This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
File:                     ycEp-8PIJzpGKVWpUo4KrC8umCw.mft (raw, json)
Hash identifier:          CtiAGZSW+trPsS+voOUP3qDWAKbSyf5O7t8m9ItAzPs=
Subject key identifier:   B6:48:A8:DF:0B:93:95:70:8D:8B:59:5E:01:2D:04:0C:0C:1B:40:C7
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Certificate issuer:       /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial:       01D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
Manifest number:          01CB
Signing time:             Mon 08 Dec 2025 04:35:40 +0000
Manifest this update:     Mon 08 Dec 2025 04:35:39 +0000
Manifest next update:     Wed 10 Dec 2025 04:35:39 +0000
Files and hashes:         1: ycEp-8PIJzpGKVWpUo4KrC8umCw.crl (hash: L7JALYH/gEwebfjuR8C6NwQmEZLUbWnexhpDjy1g+Kw=)
                          2: 04AE355E412711F0A7E4287CDAE4EC9C.roa (hash: ENLeza9xray0l264BMW02TQidzUw/ZtvZxWMod5FZ6s=)
                          3: C37DC01C412711F08A72D080DAE4EC9C.roa (hash: qs6TE4JP060hv/0pYpvsSx8iQ0sA281FwGL4dlEI/3w=)
                          4: 93EF9424412711F09F2CC980DAE4EC9C.roa (hash: oONnRnrDfB0ZG1UHPPGQ0dp5NPJf1dST08ulaRQGOC0=)
                          5: 5C73A576412711F08AAAB37EDAE4EC9C.roa (hash: jjxXl0x/+co3gFlsdpdDQTKqw1d56AFQuCJMO0O5h0U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
        Validity
            Not Before: Dec  8 04:35:39 2025 GMT
            Not After : Dec 10 04:35:39 2025 GMT
        Subject: CN=6936559c-5faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:fb:6b:68:1e:75:59:4b:be:25:29:6d:c5:
                    d6:61:03:e0:e5:42:a1:4a:9e:54:7c:a2:92:26:36:
                    f6:e0:5e:d5:99:1c:da:db:60:17:1b:3c:98:91:11:
                    c3:4d:f7:8f:74:73:bc:3c:ec:a3:85:99:e0:a6:83:
                    78:7f:3c:c0:2e:98:15:51:11:7e:31:a9:74:84:e1:
                    a6:fe:35:df:4f:63:a3:9c:d5:54:17:91:3a:c5:7f:
                    83:26:e4:18:bc:04:2e:5c:6f:89:6f:84:49:b5:7c:
                    69:5f:c9:3a:b5:71:69:8b:02:b6:86:19:53:69:38:
                    92:9e:aa:78:ac:8d:f7:a5:42:69:48:4a:41:6f:49:
                    cc:a4:45:67:20:0b:69:45:e5:d9:4c:72:99:46:49:
                    4f:ef:7a:68:b6:02:cd:22:f5:27:47:7e:a6:f8:3d:
                    1a:2b:96:c7:22:8a:35:dc:1c:10:f0:f6:81:2e:2c:
                    d9:8b:71:20:d8:b1:48:23:64:8e:94:fb:97:07:1d:
                    88:ef:2e:fe:bb:3c:9b:05:b1:9b:bd:e6:41:2a:97:
                    5c:ac:06:40:39:d5:15:c3:8c:e6:a9:b2:10:f0:d8:
                    12:93:ff:8f:4b:75:ea:76:4b:7e:60:05:b5:e0:53:
                    c6:79:1b:4d:2a:fe:c9:ec:c2:06:ba:15:ca:04:ac:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:48:A8:DF:0B:93:95:70:8D:8B:59:5E:01:2D:04:0C:0C:1B:40:C7
            X509v3 Authority Key Identifier:
                keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:c1:e6:00:e0:19:c0:e7:6d:54:66:a6:bd:01:22:df:30:
         ad:7d:c9:0d:30:94:9f:a6:fb:49:01:7a:da:41:4d:e9:e9:59:
         30:b2:78:14:34:c9:db:97:4b:da:91:d4:ac:56:d2:6f:d7:12:
         10:e1:2d:52:f7:ab:fc:11:20:5d:2f:0e:70:b9:0e:87:e9:3f:
         bf:56:a1:88:14:2e:20:f4:05:b3:82:5c:c2:73:73:18:de:da:
         c9:1c:13:7f:8b:71:cf:3a:40:c1:27:d0:6b:52:84:0e:0e:ea:
         a6:20:3b:40:67:61:63:ec:89:57:0d:ac:9e:70:4f:9b:83:d0:
         25:85:bb:7e:95:a3:07:a2:28:9e:00:a6:f2:5b:d2:9f:2f:da:
         4e:0a:33:22:e3:43:09:66:85:f6:2f:e7:0f:92:69:cc:6e:43:
         63:8e:a7:63:88:f4:5d:32:ba:38:78:cb:62:53:8d:da:f6:b0:
         f2:9a:59:c9:fa:8d:1a:72:85:64:a4:4d:19:cb:fe:14:66:06:
         17:eb:51:bc:ba:bd:43:77:46:f2:73:ad:6a:f4:56:9b:97:f1:
         83:2d:bc:b8:4a:cb:a8:d8:ba:89:33:3c:0c:6d:7b:02:4a:65:
         d2:4a:ad:04:4a:b8:1e:67:96:25:e3:27:3d:a0:a5:ea:c4:a3:
         ee:2a:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:08:57 2025 by rpki-client