This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft (raw, json)
Hash identifier:          8+Z/D7GDqhgniw+05K4v2GmSJ38l+IPq7zxoEtAxidw=
Subject key identifier:   02:9C:85:39:B4:52:DA:F2:60:F6:18:04:93:9E:E0:99:B7:78:73:6F
Authority key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Certificate issuer:       /CN=F3674908AR/serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
Certificate serial:       A3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
Manifest number:          A2
Signing time:             Sat 06 Dec 2025 05:03:32 +0000
Manifest this update:     Sat 06 Dec 2025 05:03:31 +0000
Manifest next update:     Mon 08 Dec 2025 05:03:31 +0000
Files and hashes:         1: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl (hash: IOMjE8qay/QAabk4tN0qhmUHeqGtjIZb46an4tKj96E=)
                          2: 1944E674564511F0983236F2DAE4EC9C.roa (hash: Y7C2EDuJLg0UUohvGlHcA8fBY7urPGjjAraukXhUClw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                          rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Validity
            Not Before: Dec  6 05:03:31 2025 GMT
            Not After : Dec  8 05:03:31 2025 GMT
        Subject: CN=6933b924-2c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:7a:b9:e2:48:fa:f8:84:f4:0b:da:59:a8:
                    83:fc:ac:b8:1f:03:25:43:11:10:eb:10:73:47:98:
                    5d:4f:9e:97:44:18:28:c8:d7:a9:b4:10:b6:c7:49:
                    05:72:de:7c:00:62:1e:bf:24:65:97:6d:a3:66:8a:
                    9f:9c:8b:05:67:f4:95:32:a9:49:85:6e:40:30:67:
                    05:40:29:f4:f1:ca:17:24:bb:2a:77:a0:75:7f:19:
                    c4:1d:49:84:97:89:78:a2:9a:63:f5:8f:91:de:74:
                    e5:c5:0b:8a:1d:6f:3b:04:4e:02:2c:f2:96:9a:24:
                    7d:50:d4:16:92:08:81:18:83:26:b7:64:49:86:13:
                    e9:4f:c2:4c:c2:16:59:ba:41:4e:3e:87:54:96:d4:
                    05:3f:d2:e8:6d:88:1a:71:3a:ea:4d:8b:b3:19:6d:
                    0d:4e:47:ac:e9:24:1e:9b:1f:fa:27:6b:93:d4:eb:
                    ab:fe:67:5e:a0:1c:38:9c:d4:84:83:e5:d4:c2:fb:
                    f3:72:c8:53:01:00:9b:2f:4e:bb:5d:0e:ce:25:cd:
                    e0:90:1b:b0:17:95:c1:d1:98:63:25:6e:5b:93:c1:
                    8e:96:6d:d4:c1:ec:b3:55:f0:20:46:79:91:ce:45:
                    84:37:5f:3a:49:fd:5c:c2:da:79:e3:ce:09:db:c2:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:85:39:B4:52:DA:F2:60:F6:18:04:93:9E:E0:99:B7:78:73:6F
            X509v3 Authority Key Identifier:
                keyid:60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2e:55:87:d8:e2:95:ba:b5:04:c3:e0:4c:74:c2:d4:c4:0d:
         63:42:09:fe:aa:ed:98:b6:7e:40:b2:1b:5f:aa:43:79:0a:2b:
         c4:a3:bd:d1:94:02:8e:c8:cb:0f:ec:f7:62:9d:d3:eb:55:fd:
         8c:70:f4:25:fe:4f:62:ac:d2:57:0d:0b:29:5c:cd:c2:28:e3:
         fc:4e:3e:cd:bd:ed:54:ba:7f:95:99:2c:55:0a:82:19:7b:1b:
         22:85:57:f5:8a:bd:8e:13:01:80:a5:35:71:97:ba:4a:92:55:
         aa:04:e3:56:a7:7b:6b:98:9a:b3:28:32:c3:4d:80:28:a7:f5:
         2f:bb:e7:37:84:c2:b6:c7:b1:af:6a:4f:39:7f:93:d7:dc:a9:
         6b:54:bd:42:42:0d:68:f9:3e:9e:18:d2:20:ec:84:70:0b:c1:
         12:a0:37:fe:cc:77:7d:8c:6f:c6:cc:51:ea:50:d8:3e:47:7e:
         be:d5:3e:fa:6d:31:97:b5:fb:f3:92:d5:3c:5f:4f:16:3a:92:
         ba:b2:47:f2:05:0b:09:f0:ff:3e:74:19:d5:ca:3b:34:7c:38:
         53:84:bb:da:58:2d:af:02:47:14:d4:d4:a1:7c:66:07:37:e8:
         cd:d5:b7:16:41:04:0e:5c:87:fa:18:99:26:50:99:bf:bf:4e:
         0f:e6:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:46:00 2025 by rpki-client