This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
File:                     BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json)
Hash identifier:          qOB+vehfxuRdQ3aKoUJ5BAbHLY6C2BynZXcaUr6Gagk=
Subject key identifier:   57:BB:1C:DE:7D:C4:CB:A3:DF:E9:77:EE:95:A5:5E:93:B1:59:08:BD
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       04CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
Manifest number:          04C7
Signing time:             Sat 06 Dec 2025 03:01:32 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:32 +0000
Manifest next update:     Mon 08 Dec 2025 03:01:32 +0000
Files and hashes:         1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: l5o9Wk1RNe9LOyeajdQ3gpjqUN9JaUXeYbVAHKpEcSo=)
                          2: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=)
                          3: 835DF5F834EE11ED901FCEEDF1222468.roa (hash: 7FPE0FhlSAjUMelmubiUwThbu0o5YNAG9Z3oUXP8EmA=)
                          4: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=)
                          5: 18EA1A1EEFEA11EDBAF5D7884AD9E6FC.roa (hash: Suhxb/oULjMaEZsuBizxaGFSrHq0egh0mczTJVoAnnw=)
                          6: 4540A8D0EFEA11EDA6943F894AD9E6FC.roa (hash: YdysxgceL5KQtLTnwMeNCOiB4lPOcf1FskePKjG3oJk=)
                          7: BDCCC46234EE11EDACB45CEEF1222468.roa (hash: bWeTuDjLwjcjXXalbVQak4qGcRcTM2Bs7Q2hhXrJ914=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
        Validity
            Not Before: Dec  6 03:01:32 2025 GMT
            Not After : Dec  8 03:01:32 2025 GMT
        Subject: CN=69339c8c-aeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:68:2e:72:35:4d:89:0e:bd:52:6a:27:4c:
                    72:38:07:52:86:f7:b3:54:13:5e:25:72:16:bf:b1:
                    1d:cf:7b:a7:68:74:f5:87:67:61:a7:7b:c3:b1:03:
                    50:4f:8a:d6:2b:8a:7a:4c:2a:1b:2a:76:eb:22:52:
                    3d:60:e7:a4:58:3a:4b:eb:c8:65:28:c7:75:3b:c3:
                    89:bb:28:d7:09:e4:7e:58:29:f2:85:e5:68:da:74:
                    30:a0:f9:78:9b:aa:ad:41:bd:e3:6a:ab:83:0c:1d:
                    0b:1c:53:07:c3:14:7c:7e:4e:71:60:61:e9:f4:68:
                    5b:21:38:5e:44:94:ad:15:75:8a:25:c7:6d:97:ad:
                    42:ba:8c:c0:f1:73:da:ed:f2:a1:ae:34:38:f7:6b:
                    1b:a2:b9:c7:46:4b:c2:a8:e0:a8:1b:77:32:00:52:
                    fe:18:e3:04:f6:9e:82:9d:a6:b4:0c:8e:2e:42:f7:
                    de:4e:a4:66:30:2d:49:12:08:a0:73:3c:ec:2f:1e:
                    14:79:15:01:f4:0f:a8:77:5f:62:5a:ea:e1:5e:ea:
                    1e:38:42:e3:e7:7f:a9:9d:9c:62:1a:ff:a5:bc:a7:
                    92:3b:d3:2d:42:9a:f2:4e:57:8f:4f:43:08:5d:5b:
                    1c:c0:f3:a4:f3:ef:0e:c1:e4:99:8b:ff:e6:f8:22:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BB:1C:DE:7D:C4:CB:A3:DF:E9:77:EE:95:A5:5E:93:B1:59:08:BD
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fd:b2:2c:88:6b:da:22:0b:5e:f4:d6:86:af:32:31:5d:b2:
         b5:c3:e5:67:93:ed:d5:1b:56:7f:86:f9:93:88:2c:4b:9b:7b:
         3e:d2:c6:08:93:81:56:67:4d:5d:e3:2d:90:ee:8c:f6:db:ab:
         8b:e7:79:cd:9e:e6:10:b9:31:f4:7d:29:cd:6d:69:5e:ce:2e:
         e7:90:b7:d3:0a:72:fd:f6:51:20:76:b4:6b:2f:10:17:d0:3e:
         d5:b1:e6:3a:8b:18:18:77:a5:96:82:7d:c5:0e:e3:e8:92:75:
         72:b0:47:27:f6:79:26:d0:5a:77:a0:25:8e:90:6d:c7:a1:fb:
         43:62:2e:df:64:fd:9e:84:de:d0:04:0e:9f:96:f3:67:33:0c:
         d0:a5:97:05:59:50:a2:51:45:82:5a:e5:19:1a:5f:af:7b:3c:
         73:04:dc:ea:e1:c0:6c:41:a6:81:77:08:b3:b5:89:22:6f:bd:
         16:b6:44:53:88:6f:0a:42:84:1f:7b:20:f1:3e:cd:1b:10:36:
         fb:1c:8b:1d:ff:26:98:c4:cb:6f:57:c4:da:7a:a6:7c:a5:c9:
         d0:82:66:68:55:f4:76:3d:b8:36:be:97:10:d5:c6:fe:c0:37:
         a6:66:53:03:8b:85:d0:fa:53:17:51:cc:e3:6c:cd:2c:08:b5:
         e7:4a:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:06 2025 by rpki-client