This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          UJw7GMrqoFR79bVvINsXKmPr28ehpkeeE4ZlF3TctLs=
Subject key identifier:   AD:37:2D:41:33:CC:06:43:9C:FC:30:EC:7C:1A:D0:5B:6B:8A:25:07
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       0825
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          0825
Signing time:             Mon 08 Dec 2025 01:48:17 +0000
Manifest this update:     Mon 08 Dec 2025 01:48:16 +0000
Manifest next update:     Wed 10 Dec 2025 01:48:16 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: NSfkmzwbakynEJdnaB3IOmuT1xpVo69OifuLEiI1DMc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Dec  8 01:48:16 2025 GMT
            Not After : Dec 10 01:48:16 2025 GMT
        Subject: CN=69362e61-ed4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:ec:eb:31:4b:75:84:75:05:1c:e1:cb:27:
                    85:ae:39:c8:ca:46:f8:1f:4f:a6:d5:a4:76:b2:13:
                    69:51:0d:bc:e1:59:17:39:37:54:73:36:96:d5:12:
                    85:5c:62:53:ef:46:00:07:97:db:c5:90:c6:dc:43:
                    9a:29:c8:af:e5:c6:b1:f7:71:13:15:00:7e:c6:41:
                    09:68:b8:46:60:c7:da:65:70:97:7f:7c:f1:61:3b:
                    52:18:c4:f4:eb:41:a1:02:77:d4:eb:41:1b:57:59:
                    73:ad:27:f0:66:95:6b:29:81:c9:ac:6d:0a:65:02:
                    e9:f8:6b:7d:db:79:27:05:1d:76:1d:d1:9d:b3:18:
                    ca:a2:a3:bd:a0:81:20:36:5e:63:90:6e:78:e5:49:
                    98:bc:7e:51:fa:f6:0c:05:d5:96:34:77:57:5a:5a:
                    5a:f6:ff:24:cd:78:3d:02:67:f5:52:af:95:5b:73:
                    8a:c7:39:44:f0:33:2a:08:c9:48:d1:73:b9:d6:cb:
                    cb:5b:8b:e1:e8:e0:6b:cc:1e:49:7f:5c:67:d0:a3:
                    0e:dd:be:de:d4:80:fe:cc:aa:14:d9:6f:6c:b4:7e:
                    e0:f7:42:a1:5f:07:9d:8a:47:6a:c5:ce:a2:98:6a:
                    a1:97:3c:e6:f4:aa:fa:d7:0e:01:c8:11:b7:09:7d:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:2D:41:33:CC:06:43:9C:FC:30:EC:7C:1A:D0:5B:6B:8A:25:07
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:21:d9:8a:c2:4e:62:ef:39:d2:ce:98:cc:80:12:2a:0d:
         3e:d9:98:ba:87:06:43:70:ac:00:2b:c3:8e:4c:0a:82:58:3f:
         96:57:ff:27:7c:03:67:e9:c4:b4:53:70:b0:41:36:13:b0:e6:
         35:fc:07:84:89:64:dd:bd:9d:a2:8c:f0:c1:55:3b:1d:97:64:
         b3:2c:95:07:23:b2:68:02:89:9a:2b:37:55:55:e8:3e:cc:1b:
         f3:7a:98:3b:cb:fe:aa:b1:64:95:73:d0:96:90:e7:15:84:c7:
         d8:d5:4a:40:99:f0:27:45:be:71:db:06:f8:21:4d:a6:d9:30:
         a4:ee:1a:cc:b1:28:9b:aa:2e:66:5b:92:62:9e:d8:c1:b8:3e:
         30:c5:6f:c9:ec:29:f6:06:4a:38:04:cf:38:47:2a:f1:24:f8:
         98:2e:dc:e7:a4:02:b1:4d:b5:21:2d:8a:8e:75:c5:05:d1:fa:
         de:a8:09:f7:7a:ae:b9:c5:b4:13:54:0e:b8:1a:ef:38:6d:b0:
         95:aa:d1:36:8f:d8:f1:12:40:77:19:05:23:17:96:45:82:6c:
         88:b7:a3:13:24:02:9b:4b:52:f5:f5:39:5a:6f:56:b9:c3:87:
         3d:80:29:c5:16:dd:97:48:c6:dc:d1:2e:4c:4d:67:eb:a1:6b:
         1a:02:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:14:26 2025 by rpki-client