This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File:                     lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier:          MgGMntigR/U3F3otK5ArVQERcnTmX1tmlUBhLhguOYI=
Subject key identifier:   DF:43:88:90:67:6E:52:0E:D9:82:8C:34:1E:99:E5:E3:8B:42:62:46
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer:       /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial:       06A9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number:          06A8
Signing time:             Sat 06 Dec 2025 02:10:11 +0000
Manifest this update:     Sat 06 Dec 2025 02:10:10 +0000
Manifest next update:     Mon 08 Dec 2025 02:10:10 +0000
Files and hashes:         1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: yhb9BY8QDrOEf7BlGK9a7nS1jrtv4cHGwbklB6BDX9Q=)
                          2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                          rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 02:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
        Validity
            Not Before: Dec  6 02:10:10 2025 GMT
            Not After : Dec  8 02:10:10 2025 GMT
        Subject: CN=69339083-d90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:54:97:2f:41:b9:82:4e:8d:f6:02:41:eb:
                    a4:d6:43:c1:d4:63:2a:43:3e:e2:23:da:84:ce:26:
                    5e:cb:11:b5:fe:ab:c8:e8:4e:6b:89:73:4f:57:de:
                    02:e9:93:2d:6c:a5:cc:25:25:49:f6:d0:8e:e1:6a:
                    4c:fa:22:b4:98:4d:98:d7:c9:df:53:d3:85:e2:32:
                    28:23:de:3e:22:cf:cb:72:4d:45:ba:d6:aa:94:e8:
                    f2:d3:1c:2e:19:0c:fa:73:20:06:47:92:58:af:b3:
                    71:f1:fa:bd:09:74:f1:c5:93:1c:c1:f5:70:37:4e:
                    bd:a8:f3:d7:00:4b:28:71:ee:aa:d3:31:e5:e6:f1:
                    43:a3:d6:bd:8b:e6:77:a3:9b:2e:5c:d7:f9:a4:c4:
                    d4:93:5b:22:28:d1:01:4d:9a:e3:49:02:66:fe:77:
                    17:1c:71:b0:65:11:f2:7c:47:fc:53:f5:26:b6:3c:
                    38:e5:5b:44:15:80:05:f7:27:b6:62:4c:33:aa:d7:
                    c4:62:2f:48:7d:1b:14:7b:a2:8f:e9:cd:d1:fa:d0:
                    97:fa:6a:89:8a:db:f3:a8:e5:e6:92:92:59:01:a5:
                    0d:5d:af:cb:34:d7:9c:74:a8:4a:b5:ab:49:dd:2b:
                    7c:3e:a8:e3:d8:68:52:d6:97:50:47:39:ae:eb:89:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:88:90:67:6E:52:0E:D9:82:8C:34:1E:99:E5:E3:8B:42:62:46
            X509v3 Authority Key Identifier:
                keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:f5:32:fb:28:62:4b:51:ab:4c:d2:4f:00:37:81:7a:82:
         a5:83:54:e1:38:96:13:f2:0f:1f:9a:9a:bd:56:2e:22:c8:63:
         d3:ee:40:67:11:c0:92:a7:f4:3f:e4:79:31:1f:f2:ad:1d:d3:
         5c:17:ff:7f:7e:a3:ae:3f:84:0e:ea:f9:2f:da:91:46:fd:57:
         ee:7f:63:3b:e8:58:80:5c:2e:76:ae:b1:6d:b9:73:4b:f5:e9:
         69:af:63:5d:55:12:e2:5c:ad:62:5e:ce:a3:a7:94:e9:f5:b7:
         d4:41:e9:78:f2:45:3c:15:50:5d:cc:7a:e7:4a:d6:0f:40:57:
         4f:54:a9:a9:dd:7f:92:65:4c:c6:64:85:42:fe:1a:0b:44:d3:
         4c:8f:f4:12:91:94:29:5e:9b:b6:59:7f:b5:39:f4:5f:c0:5e:
         11:fc:c8:50:d3:0e:52:d4:2a:7d:a4:76:9c:fd:c3:06:a3:ff:
         10:3f:76:00:e0:ea:15:67:68:be:34:1d:fd:0f:e8:f0:f9:7f:
         3f:b1:04:c8:4d:82:8d:fc:72:1f:fb:5e:2b:a8:c3:01:b9:5b:
         96:73:56:63:ee:f3:b8:59:f4:8e:bb:02:c7:4b:e0:42:5c:06:
         7c:36:47:1c:11:ed:b2:23:37:60:80:15:af:a8:07:4d:20:b1:
         90:72:09:7c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUJERDdSSTExMC8GA1UEBRMoOTcyQ0ZEQUVFQjEyNkY2RkNENDY5NkE1OTBGNzAx
ODgzN0FBNUZGMjAeFw0yNTEyMDYwMjEwMTBaFw0yNTEyMDgwMjEwMTBaMBgxFjAU
BgNVBAMTDTY5MzM5MDgzLWQ5MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8CVSXL0G5gk6N9gJB66TWQ8HUYypDPuIj2oTOJl7LEbX+q8joTmuJc09X
3gLpky1spcwlJUn20I7hakz6IrSYTZjXyd9T04XiMigj3j4iz8tyTUW61qqU6PLT
HC4ZDPpzIAZHklivs3Hx+r0JdPHFkxzB9XA3Tr2o89cASyhx7qrTMeXm8UOj1r2L
5nejmy5c1/mkxNSTWyIo0QFNmuNJAmb+dxcccbBlEfJ8R/xT9Sa2PDjlW0QVgAX3
J7ZiTDOq18RiL0h9GxR7oo/pzdH60Jf6aomK2/Oo5eaSklkBpQ1dr8s015x0qEq1
q0ndK3w+qOPYaFLWl1BHOa7rif8HAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU30OI
kGduUg7Zgow0Hpnl44tCYkYwHwYDVR0jBBgwFoAUlyz9rusSb2/NRpalkPcBiDeq
X/IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCREQ3LzY3RjAwNEM2QkUxRDExRUI4NTc2Qjk0MkY4QUVBMjI4L2x5ejly
dXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2x5ejlydXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUJERDcvNjdGMDA0QzZCRTFEMTFFQjg1NzZCOTQyRjhBRUEy
MjgvbHl6OXJ1c1NiMl9OUnBhbGtQY0JpRGVxWF9JLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAj7fUy+yhiS1GrTNJPADeBeoKlg1ThOJYT
8g8fmpq9Vi4iyGPT7kBnEcCSp/Q/5HkxH/KtHdNcF/9/fqOuP4QO6vkv2pFG/Vfu
f2M76FiAXC52rrFtuXNL9elpr2NdVRLiXK1iXs6jp5Tp9bfUQel48kU8FVBdzHrn
StYPQFdPVKmp3X+SZUzGZIVC/hoLRNNMj/QSkZQpXpu2WX+1OfRfwF4R/MhQ0w5S
1Cp9pHac/cMGo/8QP3YA4OoVZ2i+NB39D+jw+X8/sQTITYKN/HIf+14rqMMBuVuW
c1Zj7vO4WfSOuwLHS+BCXAZ8NkccEe2yIzdggBWvqAdNILGQcgl8
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:39:55 2025 by rpki-client