This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
File:                     e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft (raw, json)
Hash identifier:          KRAeTe7m2Cv5bH0+0GD0xT0nh94Kfhp2TEE9oqrOmYk=
Subject key identifier:   FA:5D:0E:D2:74:02:C7:80:5B:CF:B4:27:0F:AD:AC:E7:E5:95:DD:84
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       09E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
Manifest number:          09C2
Signing time:             Thu 18 Dec 2025 01:21:15 +0000
Manifest this update:     Thu 18 Dec 2025 01:21:14 +0000
Manifest next update:     Sat 20 Dec 2025 01:21:14 +0000
Files and hashes:         1: e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl (hash: 7x4hEbCyIvFU+r3nxU6U8wisywy25YQ2HEaadAA5UYU=)
                          2: 83DE5F6A846D11EFA57E969F762E951A.roa (hash: IHDNSoDz6NaLFKQMla3bz7pkaWMQeK4uJ2veJcSe6Bo=)
                          3: 034D2B64846E11EF9FCBBFA3762E951A.roa (hash: MyH4BxPN5oQf/ANUALV0gIzKpengDwYp7tXNj92dOUA=)
                          4: 234C0456853311EFBF75427C762E951A.roa (hash: uuNRG2eR48PpA2s/qJek6gIiTSySHcCAlVVVdllLteQ=)
                          5: 03C4F3DE847211EFA62717BC762E951A.roa (hash: DqzPe8h8VGO/3zmxtNnExqcXOxGel0PuulNOoKoDgfw=)
                          6: 6A1E070A846E11EF95C3ECA5762E951A.roa (hash: qXYZkDeWWR0u4xjdfmy4wQ/7TN06VLsNt66GOFiNZ4M=)
                          7: D93E38CC846D11EFB9E4AEA1762E951A.roa (hash: l368pZGbrsHe3aKYVyLgSeJ6hE8hbIVXQuNLEe/h0d0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529 (0x9e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF, serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Dec 18 01:21:14 2025 GMT
            Not After : Dec 20 01:21:14 2025 GMT
        Subject: CN=6943570b-4c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:43:c0:09:29:59:04:d4:6a:ab:a9:2b:b8:86:
                    25:ca:2f:59:d6:fb:2c:33:ba:65:c9:04:42:b0:2c:
                    c1:53:5b:67:65:cb:85:9d:d8:9a:68:17:70:47:4d:
                    0d:ba:38:e4:e8:09:aa:60:5a:85:d5:50:90:96:8d:
                    a6:4d:8d:4b:c3:36:ba:ec:fb:4b:70:61:c1:89:0e:
                    cb:75:32:96:4e:85:70:fd:f4:ab:0d:b1:8d:da:6c:
                    52:bd:04:b6:d1:93:c2:80:1e:85:1b:84:0e:a0:cf:
                    2e:2f:bb:f5:37:df:76:c1:62:b9:77:52:6b:45:95:
                    c5:6f:c1:78:c1:e7:de:a4:27:75:25:9a:7e:9c:5e:
                    75:18:c3:10:f8:c9:a9:20:5d:ef:17:0c:95:b9:ff:
                    ad:a0:3b:bc:51:41:e7:3c:bc:73:95:83:43:0b:30:
                    8e:b0:22:2b:fd:31:ea:ca:d1:59:12:47:e3:0b:ce:
                    a7:f5:a4:25:7b:61:88:b1:6b:6a:d4:4e:37:1c:e4:
                    8b:c4:47:43:0f:86:b1:c7:3f:36:c3:3f:df:c3:2d:
                    80:cf:f0:52:83:37:cc:79:e3:c0:06:81:53:59:58:
                    c3:c9:3a:bb:17:9b:16:3f:ba:63:5a:32:5b:3d:8f:
                    ef:7b:d0:93:38:95:5f:61:0f:3f:26:c5:8d:53:81:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5D:0E:D2:74:02:C7:80:5B:CF:B4:27:0F:AD:AC:E7:E5:95:DD:84
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:72:fa:ba:d0:c6:20:f6:72:c8:b9:7d:ac:01:f3:ad:4b:a8:
         34:78:3d:69:28:f4:4a:cf:92:7f:a4:96:cb:dd:02:61:f6:8e:
         0b:cc:f7:00:03:26:35:95:8f:bc:29:d2:83:cb:03:1b:8b:80:
         de:11:ca:26:52:86:45:39:03:8a:4a:7b:98:94:ae:f2:e7:34:
         dc:c2:57:04:fb:8b:d9:76:b7:dd:00:2b:6c:bd:a5:3f:3f:3b:
         9a:48:62:0e:02:d1:d3:d7:93:4d:34:b3:f8:88:af:d5:81:ef:
         e1:14:05:a9:77:17:c8:a9:e6:36:5c:7f:23:fc:b2:2c:53:a1:
         2f:ba:a8:bf:a3:e2:d3:3d:0a:9c:d4:8a:da:65:69:5b:bd:0f:
         fb:4b:f9:9a:df:43:39:9f:89:f3:7a:d6:d5:3d:19:0f:20:70:
         32:5b:b2:e4:b0:d1:61:be:05:b0:1e:9a:0f:0d:e3:bd:24:39:
         d6:2d:e0:b8:03:8f:38:14:cc:4d:01:57:4d:74:85:45:18:85:
         19:83:3e:98:d9:1b:9a:49:f1:c9:fa:53:ba:73:e2:3f:ef:fa:
         3f:70:53:ca:c6:c1:11:4c:6e:83:6c:48:61:21:83:2e:be:99:
         41:e2:5f:9b:a0:4f:b0:b3:dd:4d:dc:08:fc:4a:17:df:3b:86:
         ce:b7:9c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 16:17:19 2025 by rpki-client