This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          G2b4baT+Cr9TQwzDCtQMNqqjsF08XDaXLiW1020qwJs=
Subject key identifier:   BF:6D:17:AD:8F:AA:E6:F9:00:70:E6:83:78:DB:28:45:CE:12:2C:00
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       01DD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          01DD
Signing time:             Sat 06 Dec 2025 04:31:06 +0000
Manifest this update:     Sat 06 Dec 2025 04:31:05 +0000
Manifest next update:     Mon 08 Dec 2025 04:31:05 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: /Lt79kd5gIXmIeucUEE8FRvLyvvVZTZxy7W9Tbff4uA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 04:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Dec  6 04:31:05 2025 GMT
            Not After : Dec  8 04:31:05 2025 GMT
        Subject: CN=6933b18a-52f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:e8:95:03:b1:f4:7a:ff:da:37:89:b0:48:
                    fa:e9:14:a3:dc:35:3a:a9:43:d0:24:a6:e3:b2:98:
                    46:f7:b8:97:f8:3a:4e:fc:c8:d1:6e:32:31:2a:21:
                    24:33:35:01:a4:c5:87:00:9a:62:c7:33:43:ea:39:
                    0b:62:ed:21:d3:25:83:f2:d8:25:4c:ae:91:c1:a4:
                    15:4f:e6:c2:1e:5e:96:ed:4c:9a:46:14:33:dc:b5:
                    d4:a3:0c:c4:2c:47:27:f1:55:46:e4:d2:45:f1:b4:
                    15:cd:bf:17:8f:ea:bd:36:74:c6:6e:f2:8f:51:f3:
                    df:fd:65:fe:57:06:63:da:d3:83:9c:9c:0c:66:a0:
                    9d:1b:eb:8d:55:6b:1a:f0:33:de:d3:5d:2b:65:11:
                    ea:5d:b9:50:e6:7b:87:58:9a:33:82:de:49:20:b0:
                    1e:86:d9:5a:75:67:f0:ad:8c:81:78:15:a6:36:10:
                    de:6b:5a:0a:f3:74:c0:e1:b8:cd:b6:b6:fa:cf:ba:
                    e7:7f:26:25:95:10:99:aa:21:be:32:93:99:9d:b1:
                    02:2e:31:45:1f:80:e9:0b:c1:76:8d:76:24:88:56:
                    e1:9f:43:66:ba:06:04:5e:44:40:69:f9:8b:f8:f7:
                    3e:48:ba:a9:c0:66:d4:5b:50:ab:13:62:31:5e:67:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:17:AD:8F:AA:E6:F9:00:70:E6:83:78:DB:28:45:CE:12:2C:00
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:26:72:92:c0:9c:2a:06:36:00:7b:df:ea:ca:e9:2b:08:
         45:3c:e5:ee:be:7d:de:50:fe:6b:b9:44:1d:3e:0a:21:f2:8c:
         b1:4e:eb:62:0f:e0:3d:f8:d1:39:d3:a4:f6:3b:31:33:ec:fa:
         42:05:cd:9e:75:36:a2:e3:af:50:c5:b5:d6:e5:ae:2f:ef:26:
         d1:cb:7d:86:d6:45:50:44:20:2e:8a:6c:0c:61:81:d9:3f:10:
         84:ef:bf:d8:18:de:27:54:46:b7:c8:0a:5a:8c:f0:2a:92:5b:
         16:65:96:8a:41:09:ee:5e:e8:e2:c0:ce:94:81:12:18:d2:b1:
         70:82:06:82:44:2e:85:32:1e:dd:67:dc:c6:f9:36:69:62:b5:
         67:86:4d:e0:0a:09:3e:04:88:1a:cd:47:f9:e8:a1:c0:6a:51:
         7e:f9:ce:75:d1:0c:26:e6:03:1b:95:f0:c7:b2:ba:13:21:2a:
         6a:f9:ef:5e:ac:3c:4c:d1:a4:7d:99:05:be:63:31:8b:d8:fb:
         71:d8:80:60:a7:76:0d:72:fd:05:7c:c7:5d:7f:db:ef:1d:d0:
         8b:45:62:37:68:2c:e7:64:59:96:7c:be:82:de:d2:fb:47:25:
         7e:a9:c7:c9:ce:00:c4:6d:00:5c:07:bf:b0:98:68:8e:ce:05:
         3b:d4:3d:6f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzY3OEZSSTExMC8GA1UEBRMoMDUyQjlDRDEwRjZBRTY3QjMxMjdFRDEyMzcyNDdF
OEFDNDRCNzlBMTAeFw0yNTEyMDYwNDMxMDVaFw0yNTEyMDgwNDMxMDVaMBgxFjAU
BgNVBAMTDTY5MzNiMThhLTUyZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSHuiVA7H0ev/aN4mwSPrpFKPcNTqpQ9AkpuOymEb3uJf4Ok78yNFuMjEq
ISQzNQGkxYcAmmLHM0PqOQti7SHTJYPy2CVMrpHBpBVP5sIeXpbtTJpGFDPctdSj
DMQsRyfxVUbk0kXxtBXNvxeP6r02dMZu8o9R89/9Zf5XBmPa04OcnAxmoJ0b641V
axrwM97TXStlEepduVDme4dYmjOC3kkgsB6G2Vp1Z/CtjIF4FaY2EN5rWgrzdMDh
uM22tvrPuud/JiWVEJmqIb4yk5mdsQIuMUUfgOkLwXaNdiSIVuGfQ2a6BgReREBp
+Yv49z5IuqnAZtRbUKsTYjFeZ0FfAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUv20X
rY+q5vkAcOaDeNsoRc4SLAAwHwYDVR0jBBgwFoAUBSuc0Q9q5nsxJ+0SNyR+isRL
eaEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2NzhGLzdDOTg4M0UyNjUwQjExRUZCQjk2Rjc1NTc2MkU5NTFBL0JTdWMw
UTlxNW5zeEotMFNOeVItaXNSTGVhRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0JTdWMwUTlxNW5zeEotMFNOeVItaXNSTGVhRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzY3OEYvN0M5ODgzRTI2NTBCMTFFRkJCOTZGNzU1NzYyRTk1
MUEvQlN1YzBROXE1bnN4Si0wU055Ui1pc1JMZWFFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFTyZyksCcKgY2AHvf6srpKwhFPOXuvn3e
UP5ruUQdPgoh8oyxTutiD+A9+NE506T2OzEz7PpCBc2edTai469QxbXW5a4v7ybR
y32G1kVQRCAuimwMYYHZPxCE77/YGN4nVEa3yApajPAqklsWZZaKQQnuXujiwM6U
gRIY0rFwggaCRC6FMh7dZ9zG+TZpYrVnhk3gCgk+BIgazUf56KHAalF++c510Qwm
5gMblfDHsroTISpq+e9erDxM0aR9mQW+YzGL2Ptx2IBgp3YNcv0FfMddf9vvHdCL
RWI3aCznZFmWfL6C3tL7RyV+qcfJzgDEbQBcB7+wmGiOzgU71D1v
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:39:59 2025 by rpki-client