This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
File:                     oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft (raw, json)
Hash identifier:          uqwVSxgfvkbAInhGsKGumbLZj2K8+f+CKqA8uxNWJ1Q=
Subject key identifier:   45:CC:E8:F8:AF:5B:45:0B:E6:68:DA:A7:FB:56:3B:E0:41:85:69:09
Authority key identifier: A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
Certificate issuer:       /CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Certificate serial:       0271
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
Manifest number:          026C
Signing time:             Mon 08 Dec 2025 04:10:49 +0000
Manifest this update:     Mon 08 Dec 2025 04:10:48 +0000
Manifest next update:     Wed 10 Dec 2025 04:10:48 +0000
Files and hashes:         1: oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl (hash: rf9OQSvOV/ZdeZLUk2MmZ/Pj0rw4MKuIwDMmyF+nIns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AF, serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
        Validity
            Not Before: Dec  8 04:10:48 2025 GMT
            Not After : Dec 10 04:10:48 2025 GMT
        Subject: CN=69364fc8-836b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:f5:a1:7b:b7:25:fc:5a:2d:aa:22:33:4a:
                    13:35:e1:b4:8d:4b:ed:a2:06:9e:75:6c:6a:af:f0:
                    a0:c6:2f:28:72:10:7c:69:1f:3b:71:7f:5f:db:85:
                    b1:2d:8f:b1:61:1d:f8:68:f3:9e:5e:ec:3a:9f:0f:
                    81:8a:a2:d8:31:11:e9:ea:7a:d7:ea:45:61:8f:75:
                    71:6a:10:09:d8:bb:2a:84:23:a7:92:a9:27:7b:66:
                    b6:56:d7:04:d1:a7:a2:5b:51:c6:d3:e2:18:d9:d0:
                    ba:55:0d:35:c4:86:df:77:0e:cd:38:84:44:d8:13:
                    aa:6b:1f:9f:af:5b:3d:cb:f5:57:8a:b6:99:ac:f4:
                    11:45:e6:87:35:7c:5c:b4:ca:0a:21:4a:30:8e:19:
                    1b:f1:80:4b:ac:b7:d6:38:20:4e:47:07:ca:55:b5:
                    8a:f8:3a:d0:ac:7e:71:37:42:c7:cb:d9:0b:27:6a:
                    84:85:12:97:38:b3:53:4b:c4:c6:f4:e6:81:48:d7:
                    a2:85:0a:55:66:f7:ea:72:92:61:6e:76:4f:2b:96:
                    b9:88:8d:e9:b3:70:2f:a5:27:cd:60:41:18:68:73:
                    a7:90:1a:c4:66:69:d6:f7:d6:af:e4:d7:af:d4:6f:
                    84:29:1e:f4:e0:0d:cf:00:d1:2d:98:cb:e8:7d:a8:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CC:E8:F8:AF:5B:45:0B:E6:68:DA:A7:FB:56:3B:E0:41:85:69:09
            X509v3 Authority Key Identifier:
                keyid:A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c6:12:51:52:0c:88:b7:44:3a:9a:76:f5:5f:e7:fe:97:44:
         bb:c9:40:61:8d:e5:7a:e0:24:1f:32:d2:2f:51:3e:ac:18:25:
         52:f7:61:b4:38:e6:a9:3d:79:b8:78:ff:e3:78:23:1a:58:04:
         b5:41:01:6f:7b:17:52:ab:d3:b3:63:a8:70:4f:c8:86:d8:4b:
         36:79:4c:82:f3:16:ee:60:da:77:7d:74:03:5d:31:5e:d0:3d:
         a1:62:64:9f:f6:d9:ed:a4:18:2f:85:60:d2:df:77:f0:b6:cf:
         de:e3:88:56:bd:57:9e:d9:4f:7d:3f:3e:46:5a:8d:cc:09:37:
         06:aa:8e:f5:9c:08:b5:dd:0a:1d:3d:a7:4e:82:3f:0a:a4:56:
         9d:1b:04:ce:6a:29:55:a4:65:a7:e0:51:6e:41:21:77:f3:1d:
         aa:9f:31:ab:97:c3:bb:4c:82:99:6c:80:c3:0f:f2:2c:4c:67:
         f3:f9:97:a4:7b:5b:5b:d8:f0:11:59:7c:76:ed:0f:01:79:80:
         78:38:14:91:70:34:1c:bf:98:51:f3:bb:39:90:a6:16:4e:47:
         e4:6b:2f:a1:b8:53:0a:0d:60:fd:07:c9:fb:b9:e0:5e:71:b3:
         ff:af:de:dc:2c:4d:89:e3:80:49:66:fc:4d:f5:3e:ff:d3:3f:
         63:50:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:11:09 2025 by rpki-client