This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File:                     LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier:          YbmFSBtFwH1Epa/70rdoS0wSHvFjcTyNImA2jO4V5CQ=
Subject key identifier:   73:DB:4A:3F:43:26:3C:94:33:D1:53:8E:72:CB:CE:5E:56:8A:3D:FB
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       07F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number:          07ED
Signing time:             Sat 06 Dec 2025 01:53:41 +0000
Manifest this update:     Sat 06 Dec 2025 01:53:40 +0000
Manifest next update:     Mon 08 Dec 2025 01:53:40 +0000
Files and hashes:         1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: p8+BRQj70KAmUVRDkclueFPYf6b4jGBsvZ2Ev2Xneyw=)
                          2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
                          3: C1EA4780FB7F11EB9D2CC317D8A014CE.roa (hash: EuixU3epnpbUpwoJhFUHV5OKLLMlJHPLSrbxyzVttAM=)
                          4: 43E1BDF2F95C11EBACA1E93DD8A014CE.roa (hash: jtNO13rj1M0ghD4GjsATf2dtAxGGZDj246YjTe+oOGk=)
                          5: 12ADEF1CF95C11EB89B1B33DD8A014CE.roa (hash: ZNOFebzvFvT2Nb1vHcS6wuQ11RKpspXLfVTrmKqLFjM=)
                          6: 6315ACECF95C11EB8E0A1B3ED8A014CE.roa (hash: IvSwZp9IV18zo8x0c31GN2xd9ugQho3aot5Bm2hShIs=)
                          7: 39106F00FBB611ED8E7FD90D4AD9E6FC.roa (hash: +HdzaGd/6604DHYW5LPhty4qlNfPBJ18Y9dSfuN3sGc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 01:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Dec  6 01:53:40 2025 GMT
            Not After : Dec  8 01:53:40 2025 GMT
        Subject: CN=69338ca5-30ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:6c:31:a3:b6:30:cf:b3:7c:17:65:b7:f8:
                    08:44:0e:26:c4:ba:bb:05:87:52:8a:e5:5f:f4:0d:
                    0c:a0:91:f7:20:84:62:a8:50:af:a5:60:12:90:b9:
                    60:47:85:49:85:bc:50:3e:9d:40:60:6f:3f:02:10:
                    0e:39:fd:1d:d5:35:7f:c5:a4:11:1b:d4:94:9d:63:
                    96:70:b9:34:8d:b3:82:9a:40:7c:e4:58:e3:d7:1f:
                    4f:3c:cc:23:3b:1d:5f:df:63:12:1c:e6:98:42:91:
                    f0:7d:63:cb:ea:dc:8d:86:0b:57:e9:fc:dd:f3:d1:
                    b4:8a:24:58:d8:8f:94:fa:7c:08:7c:07:a5:27:6d:
                    a4:12:a4:dd:de:a1:ef:fc:16:7f:e6:63:25:f3:2c:
                    80:8b:7b:2e:9d:7d:4a:a2:13:71:df:12:59:dd:76:
                    2d:ff:d5:dd:97:92:94:55:6b:1e:46:46:e1:bd:53:
                    e7:d9:a1:29:f5:a6:48:11:38:7c:ed:13:90:26:51:
                    85:8b:1f:90:4d:a6:05:37:cd:3f:be:05:a8:50:94:
                    6a:64:3c:25:0d:62:d5:09:99:8b:d2:d5:d7:be:2a:
                    58:af:9b:e2:3d:63:33:41:48:36:5d:45:e4:0d:9f:
                    5b:92:ad:dd:f6:39:6a:a1:07:13:b0:c5:d8:c5:16:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:4A:3F:43:26:3C:94:33:D1:53:8E:72:CB:CE:5E:56:8A:3D:FB
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:53:97:a3:51:a0:5c:db:82:a6:d8:88:b1:47:fe:93:b6:
         a8:2b:0d:e1:02:c0:99:f9:9b:db:c2:c9:58:40:96:13:b2:58:
         4f:59:8f:c8:29:93:1a:e4:64:b5:1e:b5:19:99:ab:e2:50:c6:
         b2:53:44:cd:0a:53:e1:05:73:57:bf:12:a5:5d:60:42:a7:e3:
         02:2e:1d:7f:8a:0d:41:e9:17:be:10:35:74:a9:7d:3b:c3:38:
         7d:fd:e0:82:0f:e6:09:e9:a0:f0:14:6e:99:16:0f:a8:4d:47:
         93:fa:68:0a:9f:d3:bb:be:b4:be:1c:d1:78:5a:fc:03:e3:13:
         ec:cc:d2:cf:a7:1d:66:69:53:4a:af:4d:f7:29:95:50:ee:f2:
         51:32:7b:64:f6:32:1b:cf:af:33:ea:25:2e:c8:05:4d:30:36:
         53:f6:29:b5:f9:6b:42:62:93:9b:e6:7b:6d:6f:1f:01:44:a8:
         d0:62:68:61:d6:8b:42:5a:18:47:27:0a:97:a9:f6:3c:0d:95:
         57:c0:db:5c:95:85:87:ed:6f:6b:71:21:01:56:34:42:12:61:
         2c:a7:e8:0f:d4:e9:aa:6f:64:15:19:ce:65:65:2b:e5:a6:c7:
         bc:d4:de:33:8e:15:c3:9c:1e:a0:07:f6:32:09:d0:36:e2:8c:
         33:e9:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:02 2025 by rpki-client