This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File:                     nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier:          0KTCVvAQUKzk1S9Su1FKKcrhJZrmX6+X0qo6zkS67qo=
Subject key identifier:   E5:77:B1:E8:50:64:29:3C:3B:6D:05:10:37:FB:1F:48:EE:56:88:21
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer:       /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial:       0F0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number:          0EFC
Signing time:             Sat 06 Dec 2025 00:55:28 +0000
Manifest this update:     Sat 06 Dec 2025 00:55:27 +0000
Manifest next update:     Mon 08 Dec 2025 00:55:27 +0000
Files and hashes:         1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: 66j4EcccL7k4MHowz83R/LWBcI3sSraobikRpyqKNQU=)
                          2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
                          3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
                          4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
                          5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
                          6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
                          7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
                          8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
                          9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
                          10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
                          11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
                          12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3851 (0xf0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
        Validity
            Not Before: Dec  6 00:55:27 2025 GMT
            Not After : Dec  8 00:55:27 2025 GMT
        Subject: CN=69337f00-bfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:c5:74:9d:26:92:3b:56:1b:ad:79:97:dc:
                    f4:93:ed:99:3b:75:5f:4a:57:e9:fa:0e:ac:8c:a5:
                    73:67:da:34:7e:58:7a:13:99:b2:18:ca:50:bb:61:
                    93:31:97:c2:3d:40:74:69:3d:b9:06:38:35:71:77:
                    07:12:ea:17:ed:fd:c9:ba:14:72:2f:30:af:5c:42:
                    e9:d5:66:ef:69:fe:4d:48:c7:ea:9e:7a:80:10:08:
                    c3:44:88:93:84:ae:f3:df:55:87:42:22:26:6c:ec:
                    95:d1:0f:8f:24:50:10:ec:b6:73:7e:ee:18:98:6b:
                    fd:f4:ba:3a:98:5f:2b:7e:80:cd:3e:b5:92:6c:94:
                    06:d7:d1:6c:99:1d:18:94:45:5d:5f:6e:31:92:b7:
                    28:3e:d1:ff:e0:4b:fc:c1:ba:e3:6d:da:5a:b2:1f:
                    49:66:fb:25:33:e0:cd:ae:c2:5e:0d:aa:9a:2d:22:
                    1a:f3:bb:35:67:a0:37:2b:bf:d6:a9:6b:e7:e7:03:
                    2c:15:b3:4c:23:80:b0:07:2b:f7:89:c7:6d:35:46:
                    ec:e5:21:69:83:e2:21:15:33:56:b8:0a:61:0c:14:
                    f6:f0:8b:39:9f:e8:bc:29:0d:75:0d:64:64:27:6c:
                    55:66:37:cf:cc:16:4d:e2:64:58:4a:76:c4:32:68:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:77:B1:E8:50:64:29:3C:3B:6D:05:10:37:FB:1F:48:EE:56:88:21
            X509v3 Authority Key Identifier:
                keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:56:66:26:76:69:2a:b2:bd:f9:cf:44:cb:2d:f8:0a:34:
         ee:23:1d:8d:53:39:a6:d3:20:01:44:22:a2:86:5f:1a:df:09:
         5b:e7:cd:df:9a:58:88:d5:1e:f0:0d:ce:9b:91:b1:96:d5:8e:
         14:f0:a0:06:c6:d8:12:50:31:60:69:c5:a6:75:f4:ae:c5:16:
         d4:43:8b:b9:18:aa:4f:94:49:77:9e:58:0e:63:08:ea:05:43:
         04:3d:cd:5d:98:50:8a:29:92:26:bf:1e:5a:ce:df:fd:13:97:
         4d:ee:6c:6d:29:0e:00:49:14:7d:bd:cb:43:e8:89:ea:1d:59:
         af:07:e4:25:07:21:62:4f:d6:5b:30:4f:3d:88:fd:28:a3:a3:
         28:c1:ed:97:05:90:a0:63:64:9a:fa:2f:d0:e6:19:05:99:bd:
         c7:26:8b:41:23:86:d9:b0:e0:d6:18:28:a5:bb:c7:bf:f1:bb:
         8a:5b:c8:4f:c0:c0:d1:95:7b:60:9b:da:54:d0:92:3d:e4:0d:
         ba:81:b5:42:30:29:95:65:79:2e:64:a1:7d:51:34:c2:42:e9:
         42:1d:1d:c2:de:eb:b2:01:17:50:81:6e:c4:0a:ff:27:cf:43:
         a7:7b:73:fe:7a:53:7e:af:e3:6c:65:c5:0d:a5:9f:e2:1d:5c:
         ba:5b:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:01:09 2025 by rpki-client