This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
File:                     UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft (raw, json)
Hash identifier:          2WL5bCo+mUoZRX/fLmIqConBbVzvarqnhjYT8ByfH/E=
Subject key identifier:   0F:75:EB:17:BE:E8:41:5F:33:E1:83:5A:FD:12:45:3F:8D:59:17:63
Authority key identifier: 53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F
Certificate issuer:       /CN=F36B09DCAF/serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
Certificate serial:       040C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
Manifest number:          040B
Signing time:             Mon 08 Dec 2025 03:18:45 +0000
Manifest this update:     Mon 08 Dec 2025 03:18:44 +0000
Manifest next update:     Wed 10 Dec 2025 03:18:44 +0000
Files and hashes:         1: UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl (hash: okCLz6yAKfhjSq64Zf0HGfBNg0NHeiKalVWcyizQJa0=)
                          2: E8BD056CBE7611EDA48E6C9AF1222468.roa (hash: 3G5RKkTxRd00ttqtYAIBvcE2h9XaoJ7ML38raK/0k9M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B09DCAF, serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
        Validity
            Not Before: Dec  8 03:18:44 2025 GMT
            Not After : Dec 10 03:18:44 2025 GMT
        Subject: CN=69364395-5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:55:c1:1e:6e:4c:55:b5:1d:f3:44:21:56:
                    ac:4a:5b:fa:8c:bb:e4:90:28:cb:cb:86:08:6f:51:
                    f2:27:ec:95:7f:28:38:ca:f1:17:c0:a5:67:ac:e1:
                    68:4d:a6:33:5a:4d:1a:3a:25:89:fa:c0:a7:18:9e:
                    6b:15:27:71:92:bd:8b:0a:3a:93:e8:d9:44:73:ac:
                    50:91:14:57:b8:c1:71:12:9f:41:47:e8:a5:5d:16:
                    20:ec:12:9a:c9:75:dd:e3:84:f3:29:f1:2c:8f:73:
                    be:fc:de:6e:6c:48:5b:d7:34:8d:05:96:ee:77:28:
                    0a:64:56:9c:59:79:90:05:80:2d:e1:32:15:65:95:
                    8b:ed:c1:ef:25:f0:0f:f3:c8:ac:c0:82:72:ab:22:
                    8c:bc:54:a3:1a:a8:ed:38:ba:9f:7f:53:6a:ac:1c:
                    7e:20:88:67:4d:72:34:1a:50:e1:ce:59:20:bd:47:
                    71:f5:cc:50:26:5e:5a:12:31:a9:ea:35:d2:f2:f8:
                    e6:46:a1:db:b1:ba:a7:2a:55:7d:3e:8b:51:8d:e5:
                    3c:a7:02:75:90:b7:41:72:cb:3e:c8:19:75:e3:ea:
                    50:45:84:0e:70:11:2d:2e:0f:ff:87:3f:97:5a:5b:
                    95:8a:18:9d:21:7a:80:47:02:21:15:f8:71:92:22:
                    fb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:75:EB:17:BE:E8:41:5F:33:E1:83:5A:FD:12:45:3F:8D:59:17:63
            X509v3 Authority Key Identifier:
                keyid:53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9e:19:ab:db:a3:86:7e:a9:1e:fd:b9:4e:eb:59:ea:88:19:
         e2:4e:74:a6:47:9a:a0:77:22:fc:3f:cc:cd:c4:d1:b6:ba:8b:
         1a:db:a5:49:c9:ec:10:28:e3:84:2c:72:4b:ba:66:c4:c3:0a:
         27:0c:32:41:9d:83:25:b5:1c:03:3d:e6:b3:b6:8b:be:db:df:
         75:32:c1:1c:3d:36:6b:cf:7b:66:14:03:81:43:9e:ac:7a:28:
         86:7c:73:3f:16:46:af:a0:8d:dd:8d:8d:07:02:13:45:d7:d3:
         1b:c5:1e:ba:eb:b2:fc:30:6e:bb:66:bc:bd:76:36:32:03:de:
         2e:19:87:51:07:03:4f:a9:28:b6:90:07:9d:12:a3:65:81:c0:
         ff:40:e9:22:9f:68:e7:ed:e8:69:87:a2:70:c9:89:3a:36:ee:
         26:f3:d2:9f:e9:ce:ed:7f:2e:62:e3:f1:aa:8c:c7:b8:91:3c:
         87:09:f4:a7:cf:9c:7d:c2:1c:20:61:cd:e0:21:13:30:61:01:
         f0:78:10:6a:87:77:58:31:1f:0d:42:9d:d7:ba:32:81:f4:bc:
         f0:af:de:2c:92:32:a7:43:f7:cb:bf:83:29:97:05:62:cb:3f:
         77:29:45:c9:40:ed:95:f0:dc:1b:41:fc:8a:57:64:3d:6c:c3:
         17:eb:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:45 2025 by rpki-client