This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
File:                     oHAxgIgisopRzqJ21BM9cIqlFO0.mft (raw, json)
Hash identifier:          5DmBQjoEMvxsv/bD+NWDwFhmJ20GyB9aVde31EJj43s=
Subject key identifier:   C7:7D:DA:A7:A1:59:FB:D1:80:C5:E0:59:C8:E1:BF:75:3C:C2:09:3D
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Certificate issuer:       /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial:       04
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
Manifest number:          03
Signing time:             Mon 22 Dec 2025 05:27:17 +0000
Manifest this update:     Mon 22 Dec 2025 05:27:16 +0000
Manifest next update:     Wed 24 Dec 2025 05:27:16 +0000
Files and hashes:         1: oHAxgIgisopRzqJ21BM9cIqlFO0.crl (hash: d470SISHce43fZ2ZgnBnmQbr/AHjDnBsV7hlqcq3yXk=)
                          2: 6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (hash: xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                          rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
        Validity
            Not Before: Dec 22 05:27:16 2025 GMT
            Not After : Dec 24 05:27:16 2025 GMT
        Subject: CN=6948d6b5-aa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:39:57:dd:ca:ad:41:d9:7d:a9:14:a4:0b:
                    e2:cb:11:29:3a:8d:3c:0d:a4:31:06:37:1c:f0:91:
                    e0:5e:b0:27:3e:3d:fa:41:9a:0f:ae:5b:59:2e:cf:
                    3b:6d:0b:dc:3c:af:bd:22:3e:56:8c:e3:7c:2c:a7:
                    95:86:41:58:d5:02:59:73:7e:93:21:54:64:c8:8c:
                    d2:af:b6:a2:63:49:00:ef:cd:62:e8:24:04:e2:cc:
                    2d:69:2e:d3:ab:44:a1:96:28:e3:06:44:1f:c3:68:
                    88:91:c9:7a:20:29:aa:0c:4f:6f:84:2e:bd:8e:af:
                    a9:4f:ba:0d:4b:9f:39:26:7b:15:4c:9e:6c:87:00:
                    43:8a:af:7d:72:f0:30:5c:cb:d9:40:b6:c8:12:5d:
                    64:11:69:d8:1e:ea:42:a2:bf:3f:fb:11:38:a7:d8:
                    06:3f:d7:56:84:a6:26:0c:e9:c3:18:3b:2a:99:1c:
                    bd:40:68:6f:1e:69:42:3d:37:5d:3d:ff:fb:e5:9d:
                    2f:ac:07:0f:df:88:0a:f5:c2:d8:19:e8:ce:82:83:
                    b5:01:42:cf:06:f2:17:10:7f:39:21:96:dc:31:b9:
                    75:26:77:36:80:3e:77:bd:ac:c3:51:1b:18:b9:b7:
                    b8:bb:57:d4:4c:72:f1:dc:ea:35:86:1a:98:95:88:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:DA:A7:A1:59:FB:D1:80:C5:E0:59:C8:E1:BF:75:3C:C2:09:3D
            X509v3 Authority Key Identifier:
                keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:47:73:ce:9b:07:04:df:5f:00:94:7e:6a:0f:33:6b:de:
         c7:5d:5f:36:03:07:16:a3:97:0c:c7:ba:90:c1:b1:7b:14:7c:
         fd:55:f3:1a:01:b0:8e:13:4d:e5:a7:5d:c9:0f:79:ea:de:20:
         b0:b5:28:c6:c2:5a:d9:76:bd:de:f8:22:89:89:1b:fa:e9:20:
         27:db:29:1b:8a:c7:58:d9:5d:65:8e:c6:b2:48:14:9b:ed:c5:
         58:a0:7a:d4:26:99:3f:40:ca:2b:c8:96:37:c7:dc:ca:e5:c2:
         c6:be:14:56:45:48:f5:26:44:d5:18:1d:cc:b8:03:39:67:42:
         15:0a:f9:0b:a9:7d:5b:30:7b:aa:53:2f:c2:64:b1:d2:ee:22:
         9e:05:14:f5:7e:0b:68:b6:cc:a2:e6:64:13:73:ee:f5:25:31:
         7c:da:f8:50:dc:54:48:ff:7e:92:cf:05:b9:72:8b:b0:07:0d:
         8f:19:a5:00:9c:52:c9:9a:a5:e5:f3:d4:65:2c:73:2e:42:bf:
         52:e4:ef:e8:8c:3a:c9:f2:29:43:9a:33:ba:33:48:67:31:e8:
         95:ea:8a:5d:e4:09:35:fd:41:14:b5:f5:57:0c:69:e3:69:64:
         91:6e:a5:b6:f9:59:cf:a0:ad:75:6f:13:04:07:4b:6c:08:cd:
         e4:a9:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:21:54 2025 by rpki-client