Authority key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Certificate issuer:       /CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
Certificate serial:       0660
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
Manifest number:          0660
Signing time:             Sun 07 Dec 2025 02:17:56 +0000
Manifest this update:     Sun 07 Dec 2025 02:17:56 +0000
Manifest next update:     Tue 09 Dec 2025 02:17:56 +0000
Files and hashes:         1: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl (hash: dkNDKthC/7eQdRRPAluXdAxm5vq1FGgJmsoLdDnWxMo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                          rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
        Validity
            Not Before: Dec  7 02:17:56 2025 GMT
            Not After : Dec  9 02:17:56 2025 GMT
        Subject: CN=6934e3d4-859f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:d7:39:8d:28:d9:52:79:9b:a0:fd:46:83:
                    04:2f:bd:d1:d0:26:93:b2:df:31:a8:ec:04:a3:ea:
                    7d:43:d2:08:8f:08:54:1c:a8:eb:bd:96:45:c1:53:
                    33:3a:ce:91:20:54:22:9e:03:21:b6:70:5e:6c:ed:
                    96:af:78:75:45:03:78:98:b5:b2:de:95:60:d7:60:
                    2b:4b:99:35:d7:d0:c2:dd:d1:03:96:55:90:9c:0d:
                    18:eb:40:07:d2:30:33:23:d5:19:0d:65:37:1a:fc:
                    6e:32:4c:32:9f:3c:d4:fd:60:df:5c:de:7f:21:0a:
                    40:07:75:1a:f4:6c:c6:d0:5e:af:80:33:28:5e:7e:
                    60:3b:04:be:5e:3a:5a:8d:65:18:c8:dc:24:47:00:
                    d9:d4:d6:5c:b8:be:7c:ce:c4:f3:57:35:2c:68:03:
                    b8:f2:d9:39:fe:24:27:b2:63:f7:a5:49:bc:08:4d:
                    b0:53:b4:07:d9:13:e6:2d:fb:ea:c9:a2:d3:41:fc:
                    a7:37:6f:5e:7c:e9:af:3f:f6:0f:43:df:5b:91:3b:
                    22:4f:de:d4:9e:b3:0b:ec:4a:96:a1:44:39:c4:64:
                    f4:4a:62:38:ee:4f:0e:ed:9e:7f:14:5d:5d:65:8e:
                    cd:87:70:47:4c:7c:ec:1e:ab:73:c9:50:a7:86:8c:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6E:EC:74:B8:49:89:1E:57:E9:FB:F6:A2:C9:38:47:D6:CD:C4:79
            X509v3 Authority Key Identifier:
                keyid:04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:39:23:97:5a:a4:4c:97:30:a0:d6:83:e9:96:8d:8c:fa:26:
         f6:77:45:b1:32:b3:ab:0c:bb:dd:c7:b5:eb:f6:a2:98:91:be:
         0e:fd:f7:26:a6:01:b8:98:27:2c:e0:d3:15:17:d4:14:dc:28:
         1a:b0:8b:db:8e:60:7e:24:13:e5:35:21:c2:9d:e8:5c:2c:e5:
         1a:55:e2:a0:10:ed:98:63:27:c5:f2:24:01:2d:2a:18:30:49:
         b8:1e:fc:9d:0d:9b:3d:8d:b3:43:00:0e:6a:c2:4a:ac:ce:97:
         01:76:62:57:ad:ee:cf:d3:5a:f2:92:0e:71:f3:9a:fd:18:78:
         06:7a:e7:73:7d:60:a7:aa:bc:3b:a0:5d:9a:f1:a8:02:bb:e7:
         2b:17:1d:91:5e:78:5e:74:33:72:5f:c8:89:06:44:ba:bb:ac:
         d1:cc:bc:31:db:97:0e:d8:c1:33:32:d3:33:db:79:e6:81:43:
         30:d2:8e:a7:bf:82:46:fa:6a:2f:2d:d6:17:b4:8c:78:92:89:
         a2:18:db:fb:e3:5f:c5:6d:93:95:03:62:7f:1f:ee:1c:90:41:
         97:a4:fb:21:4f:9d:b6:fa:c6:84:15:a6:9e:8e:1a:20:18:62:
         b1:ca:19:4c:85:97:c1:a9:6a:63:0d:8a:43:c5:44:01:4f:40:
         71:8f:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:12:49 2025 by rpki-client