This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          B6Xe09WE6xwaSA1KrqMmUu8bOiLtl5BUJkFQhpzH9Kc=
Subject key identifier:   31:00:9E:DA:0B:74:1F:19:86:8E:B4:C5:EE:40:59:92:5D:96:72:53
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       01CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          01C7
Signing time:             Mon 08 Dec 2025 04:35:28 +0000
Manifest this update:     Mon 08 Dec 2025 04:35:27 +0000
Manifest next update:     Wed 10 Dec 2025 04:35:27 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: 2iZwCkiTVLMZDYg0UGpM6YRZf8zI6MkFl8636FQvBt4=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)
                          4: 077D2872950A11EF882E6662762E951A.roa (hash: FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF, serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Dec  8 04:35:27 2025 GMT
            Not After : Dec 10 04:35:27 2025 GMT
        Subject: CN=6936558f-5a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:1e:da:fc:d3:61:2c:f2:bf:34:c8:fc:d5:
                    fb:85:6e:f5:6f:9f:40:b8:4a:ab:27:6c:67:d8:0f:
                    ea:96:47:e0:b8:61:96:50:c1:eb:02:00:04:75:76:
                    1b:3d:e3:5a:16:64:aa:89:a9:7e:38:8d:ad:5c:ae:
                    14:66:4e:58:c0:fb:07:ef:fe:2b:bc:ae:80:53:99:
                    b6:bd:97:17:ef:ce:39:bd:e4:85:a7:fb:33:2e:fa:
                    47:49:bd:b6:19:15:50:e8:b0:0c:1a:36:4c:b1:c6:
                    b1:f9:36:45:4f:f9:0b:35:71:8f:06:37:b8:04:43:
                    24:ed:f3:2f:e2:a5:dc:50:c3:f2:c9:c9:39:17:03:
                    c2:95:20:fc:32:26:18:58:c3:d8:96:7c:dd:5c:9d:
                    20:4c:3b:fe:b2:4a:04:c4:02:92:bc:7f:24:2f:f1:
                    4d:1f:da:4b:f6:09:d6:d3:e5:1f:2e:73:4a:51:73:
                    c6:d8:9b:14:4a:d6:cf:d7:27:7b:5f:bd:00:99:0d:
                    e3:b3:a3:db:c3:c2:8c:21:c4:6c:dc:4e:48:99:d6:
                    b8:1e:df:c4:7b:4d:d5:1d:44:c8:4c:35:3f:7d:a7:
                    42:be:af:a4:a9:01:1e:02:0f:37:a6:e6:5b:89:5d:
                    b8:90:c8:58:14:12:3c:f6:b6:f9:b0:45:7a:36:6e:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:00:9E:DA:0B:74:1F:19:86:8E:B4:C5:EE:40:59:92:5D:96:72:53
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:cc:ce:3d:78:7d:4d:30:60:15:99:1c:89:db:2b:fc:12:
         bd:a4:f3:89:ad:e9:34:57:f1:51:58:ff:17:fd:83:0f:1a:84:
         3e:e1:10:ec:25:a7:f5:e1:aa:bf:20:4f:6f:08:55:b5:f6:35:
         ae:ed:d3:20:f9:25:81:f5:54:c4:a0:1b:b4:e0:5e:20:24:a9:
         5a:7d:cd:b6:67:23:fa:5f:bb:af:9c:e4:eb:08:fa:78:37:fe:
         30:79:11:66:1f:f5:cb:28:d6:b6:d6:ae:32:ec:e6:53:82:36:
         42:fc:58:a9:fc:5c:7e:5e:48:e5:50:a3:8a:0d:b5:a9:4f:7c:
         bb:a1:40:1e:15:69:f9:a0:96:97:e0:e2:eb:4b:09:d3:27:06:
         7c:d9:d4:8f:56:89:fc:32:5f:14:dc:db:46:78:84:38:a4:9c:
         a9:10:63:ea:ff:4d:f3:ed:fe:76:2c:9a:26:d6:1f:1b:aa:61:
         00:4c:49:f4:02:00:e3:b1:24:3c:59:28:a1:ab:a2:dd:f1:f2:
         9f:2e:76:20:e5:f2:1a:bd:7e:f6:aa:32:9e:c5:a1:07:9d:b4:
         03:d1:0d:20:50:9a:8c:1b:ba:af:b7:62:9d:4a:c1:a8:17:9d:
         f9:c4:a1:ca:03:46:4c:7b:f5:97:9b:55:99:09:85:39:f7:3e:
         72:ea:24:03
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzA1MDFBRjExMC8GA1UEBRMoNTA5QUU0MDc4MDg3Qjk1MzE0QkRBOUVGNjlEN0JC
NzQ4ODFDMkZERTAeFw0yNTEyMDgwNDM1MjdaFw0yNTEyMTAwNDM1MjdaMBgxFjAU
BgNVBAMTDTY5MzY1NThmLTVhM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGRh7a/NNhLPK/NMj81fuFbvVvn0C4SqsnbGfYD+qWR+C4YZZQwesCAAR1
dhs941oWZKqJqX44ja1crhRmTljA+wfv/iu8roBTmba9lxfvzjm95IWn+zMu+kdJ
vbYZFVDosAwaNkyxxrH5NkVP+Qs1cY8GN7gEQyTt8y/ipdxQw/LJyTkXA8KVIPwy
JhhYw9iWfN1cnSBMO/6ySgTEApK8fyQv8U0f2kv2CdbT5R8uc0pRc8bYmxRK1s/X
J3tfvQCZDeOzo9vDwowhxGzcTkiZ1rge38R7TdUdRMhMNT99p0K+r6SpAR4CDzem
5luJXbiQyFgUEjz2tvmwRXo2brQ/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMQCe
2gt0HxmGjrTF7kBZkl2WclMwHwYDVR0jBBgwFoAUUJrkB4CHuVMUvanvade7dIgc
L94wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMwNTAxL0Q4MTU2RDEwN0E2RjExRUZBQjYzN0I0NDc2MkU5NTFBL1VKcmtC
NENIdVZNVXZhbnZhZGU3ZElnY0w5NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VKcmtCNENIdVZNVXZhbnZhZGU3ZElnY0w5NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzA1MDEvRDgxNTZEMTA3QTZGMTFFRkFCNjM3QjQ0NzYy
RTk1MUEvVUpya0I0Q0h1Vk1VdmFudmFkZTdkSWdjTDk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuiMzOPXh9TTBgFZkcidsr/BK9pPOJ
rek0V/FRWP8X/YMPGoQ+4RDsJaf14aq/IE9vCFW19jWu7dMg+SWB9VTEoBu04F4g
JKlafc22ZyP6X7uvnOTrCPp4N/4weRFmH/XLKNa21q4y7OZTgjZC/Fip/Fx+Xkjl
UKOKDbWpT3y7oUAeFWn5oJaX4OLrSwnTJwZ82dSPVon8Ml8U3NtGeIQ4pJypEGPq
/03z7f52LJom1h8bqmEATEn0AgDjsSQ8WSihq6Ld8fKfLnYg5fIavX72qjKexaEH
nbQD0Q0gUJqMG7qvt2KdSsGoF535xKHKA0ZMe/WXm1WZCYU59z5y6iQD
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:00 2025 by rpki-client