This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          RbSjUh6j1UbllpUJTd7HFLRXDX1jHA8wtp2o1v4iZPk=
Subject key identifier:   F1:73:05:42:CA:87:1D:74:2F:5E:D0:79:98:57:09:F9:67:C4:92:7E
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       01F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          01EF
Signing time:             Mon 08 Dec 2025 04:26:34 +0000
Manifest this update:     Mon 08 Dec 2025 04:26:33 +0000
Manifest next update:     Wed 10 Dec 2025 04:26:33 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: 8ZQprYWfAi1albhSVolbN4NO3YDkou5lG2MyMDVjPtw=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Dec  8 04:26:33 2025 GMT
            Not After : Dec 10 04:26:33 2025 GMT
        Subject: CN=69365379-e64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:7c:ac:a4:1a:db:34:32:62:29:7a:bb:31:
                    ea:37:96:d3:b5:81:af:de:45:c5:03:26:84:e7:5d:
                    34:d6:c8:55:c0:d5:44:6d:9d:26:02:29:fe:c6:27:
                    b3:43:2c:bf:29:0d:46:0f:7a:2d:3e:bd:bc:bf:1e:
                    ea:6c:81:70:9b:5a:2e:63:fa:8f:38:5e:9e:a1:7e:
                    cd:31:d7:b7:af:45:a4:30:15:31:0a:60:74:5c:2e:
                    e6:d8:af:d4:70:41:4e:1f:cf:3d:9d:6d:1c:29:85:
                    bf:bb:f9:bf:b7:d2:39:5c:ad:66:67:79:d7:03:7d:
                    01:df:3e:1c:66:cd:ab:f1:2d:b5:74:7a:ae:da:72:
                    ab:b1:55:20:41:17:13:d8:90:cb:6d:ed:ea:17:a2:
                    ea:68:76:62:0c:5d:dc:56:79:c1:92:7c:49:ba:5f:
                    e4:bb:e4:ba:14:23:47:e3:59:9a:00:94:0d:a3:a9:
                    be:dc:78:52:7e:65:36:7e:08:57:f3:68:bb:5f:7b:
                    32:d7:a6:c0:26:5b:b9:85:cf:dd:26:68:80:c5:f9:
                    30:06:b6:92:ec:03:c5:e7:b3:b2:f5:f9:ac:ae:1a:
                    c9:2f:c6:01:37:93:3c:98:e9:2d:b0:04:42:f7:f2:
                    64:4e:13:ef:e8:58:81:dd:86:37:72:04:c9:53:56:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:05:42:CA:87:1D:74:2F:5E:D0:79:98:57:09:F9:67:C4:92:7E
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2b:de:27:6d:9e:3c:92:f7:4c:d9:ed:ee:ab:95:ca:fb:bb:
         8e:b5:16:26:ce:64:c1:3c:7a:a6:8c:5c:cb:ea:65:ca:58:69:
         07:36:26:75:c7:73:02:a0:8a:52:6a:ff:88:89:59:69:f5:2c:
         f4:c5:2d:d5:ef:e8:d1:a6:1c:48:cd:e0:b7:42:ae:41:0f:08:
         2e:e7:74:24:e7:e5:81:79:ba:eb:5c:1e:fe:9d:61:6f:b2:e5:
         3a:17:85:ad:19:05:a1:40:a2:50:f3:58:73:22:4f:c5:9e:19:
         75:12:42:ac:55:f5:95:22:4e:61:f1:65:da:f9:4c:c6:2f:ed:
         55:ab:e5:88:1d:a0:49:fa:47:3a:46:e9:86:2c:12:5c:c2:86:
         c2:de:26:40:a9:ac:77:34:92:b9:fd:e1:2d:9f:32:c4:c2:8e:
         4f:2c:a5:fe:49:9f:d4:9f:18:5d:83:3a:da:d6:b5:45:ba:fe:
         b0:47:05:ff:96:c4:35:7e:52:25:54:f7:c7:e3:2d:85:3e:6e:
         10:be:d8:63:53:1f:ec:bd:61:97:86:1e:e4:c3:ee:f9:26:cd:
         47:39:ca:16:b7:41:ae:f6:e6:87:28:fd:08:7e:40:8b:88:d4:
         4b:d4:72:4f:80:9f:5d:b6:82:42:af:14:b9:60:70:56:60:75:
         68:43:fd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:17:35 2025 by rpki-client