This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          M4zRIl870xgu1JBstHCsBg+1GWBeT5GLfYxw+vQcWNw=
Subject key identifier:   2E:AB:22:59:6B:5E:D3:AF:08:C1:9B:AE:DF:84:A9:B6:1B:AD:F2:0B
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       0966
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          0964
Signing time:             Sun 07 Dec 2025 01:31:35 +0000
Manifest this update:     Sun 07 Dec 2025 01:31:34 +0000
Manifest next update:     Tue 09 Dec 2025 01:31:34 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: UU6JyawXLA3ncEk8mnm/JeKgRw/ZUo0tbal3UMAvONU=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI, serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Validity
            Not Before: Dec  7 01:31:34 2025 GMT
            Not After : Dec  9 01:31:34 2025 GMT
        Subject: CN=6934d8f7-1b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:6d:ab:a2:f4:b8:ad:de:db:b2:0b:b0:c8:
                    2c:c5:c5:ef:da:d1:4c:4e:2a:50:9c:80:7d:b6:b5:
                    0d:89:af:7f:c3:6e:fb:ed:d0:02:c6:b0:76:73:91:
                    8c:fb:d1:5e:07:0e:b8:8b:c6:6b:dc:a1:d2:93:8d:
                    18:e9:69:da:85:78:f0:ac:51:be:54:ae:8e:a4:5a:
                    08:a0:6c:2b:00:0b:c7:25:37:df:a1:83:76:ad:8d:
                    87:ea:13:0d:b7:4e:fc:81:f1:f1:18:2b:d2:bc:11:
                    d7:30:72:70:93:2d:13:80:3d:ac:63:ce:28:96:e0:
                    4e:af:d8:a3:09:f1:19:94:ce:a4:d2:44:54:73:23:
                    73:29:67:37:26:ca:1d:5c:5c:1a:50:fa:db:cf:30:
                    3f:be:ea:c1:54:73:5b:70:d2:d4:30:4d:b6:a9:7e:
                    77:a8:68:6d:8a:f8:94:c3:de:1e:8b:81:51:d3:5b:
                    6b:89:9b:9e:35:0d:d9:84:f1:68:2c:fc:0b:0f:e0:
                    05:4a:5b:26:04:69:ff:47:bc:58:15:a8:08:b6:2e:
                    92:93:de:e8:5b:bf:90:a8:51:f9:87:5f:7d:54:7b:
                    be:2f:db:6c:05:1f:94:77:64:6e:c1:5b:3a:63:b7:
                    65:f5:1e:64:c4:84:e8:42:e8:f7:e9:13:1b:4b:a8:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:22:59:6B:5E:D3:AF:08:C1:9B:AE:DF:84:A9:B6:1B:AD:F2:0B
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:16:fc:95:b1:8d:97:d4:e9:50:04:97:9c:2b:96:ad:3d:4a:
         4d:3c:29:a4:68:b6:bd:08:3f:b6:a2:67:98:89:d5:87:7f:07:
         d7:61:ae:54:f8:7a:85:4e:c0:84:3c:87:91:c8:c4:d9:9e:a3:
         10:ca:f9:82:87:be:8f:24:39:7e:06:61:44:a8:18:67:e6:d8:
         e2:de:54:dd:60:8c:a4:c3:0a:e2:88:b2:47:be:d1:6a:ed:bf:
         68:c7:ac:e3:b6:80:b3:29:4b:44:54:e7:a6:aa:62:2c:cc:3b:
         8c:17:0a:67:e1:60:3c:35:e8:d0:2f:ae:1a:a9:98:b5:86:fa:
         ca:6d:e5:aa:7a:83:10:89:d4:5f:2a:e7:0d:a2:a6:3b:21:78:
         78:6c:ad:4d:3c:41:d4:6b:45:65:4e:87:a0:bf:ea:a5:8e:29:
         87:ec:34:a1:85:8f:4c:f8:47:56:6e:7c:38:32:42:d5:fa:18:
         cd:32:56:48:fa:ad:43:26:81:3d:5b:3d:57:a0:cd:02:ef:91:
         4f:12:b5:16:50:c9:8c:5c:2a:8d:47:61:49:cd:98:62:92:f9:
         bf:6b:e4:38:76:10:c2:db:7d:b5:11:da:1a:a7:45:17:28:04:
         e0:eb:ab:3e:12:80:29:38:3c:ab:43:a6:d5:54:fb:86:3e:60:
         45:23:a1:a7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDI4OUNSSTExMC8GA1UEBRMoNkYyOUM5QkNDMDI0OTUyMEU1MDcwNjY5RkFGNjY2
NTI2RjdDOEYzMDAeFw0yNTEyMDcwMTMxMzRaFw0yNTEyMDkwMTMxMzRaMBgxFjAU
BgNVBAMTDTY5MzRkOGY3LTFiM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCljW2rovS4rd7bsguwyCzFxe/a0UxOKlCcgH22tQ2Jr3/Dbvvt0ALGsHZz
kYz70V4HDriLxmvcodKTjRjpadqFePCsUb5Uro6kWgigbCsAC8clN9+hg3atjYfq
Ew23TvyB8fEYK9K8EdcwcnCTLROAPaxjziiW4E6v2KMJ8RmUzqTSRFRzI3MpZzcm
yh1cXBpQ+tvPMD++6sFUc1tw0tQwTbapfneoaG2K+JTD3h6LgVHTW2uJm541DdmE
8Wgs/AsP4AVKWyYEaf9HvFgVqAi2LpKT3uhbv5CoUfmHX31Ue74v22wFH5R3ZG7B
Wzpjt2X1HmTEhOhC6PfpExtLqPM9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQULqsi
WWte068IwZuu34Spthut8gswHwYDVR0jBBgwFoAUbynJvMAklSDlBwZp+vZmUm98
jzAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyODlDLzEyRkFCOTYyQTg3NTExRTk5Mjg1Qzc0NUY4QUVBMjI4L2J5bkp2
TUFrbFNEbEJ3WnAtdlptVW05OGp6QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2J5bkp2TUFrbFNEbEJ3WnAtdlptVW05OGp6QS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDI4OUMvMTJGQUI5NjJBODc1MTFFOTkyODVDNzQ1RjhBRUEy
MjgvYnluSnZNQWtsU0RsQndacC12Wm1VbTk4anpBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCFvyVsY2X1OlQBJecK5atPUpNPCmkaLa9
CD+2omeYidWHfwfXYa5U+HqFTsCEPIeRyMTZnqMQyvmCh76PJDl+BmFEqBhn5tji
3lTdYIykwwriiLJHvtFq7b9ox6zjtoCzKUtEVOemqmIszDuMFwpn4WA8NejQL64a
qZi1hvrKbeWqeoMQidRfKucNoqY7IXh4bK1NPEHUa0VlToegv+qljimH7DShhY9M
+EdWbnw4MkLV+hjNMlZI+q1DJoE9Wz1XoM0C75FPErUWUMmMXCqNR2FJzZhikvm/
a+Q4dhDC2321Edoap0UXKATg66s+EoApODyrQ6bVVPuGPmBFI6Gn
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:33 2025 by rpki-client