This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File:                     YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier:          bBLjtaeNfekAcf0SUbAYbJ/FE72Dhhc3I0/KhZ24Aas=
Subject key identifier:   F0:8A:7B:B0:F1:F9:9A:A9:F5:4D:AE:4A:95:35:97:A3:30:B0:F0:90
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer:       /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial:       055E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number:          0558
Signing time:             Sat 06 Dec 2025 02:43:58 +0000
Manifest this update:     Sat 06 Dec 2025 02:43:57 +0000
Manifest next update:     Mon 08 Dec 2025 02:43:57 +0000
Files and hashes:         1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: Q/oZ3854KmO/1rhpObNGiXqv0IfPedBBxTPA7lxDrEw=)
                          2: 78BBD498055511EEA313DE484AD9E6FC.roa (hash: gcOnw1oPuRTUxnfEp8Cnw2+KJImBfDvkykgZT1R/8jY=)
                          3: EC9655DEBAA211EEAEF6CA61775412E6.roa (hash: yvnXk52RrKBf5bxHjNgZoK+IZnQ2KvhA6TE4cpIiWLU=)
                          4: 1456D4A2586C11EEB137AB2E4AD9E6FC.roa (hash: 0m1O0dIgqFqkbHZ4x0YYbYO8gehKt7WacNKL0mWlsYk=)
                          5: D6EE1EFE055511EEA37AC8494AD9E6FC.roa (hash: oUt21oQyRcYFeyIoTpveRUVSzhhNTG7bwuYrK/bZUtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                          rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Validity
            Not Before: Dec  6 02:43:57 2025 GMT
            Not After : Dec  8 02:43:57 2025 GMT
        Subject: CN=6933986e-e30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:89:db:38:b2:ae:ed:13:f0:58:b5:9a:10:af:
                    1d:f6:e2:9f:83:61:92:41:51:fa:04:d0:39:53:bf:
                    57:f5:07:11:3d:8a:51:16:5d:88:f8:41:14:b6:3f:
                    61:c8:82:bb:9a:fc:44:58:f6:c8:ee:0c:a4:35:e6:
                    2f:57:ab:a4:ee:71:16:0f:8c:09:94:af:ef:48:c6:
                    5b:91:0b:d4:3e:07:10:a0:52:12:b4:6d:91:11:e4:
                    1a:86:43:d1:75:d7:16:1e:33:e0:0c:e1:57:73:ad:
                    ed:43:ff:de:52:d5:c0:7d:40:8a:18:97:c9:89:15:
                    1e:6f:bf:21:22:39:a0:b5:5e:75:f0:bd:1f:fa:8c:
                    05:ad:de:5d:7f:b5:d2:1f:d3:0a:6e:fb:99:48:83:
                    7e:f2:3d:a7:13:f5:ea:fd:94:4a:72:b8:f0:19:e3:
                    f9:0f:a5:dd:da:8c:35:d3:54:67:42:87:2b:c8:c0:
                    32:0f:ae:23:91:0d:b5:c8:c1:dd:6a:5f:0d:e1:6e:
                    2a:22:92:c8:45:d6:e7:36:40:85:2a:f1:1c:2e:eb:
                    60:1f:9b:73:7f:8d:96:e6:ae:0a:74:b9:66:13:18:
                    a3:4f:1c:d6:29:0d:2a:77:92:6b:53:37:9c:85:cb:
                    91:fb:3a:92:a6:0e:d5:d3:f1:2e:f2:f1:45:a3:ee:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8A:7B:B0:F1:F9:9A:A9:F5:4D:AE:4A:95:35:97:A3:30:B0:F0:90
            X509v3 Authority Key Identifier:
                keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:aa:d3:8c:16:51:1a:ab:b1:ed:34:e1:87:fa:5a:24:77:
         18:87:07:14:1c:a7:e3:0b:6f:24:84:d7:73:8d:20:c0:59:0e:
         db:19:0c:52:bf:1e:d0:f8:b2:e9:03:42:81:18:39:27:61:52:
         52:74:46:08:0e:75:97:70:3b:7f:4e:fa:be:30:8c:29:c5:aa:
         e6:a1:c5:42:c2:d0:40:67:5b:bb:55:25:82:80:ee:19:f8:e1:
         89:40:1d:db:71:c3:ee:95:f2:34:f5:77:51:b3:c0:ba:4f:3b:
         e0:ae:68:64:9c:18:bc:80:26:1f:e3:ac:03:35:7e:36:93:59:
         5c:18:f5:7b:db:1e:22:8f:7b:12:e5:a8:5e:39:90:c3:32:2e:
         5f:e1:d5:ef:6b:2a:37:be:62:6d:86:ca:c1:99:11:b9:12:58:
         5b:88:6e:10:a9:cf:eb:1d:16:99:d4:7c:32:1e:4f:d2:ed:8b:
         63:7d:48:c1:9e:12:36:01:b5:18:26:75:6d:9f:24:49:bd:24:
         3d:57:9a:dd:89:ab:99:e5:00:e5:76:e7:72:5a:32:db:22:9b:
         63:08:b5:39:4b:39:25:49:47:51:7d:a3:b4:96:76:f7:73:0b:
         f3:b7:d1:cc:69:fa:7c:65:6a:8c:30:27:20:03:89:17:7b:ac:
         cf:b6:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:03:03 2025 by rpki-client