This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
File:                     9oCEVKFPM27F0FtEVliFDrv9ZWU.mft (raw, json)
Hash identifier:          wJsfYMWQZUupPu1JVGJOWuNK1NE9ZO7P47QnyaHr0ws=
Subject key identifier:   B9:23:B3:EF:B6:B4:E9:AE:C5:20:2B:38:0B:81:57:A8:27:7C:F5:70
Authority key identifier: F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65
Certificate issuer:       /CN=F36ADFB8AF/serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
Certificate serial:       0674
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
Manifest number:          0672
Signing time:             Mon 08 Dec 2025 02:16:07 +0000
Manifest this update:     Mon 08 Dec 2025 02:16:06 +0000
Manifest next update:     Wed 10 Dec 2025 02:16:06 +0000
Files and hashes:         1: 9oCEVKFPM27F0FtEVliFDrv9ZWU.crl (hash: tt18vTv+tA7LBaDu2JZ+yvwn7kxOtKB8EG7MTICncWY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ADFB8AF, serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
        Validity
            Not Before: Dec  8 02:16:06 2025 GMT
            Not After : Dec 10 02:16:06 2025 GMT
        Subject: CN=693634e6-93fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:ed:2b:3a:79:67:5f:b3:a9:7f:9e:17:63:
                    3a:a8:a4:bb:36:4c:4d:ce:9e:89:ab:13:0b:87:e7:
                    c3:1b:10:fe:03:68:f6:e8:50:89:1f:6f:3d:0c:91:
                    39:67:d9:b2:72:d1:cc:8b:97:52:4a:22:54:5a:c0:
                    3f:20:e1:c3:e6:c4:4c:71:c8:70:bf:e5:54:34:9a:
                    51:2c:e4:75:e9:26:31:2a:99:db:14:67:22:dd:8c:
                    ad:47:da:43:18:c0:7f:d0:7b:43:0f:58:8a:ed:54:
                    db:a9:98:cf:b9:a2:ec:9d:47:36:13:d0:2e:29:34:
                    fb:7d:8b:84:ab:2c:73:ef:9b:79:37:5d:ac:f0:53:
                    a4:b9:cb:b6:2a:e4:c3:59:ad:89:9e:71:1b:24:f0:
                    cb:52:a5:13:91:69:9b:6a:ea:ea:04:4d:30:b6:03:
                    8b:ea:99:45:02:4b:5b:cd:f5:8e:03:68:66:78:e2:
                    d4:ac:89:86:e9:20:cf:93:31:94:29:de:dc:33:bb:
                    c4:50:54:09:33:c4:2c:7e:d9:b6:4a:d4:bd:72:63:
                    4b:c9:0f:e0:ca:f0:6c:29:16:1d:5f:87:b5:e7:2c:
                    d5:86:aa:c9:9e:c4:a8:96:dc:2f:7f:14:53:e2:9e:
                    bb:fe:c4:6b:b1:a9:46:44:f1:41:39:82:4f:fe:ef:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:23:B3:EF:B6:B4:E9:AE:C5:20:2B:38:0B:81:57:A8:27:7C:F5:70
            X509v3 Authority Key Identifier:
                keyid:F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ed:13:fc:e4:99:a6:be:1c:de:87:0f:ea:d9:34:03:dc:4d:
         01:9a:0a:21:58:78:76:b2:0d:59:e4:2f:90:95:01:11:27:22:
         f9:97:c1:b1:21:60:db:15:2c:15:b7:49:a7:19:94:84:0f:db:
         69:71:48:34:2a:f9:5c:e1:64:bd:2a:39:e1:05:8d:0b:c3:56:
         2c:a7:ff:aa:30:a8:5f:4e:d8:32:ad:e9:f1:a2:e7:cb:4b:4b:
         34:cb:13:87:5a:f7:39:f0:fa:1e:14:22:24:26:ac:ae:f5:82:
         cf:67:5e:c3:f6:08:cc:7d:f5:07:06:bf:e0:e1:e5:16:c0:cf:
         81:30:63:5b:de:b0:99:23:82:bc:17:74:6e:12:1b:ac:f8:17:
         80:5e:69:5e:f0:84:0c:b8:18:dd:4e:36:c3:f2:c4:26:ee:17:
         be:15:f8:de:fa:43:78:2e:2f:9f:75:ad:6c:fb:ce:b4:be:7a:
         1a:47:de:ba:2a:00:7b:ec:2b:e8:23:49:9c:be:68:30:9a:37:
         56:2a:01:91:82:58:dd:8f:25:74:39:a7:b9:6e:ea:04:d3:70:
         df:a7:2e:ff:46:da:db:48:2a:aa:0a:20:4b:dc:8d:1f:ca:af:
         c7:60:5c:08:f1:f6:5a:95:93:ec:64:84:d4:07:05:ab:88:e1:
         8d:00:35:a6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QURGQjhBRjExMC8GA1UEBRMoRjY4MDg0NTRBMTRGMzM2RUM1RDA1QjQ0NTY1ODg1
MEVCQkZENjU2NTAeFw0yNTEyMDgwMjE2MDZaFw0yNTEyMTAwMjE2MDZaMBgxFjAU
BgNVBAMTDTY5MzYzNGU2LTkzZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxSu0rOnlnX7Opf54XYzqopLs2TE3OnomrEwuH58MbEP4DaPboUIkfbz0M
kTln2bJy0cyLl1JKIlRawD8g4cPmxExxyHC/5VQ0mlEs5HXpJjEqmdsUZyLdjK1H
2kMYwH/Qe0MPWIrtVNupmM+5ouydRzYT0C4pNPt9i4SrLHPvm3k3XazwU6S5y7Yq
5MNZrYmecRsk8MtSpRORaZtq6uoETTC2A4vqmUUCS1vN9Y4DaGZ44tSsiYbpIM+T
MZQp3twzu8RQVAkzxCx+2bZK1L1yY0vJD+DK8GwpFh1fh7XnLNWGqsmexKiW3C9/
FFPinrv+xGuxqUZE8UE5gk/+7/kbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuSOz
77a06a7FICs4C4FXqCd89XAwHwYDVR0jBBgwFoAU9oCEVKFPM27F0FtEVliFDrv9
ZWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFERkI4LzE3QjRCMUE4RTk1RDExRUI4N0YzNzU2MkQ4QTAxNENFLzlvQ0VW
S0ZQTTI3RjBGdEVWbGlGRHJ2OVpXVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlvQ0VWS0ZQTTI3RjBGdEVWbGlGRHJ2OVpXVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QURGQjgvMTdCNEIxQThFOTVEMTFFQjg3RjM3NTYyRDhB
MDE0Q0UvOW9DRVZLRlBNMjdGMEZ0RVZsaUZEcnY5WldVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCD7RP85Jmmvhzehw/q2TQD3E0Bmgoh
WHh2sg1Z5C+QlQERJyL5l8GxIWDbFSwVt0mnGZSED9tpcUg0Kvlc4WS9KjnhBY0L
w1Ysp/+qMKhfTtgyrenxoufLS0s0yxOHWvc58PoeFCIkJqyu9YLPZ17D9gjMffUH
Br/g4eUWwM+BMGNb3rCZI4K8F3RuEhus+BeAXmle8IQMuBjdTjbD8sQm7he+Ffje
+kN4Li+fda1s+860vnoaR966KgB77CvoI0mcvmgwmjdWKgGRgljdjyV0Oae5buoE
03Dfpy7/RtrbSCqqCiBL3I0fyq/HYFwI8fZalZPsZITUBwWriOGNADWm
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:19:14 2025 by rpki-client