This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
File:                     wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft (raw, json)
Hash identifier:          gMagQUiEwD0jhn1fphVdPdQBXHauQzXCaPOMV0Rrw/4=
Subject key identifier:   D2:69:48:37:78:DB:8E:E1:FC:8F:C2:02:1F:D0:3E:14:E6:63:76:2D
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
Manifest number:          26
Signing time:             Mon 08 Dec 2025 05:19:09 +0000
Manifest this update:     Mon 08 Dec 2025 05:19:08 +0000
Manifest next update:     Wed 10 Dec 2025 05:19:08 +0000
Files and hashes:         1: wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl (hash: 7r7C5fWK1z4sS7FmOdJslG3LJoCbeetV4IzrVPuHIRk=)
                          2: 16E842F8BDAC11F0B472F08BDAE4EC9C.roa (hash: EhpKapZP+bvJ8pIPWPKsjy23/0JHazNOFIbhIW5/eUc=)
                          3: DD8F2E9EBDAC11F08F343E90DAE4EC9C.roa (hash: 5WJzxDy5nvQm6CqVL268mDqdJo4LFUDkVHR+SznmwYg=)
                          4: 86422D44BDAC11F0A5532990DAE4EC9C.roa (hash: W7FXh+hNR8i93yao767hDspLMIQ2YRE4D3awbUVSIG0=)
                          5: 5F1173FCBDAB11F0BA239987DAE4EC9C.roa (hash: jVv5VcWRpd8J/KSQpIqnUe5qOeAoFnD/nSVjJMGdGek=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec  8 05:19:08 2025 GMT
            Not After : Dec 10 05:19:08 2025 GMT
        Subject: CN=69365fcd-134b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:a7:5a:fc:d8:08:5f:5c:f9:37:0d:46:4c:
                    8d:ee:07:36:63:6a:8f:69:78:4f:18:4c:2d:d8:3a:
                    85:5d:b8:99:51:59:2a:e8:d7:01:f2:0f:34:a0:de:
                    aa:82:aa:b2:64:51:d1:db:bf:f5:3a:23:60:47:98:
                    ce:d2:9e:76:8d:47:f4:30:dd:af:7b:e1:97:22:0b:
                    35:7d:79:00:63:8d:bb:69:c6:1d:91:86:0b:5e:ee:
                    9f:b2:96:e8:49:d9:65:f8:d8:ce:a6:2b:80:e1:ff:
                    10:e5:ca:0a:17:ab:44:53:06:bb:bd:ba:1c:fe:36:
                    cf:04:54:62:19:72:ca:fe:db:d3:7a:c3:e6:d3:b7:
                    19:cd:4b:eb:c0:79:64:ff:04:8d:00:b1:ef:a9:c4:
                    b7:78:c5:88:6b:40:e6:85:6d:5f:6b:ac:85:87:7e:
                    0c:ec:49:64:de:35:b1:b2:90:c4:48:5b:78:86:f8:
                    a4:5b:f4:27:90:45:a6:43:e5:76:ee:77:52:e6:a7:
                    22:45:c9:42:88:76:69:9b:7a:42:1c:a7:88:f0:7d:
                    0f:b8:51:e2:1c:0c:0b:8f:b4:0c:59:0f:df:e6:a1:
                    f2:5b:70:c1:91:53:a8:f4:ca:4c:d7:11:0c:53:60:
                    72:e5:9f:68:c9:98:1d:32:78:cf:59:1f:e2:6e:db:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:48:37:78:DB:8E:E1:FC:8F:C2:02:1F:D0:3E:14:E6:63:76:2D
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a7:19:8a:e4:63:63:0e:af:2e:86:53:58:cc:09:89:dc:1e:
         b1:08:9b:0d:86:4f:c3:ec:08:84:bd:46:db:8d:ad:1b:eb:3d:
         32:a2:53:4d:59:bb:36:49:80:a0:81:87:02:c2:ba:13:68:d7:
         67:d1:64:fe:a3:b8:7e:9d:62:c6:d0:cf:b2:9a:14:99:4a:8d:
         c8:fe:8f:39:d3:a3:62:cb:b6:a2:0d:18:6e:5d:e7:d4:25:54:
         1e:cd:05:75:ab:07:27:92:49:11:14:60:42:14:84:a7:16:8a:
         f3:d5:1c:49:40:61:2c:b7:f5:65:24:22:f5:27:6c:37:c3:7c:
         8c:c6:bc:64:c2:e7:91:c0:b6:c6:6a:8b:a3:d4:d5:7b:99:e6:
         c3:b0:74:49:fb:5b:e3:1e:d5:59:64:99:57:ab:3f:23:24:cc:
         c2:5c:91:bc:b3:d5:4d:d6:ea:ca:0f:21:0b:bd:41:39:b4:de:
         c2:0d:ab:52:e2:87:82:ff:ac:7b:90:ef:f9:fc:47:40:ab:ef:
         ef:be:47:38:73:ef:de:e7:7f:5c:36:77:aa:de:b0:44:73:a5:
         c8:c6:5c:4f:ab:9a:95:7e:03:9f:f6:2c:f4:82:05:3f:9d:e9:
         98:8c:13:a9:f7:91:f5:39:21:86:1e:b4:d2:43:03:44:e6:8c:
         f2:12:cb:c6
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NUQ3QlJJMTEwLwYDVQQFEyhDMzI0OTdCMkEyNTdGQTY3MjZGRDlFMDY5RjA1ODI1
QURBNzBGOTY2MB4XDTI1MTIwODA1MTkwOFoXDTI1MTIxMDA1MTkwOFowGDEWMBQG
A1UEAxMNNjkzNjVmY2QtMTM0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM6ap1r82AhfXPk3DUZMje4HNmNqj2l4TxhMLdg6hV24mVFZKujXAfIPNKDe
qoKqsmRR0du/9TojYEeYztKedo1H9DDdr3vhlyILNX15AGONu2nGHZGGC17un7KW
6EnZZfjYzqYrgOH/EOXKCherRFMGu726HP42zwRUYhlyyv7b03rD5tO3Gc1L68B5
ZP8EjQCx76nEt3jFiGtA5oVtX2ushYd+DOxJZN41sbKQxEhbeIb4pFv0J5BFpkPl
du53UuanIkXJQoh2aZt6QhyniPB9D7hR4hwMC4+0DFkP3+ah8ltwwZFTqPTKTNcR
DFNgcuWfaMmYHTJ4z1kf4m7btckCAwEAAaOCArUwggKxMB0GA1UdDgQWBBTSaUg3
eNuO4fyPwgIf0D4U5mN2LTAfBgNVHSMEGDAWgBTDJJeyolf6Zyb9ngafBYJa2nD5
ZjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjVEN0IvMkFEMjlDRkNCREFBMTFGMDg5MzEyOTdGREFFNEVDOUMvd3lTWHNx
SlgtbWNtX1o0R253V0NXdHB3LVdZLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
d3lTWHNxSlgtbWNtX1o0R253V0NXdHB3LVdZLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYyNUQ3Qi8yQUQyOUNGQ0JEQUExMUYwODkzMTI5N0ZEQUU0RUM5
Qy93eVNYc3FKWC1tY21fWjRHbndXQ1d0cHctV1kubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJenGYrkY2MOry6GU1jMCYncHrEImw2GT8Ps
CIS9RtuNrRvrPTKiU01ZuzZJgKCBhwLCuhNo12fRZP6juH6dYsbQz7KaFJlKjcj+
jznTo2LLtqINGG5d59QlVB7NBXWrByeSSREUYEIUhKcWivPVHElAYSy39WUkIvUn
bDfDfIzGvGTC55HAtsZqi6PU1XuZ5sOwdEn7W+Me1VlkmVerPyMkzMJckbyz1U3W
6soPIQu9QTm03sINq1Lih4L/rHuQ7/n8R0Cr7+++Rzhz797nf1w2d6resERzpcjG
XE+rmpV+A5/2LPSCBT+d6ZiME6n3kfU5IYYetNJDA0TmjPISy8Y=
-----END CERTIFICATE-----
Generated at Mon Dec 8 20:49:36 2025 by rpki-client