This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
File:                     DfSP5wXc0B45e4-chO8Xkcls-9g.mft (raw, json)
Hash identifier:          tZdcO/ZXJI3KyRUhmdIGmJd8DF59JSpVbCWDMJKP6Wg=
Subject key identifier:   DC:7B:7B:39:E8:EA:D0:24:11:5E:24:EE:34:57:07:79:B6:AC:E8:1B
Authority key identifier: 0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Certificate issuer:       /CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Certificate serial:       0732
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
Manifest number:          072F
Signing time:             Mon 08 Dec 2025 01:59:09 +0000
Manifest this update:     Mon 08 Dec 2025 01:59:09 +0000
Manifest next update:     Wed 10 Dec 2025 01:59:09 +0000
Files and hashes:         1: DfSP5wXc0B45e4-chO8Xkcls-9g.crl (hash: WI1SOZjKsq220lJB6TAtIAa9xcTKtCETRjBUhvhqjsg=)
                          2: 23040FFA339B11EFAA1E5754762E951A.roa (hash: X4ZAQ6gAg0uApdYdcGPSN7HGXQ1rd2UvdvLUe5VreL8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4AD7AF, serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
        Validity
            Not Before: Dec  8 01:59:09 2025 GMT
            Not After : Dec 10 01:59:09 2025 GMT
        Subject: CN=693630ed-d20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:9b:43:51:32:cf:ba:a0:6b:33:66:69:ce:
                    22:4e:17:5a:17:b2:08:85:5b:cc:ad:38:fa:d1:ff:
                    38:8e:1b:f0:0b:2d:bd:40:11:e8:20:9a:c6:c7:04:
                    4c:21:e8:98:60:01:1c:63:f9:39:d0:04:b4:db:ee:
                    2a:20:c3:1a:f6:ad:14:d2:ee:43:2b:fe:9e:b9:aa:
                    46:69:31:2b:bb:64:64:5a:04:f3:eb:a2:f0:ed:48:
                    e8:8f:80:5a:fe:98:8d:76:88:5a:bf:fe:99:df:2e:
                    80:7d:68:56:e5:29:6c:89:d1:04:fa:d6:c0:1c:6e:
                    7e:6b:d0:31:f1:77:f1:d9:3f:be:07:db:f0:53:7c:
                    89:b6:1e:37:55:eb:99:cf:8b:a6:2a:5a:af:04:9c:
                    0a:c0:ee:5c:ba:2a:72:4d:be:1c:64:cb:a6:89:e2:
                    ba:61:48:a7:29:67:fc:56:62:4b:90:10:80:bb:75:
                    d2:ec:a2:af:2b:cd:70:cb:53:51:60:8e:40:59:35:
                    78:24:40:0d:4c:28:6b:3c:67:85:85:4d:a9:e4:67:
                    98:21:86:ba:0c:d0:59:f7:de:fe:2c:ae:76:72:59:
                    08:63:6d:2c:57:a3:6d:f6:ea:7f:5e:b6:65:18:61:
                    14:4c:76:12:ad:da:59:42:95:b1:1c:56:7e:bb:3d:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7B:7B:39:E8:EA:D0:24:11:5E:24:EE:34:57:07:79:B6:AC:E8:1B
            X509v3 Authority Key Identifier:
                keyid:0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e9:ef:85:63:44:59:71:ea:d6:86:74:70:ef:ce:63:c1:f4:
         b9:1c:01:43:79:ad:cd:54:f6:fe:b4:76:a5:27:54:5e:53:34:
         72:df:08:95:fb:c0:22:f2:22:3f:89:c0:73:a6:20:6b:d0:ba:
         03:02:29:16:d2:31:68:fe:c1:97:a8:3c:89:75:67:6b:54:bf:
         98:74:a0:ed:a9:e3:44:9b:94:0c:0a:3a:50:bc:da:ca:e6:f2:
         86:ac:73:f2:e6:b0:2e:bd:d9:d2:0f:14:b8:b6:11:93:e1:a7:
         f2:5f:4f:9a:98:46:81:95:ed:1a:02:49:db:0c:b3:16:42:25:
         85:c2:07:c0:dc:8a:94:a8:7a:ef:e8:2c:69:83:83:05:9e:5f:
         25:43:43:73:6c:7f:45:22:20:b6:37:2f:f2:c9:79:99:a2:ee:
         61:4e:5e:34:d1:2b:36:f5:57:cf:2e:ad:03:f0:0a:43:c5:71:
         71:93:b6:da:ff:2c:0c:24:dd:cc:0c:52:9c:b4:7d:dc:15:8d:
         e7:3e:cf:ee:51:c7:95:c4:8b:91:0e:66:16:d5:f2:d7:39:11:
         45:d2:d9:d9:c3:70:bb:7b:c3:da:ba:2c:ef:66:2a:bb:2a:e2:
         8b:d5:3f:8f:8c:d2:39:fa:13:8a:fd:aa:a8:39:04:2c:b9:1a:
         43:61:28:f1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzRBRDdBRjExMC8GA1UEBRMoMERGNDhGRTcwNURDRDAxRTM5N0I4RjlDODRFRjE3
OTFDOTZDRkJEODAeFw0yNTEyMDgwMTU5MDlaFw0yNTEyMTAwMTU5MDlaMBgxFjAU
BgNVBAMTDTY5MzYzMGVkLWQyMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG2ZtDUTLPuqBrM2ZpziJOF1oXsgiFW8ytOPrR/ziOG/ALLb1AEeggmsbH
BEwh6JhgARxj+TnQBLTb7iogwxr2rRTS7kMr/p65qkZpMSu7ZGRaBPProvDtSOiP
gFr+mI12iFq//pnfLoB9aFblKWyJ0QT61sAcbn5r0DHxd/HZP74H2/BTfIm2HjdV
65nPi6YqWq8EnArA7ly6KnJNvhxky6aJ4rphSKcpZ/xWYkuQEIC7ddLsoq8rzXDL
U1FgjkBZNXgkQA1MKGs8Z4WFTankZ5ghhroM0Fn33v4srnZyWQhjbSxXo2326n9e
tmUYYRRMdhKt2llClbEcVn67Pc/1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3Ht7
Oejq0CQRXiTuNFcHebas6BswHwYDVR0jBBgwFoAUDfSP5wXc0B45e4+chO8Xkcls
+9gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM0QUQ3LzYzRjdFOUJDNTY2MDExRUJBQjc4QzcwOUY4QUVBMjI4L0RmU1A1
d1hjMEI0NWU0LWNoTzhYa2Nscy05Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RmU1A1d1hjMEI0NWU0LWNoTzhYa2Nscy05Zy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzRBRDcvNjNGN0U5QkM1NjYwMTFFQkFCNzhDNzA5RjhB
RUEyMjgvRGZTUDV3WGMwQjQ1ZTQtY2hPOFhrY2xzLTlnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAw6e+FY0RZcerWhnRw785jwfS5HAFD
ea3NVPb+tHalJ1ReUzRy3wiV+8Ai8iI/icBzpiBr0LoDAikW0jFo/sGXqDyJdWdr
VL+YdKDtqeNEm5QMCjpQvNrK5vKGrHPy5rAuvdnSDxS4thGT4afyX0+amEaBle0a
AknbDLMWQiWFwgfA3IqUqHrv6Cxpg4MFnl8lQ0NzbH9FIiC2Ny/yyXmZou5hTl40
0Ss29VfPLq0D8ApDxXFxk7ba/ywMJN3MDFKctH3cFY3nPs/uUceVxIuRDmYW1fLX
ORFF0tnZw3C7e8PauizvZiq7KuKL1T+PjNI5+hOK/aqoOQQsuRpDYSjx
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:48 2025 by rpki-client