This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          dINCq4XMb1zAA4wK5GzHqL4fYfJyzsC5U0ODa9ZxQC8=
Subject key identifier:   82:83:5E:1D:EA:DD:A7:1E:EB:EC:ED:26:D1:C3:46:88:B0:03:E5:43
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       0788
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          0782
Signing time:             Sun 07 Dec 2025 01:55:40 +0000
Manifest this update:     Sun 07 Dec 2025 01:55:39 +0000
Manifest next update:     Tue 09 Dec 2025 01:55:39 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: 6HlvDt88i870zTr2B2FVcmsZU2YYeoZR1XpQTpvggO0=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Dec  7 01:55:39 2025 GMT
            Not After : Dec  9 01:55:39 2025 GMT
        Subject: CN=6934de9c-9bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:dd:03:c0:73:fc:f3:4c:99:80:32:13:b3:
                    28:78:25:73:78:e4:77:1c:cb:04:72:9a:a3:2d:21:
                    42:fd:c7:ab:73:ca:ff:b4:9d:a2:b6:83:8c:ca:b9:
                    1e:26:00:04:d2:3a:4b:3a:69:c8:aa:50:eb:e0:4e:
                    6e:49:db:20:4a:ff:b5:e4:b6:9e:df:61:a7:fe:4b:
                    10:71:8e:94:54:59:dc:46:f5:4f:6f:bb:91:a1:8e:
                    45:63:ad:d9:aa:69:2b:29:25:47:29:b8:5d:ae:c6:
                    1d:9c:49:05:ac:5a:45:0c:f1:90:96:98:6b:34:12:
                    92:2d:ce:e6:5c:7b:42:7b:d2:78:40:37:37:8c:0d:
                    b1:a8:6d:bf:9c:ec:7c:a9:1f:55:66:fc:22:6b:3f:
                    b4:d8:b6:ee:25:fe:c5:17:da:f7:de:85:42:e5:bd:
                    e2:af:1c:55:1a:5c:03:9c:d9:24:3f:9a:08:d8:0b:
                    f5:cf:d7:b3:2a:c9:77:c4:8e:87:db:26:38:3e:5c:
                    f3:6a:b4:8d:1b:0c:23:80:7d:cf:0d:a5:3e:fc:6b:
                    96:37:6c:25:ac:27:32:d6:c8:91:4b:b6:6d:3e:f2:
                    23:c4:ef:86:3b:a8:24:4f:cb:32:06:25:a6:56:d2:
                    62:c3:0c:9d:0d:46:f6:d5:6e:83:0c:a6:5f:a1:81:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:83:5E:1D:EA:DD:A7:1E:EB:EC:ED:26:D1:C3:46:88:B0:03:E5:43
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0f:75:c2:61:e7:46:6a:eb:e7:7f:da:15:2a:ca:e9:0b:34:
         7a:e2:8b:7a:e9:0b:2e:89:5c:bd:71:bb:90:8d:77:12:d4:1b:
         a3:e7:11:90:af:1e:36:c2:47:46:55:51:9a:f7:5e:c0:d1:83:
         9c:15:7b:11:4b:64:ed:82:92:f2:00:cd:9b:08:7f:97:6f:95:
         f4:61:a1:b7:06:5c:fa:9a:45:4d:7b:8c:22:fc:35:25:b6:20:
         21:52:5e:2d:ad:6b:fc:f3:74:a2:59:9f:93:51:86:68:bf:67:
         45:ba:0b:2a:4e:26:e6:7f:2a:a0:79:f1:dd:30:50:55:38:0f:
         30:84:2b:9d:46:4e:b1:fa:ce:86:33:02:f0:b0:f8:89:eb:b4:
         97:6a:7f:ae:ac:4e:a8:59:c5:89:a6:7f:03:48:f8:72:eb:94:
         04:af:d7:7e:19:a0:81:48:ac:72:ae:c7:50:b9:ff:71:ba:43:
         9a:82:a1:eb:49:e6:c0:1c:b6:16:66:a6:6d:f9:18:f3:23:e7:
         9d:5b:b7:16:f0:c3:e1:32:c4:f9:86:02:05:f9:16:25:f0:c0:
         9c:9a:22:5b:90:82:6e:82:91:c5:5b:e5:5b:d6:25:f4:68:10:
         7b:db:68:a9:b0:86:76:3f:41:9c:84:c8:db:22:df:f5:9c:2c:
         d9:98:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:35:17 2025 by rpki-client