This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
File:                     CodsoUE1QedntQSzPzNJ9CgxUrI.mft (raw, json)
Hash identifier:          FZFarryRd23VnJgyDwFT6+128UBrlvTNlRn7KYTXwbI=
Subject key identifier:   AB:CA:7C:93:75:DB:79:78:79:4F:B4:C2:E6:84:D4:BA:53:BC:D0:E3
Authority key identifier: 0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2
Certificate issuer:       /CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
Certificate serial:       0957
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
Manifest number:          0951
Signing time:             Sat 06 Dec 2025 01:32:11 +0000
Manifest this update:     Sat 06 Dec 2025 01:32:10 +0000
Manifest next update:     Mon 08 Dec 2025 01:32:10 +0000
Files and hashes:         1: CodsoUE1QedntQSzPzNJ9CgxUrI.crl (hash: lo8oeMgNNV1c9dYjbE24/x5zShpTPq6z5YCw78j9ziQ=)
                          2: 980FA84EC4C311F09C5DBADCDAE4EC9C.roa (hash: 3NIWnHbxlUWkyosx3vdAIqsZ9qYLaISFPZqEgFBp27k=)
                          3: ED0F6D76C4C211F084BF89D8DAE4EC9C.roa (hash: EC71aq4NL9tN5YVZeMJv6LmO9eXOL8Co9e+u9TIC6lY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                          rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AR, serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
        Validity
            Not Before: Dec  6 01:32:10 2025 GMT
            Not After : Dec  8 01:32:10 2025 GMT
        Subject: CN=6933879b-e761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:cf:c5:b5:17:bc:97:6b:09:24:f7:6f:b1:
                    ca:43:79:77:6a:13:ac:60:e3:08:90:e0:57:0c:53:
                    85:42:ef:66:56:70:12:61:cf:01:64:5d:96:a5:5a:
                    5b:f3:b1:fb:54:73:1e:84:79:a7:0e:1c:8e:72:60:
                    a5:a6:e5:4b:d5:4c:e3:96:93:9a:c0:d0:e3:64:d5:
                    75:5f:95:85:59:32:7f:8f:a1:59:3a:0d:ad:aa:1f:
                    57:b3:9c:65:61:29:12:94:d7:1e:8a:62:2e:30:ff:
                    9d:49:d1:50:38:eb:cf:37:24:01:2c:9a:73:88:ec:
                    49:c2:4b:d6:d8:08:e2:8e:e2:04:37:db:36:33:ca:
                    7f:fd:75:f0:5d:24:67:21:36:f3:d1:a1:14:db:91:
                    be:bf:82:8b:8a:11:ba:43:e6:c5:d7:75:37:0d:16:
                    4a:46:b0:f7:7a:07:77:b7:5f:ef:d5:25:75:0a:c0:
                    e6:1f:16:7e:ae:d2:1a:ba:87:9b:4e:cb:50:bc:e9:
                    6e:98:7c:b4:0f:3c:7c:08:eb:29:81:c5:83:16:47:
                    ae:0b:86:ad:0a:de:23:91:ae:ee:2f:ec:ed:6e:61:
                    1d:c2:db:8c:94:82:9b:5f:32:48:d8:55:c9:a1:9f:
                    05:3c:b1:b8:ee:0d:0f:25:35:2b:a4:74:71:06:54:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CA:7C:93:75:DB:79:78:79:4F:B4:C2:E6:84:D4:BA:53:BC:D0:E3
            X509v3 Authority Key Identifier:
                keyid:0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:28:c8:cc:ea:34:0f:cc:d3:3f:3a:29:24:90:b6:11:a8:ea:
         e3:2c:86:86:cf:d7:ee:cd:6b:64:b6:99:0d:0c:87:e8:38:e5:
         8d:7c:71:20:97:f6:df:f5:b5:a8:d4:01:6e:b3:96:12:b7:ca:
         92:84:12:ac:96:91:e7:f1:37:86:9a:5f:1a:c7:2a:0b:93:e1:
         ca:ff:2f:2f:af:51:d5:29:a4:d7:fc:16:88:cd:5f:97:05:b2:
         ec:47:10:b7:2f:50:ab:68:40:7b:81:0a:cf:c4:98:37:05:9e:
         a7:56:dd:5b:62:6f:62:7c:f8:c4:bd:a2:fe:fd:71:ab:25:9b:
         93:44:64:2f:c2:6d:72:3e:58:e3:28:5b:4d:f6:10:5c:7f:0a:
         a5:d0:cb:a1:49:8e:fc:08:84:b0:c7:32:61:e8:8f:bd:a0:fd:
         ac:bd:52:e1:cc:08:1c:15:20:55:23:81:13:73:4c:4c:dc:6a:
         ea:a5:a1:f5:e6:d9:a2:37:18:c8:07:9f:5a:5d:f1:ee:d0:71:
         68:a5:79:f2:de:d4:cc:3b:99:d0:36:1d:9f:f1:f3:b6:8f:d3:
         59:cf:f9:68:d6:9b:6e:4c:f5:ab:af:a6:36:e8:a6:d5:4a:3c:
         4a:65:ef:db:bd:b0:3f:bd:6f:fc:5b:b4:fd:98:39:d6:20:2a:
         bd:f3:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:21:41 2025 by rpki-client