This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File:                     Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier:          /E6Eh0nCGQPwrAoCtmc5sv9VR/XUQhZJA0hgYu2dkng=
Subject key identifier:   A1:BE:CF:90:8E:31:0F:BC:24:44:B3:CA:57:F4:34:43:03:F7:71:40
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer:       /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial:       04C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number:          04D9
Signing time:             Mon 08 Dec 2025 03:00:18 +0000
Manifest this update:     Mon 08 Dec 2025 03:00:17 +0000
Manifest next update:     Wed 10 Dec 2025 03:00:17 +0000
Files and hashes:         1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: Gh7IaAx6+dV6tde0PQ1MyZOvt8hqxZAnqaUbuitY2uE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
        Validity
            Not Before: Dec  8 03:00:17 2025 GMT
            Not After : Dec 10 03:00:17 2025 GMT
        Subject: CN=69363f42-dab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:31:39:e0:d8:2c:68:1e:5c:2b:8c:f5:e3:
                    01:6a:f0:d1:da:4b:6a:98:ac:e8:a2:80:22:66:ca:
                    8e:f0:b4:21:4f:05:f3:45:02:ee:fa:53:d4:66:8d:
                    25:a9:68:24:b3:cf:b4:f5:54:7d:ce:f4:a3:03:28:
                    5c:b5:d3:d6:52:05:c0:1a:23:be:c2:12:8e:36:c1:
                    f2:dd:11:e0:78:81:b0:03:9b:21:88:11:52:42:0a:
                    29:61:20:46:ee:f9:43:cc:cd:0d:a6:c7:db:f0:b8:
                    4c:7d:ea:24:9c:19:9c:02:e6:ee:4c:e5:c1:90:18:
                    d2:38:40:f2:00:a4:69:63:1c:70:dc:3c:fd:03:a1:
                    85:b9:50:9b:c9:dc:04:e4:47:84:88:af:76:e1:18:
                    e9:d9:da:dc:e9:4a:28:8b:63:fd:7d:47:a0:a6:06:
                    ac:a7:75:5d:8b:4c:3b:bc:3d:c6:c2:62:e7:96:b5:
                    6c:72:3a:4c:54:50:db:66:59:81:b0:ba:0a:79:e0:
                    8a:ce:06:c3:74:da:f2:2f:7b:ac:26:b1:78:ef:b6:
                    b7:ae:4f:14:0f:30:3c:0a:22:4b:95:e6:21:9d:8f:
                    fc:52:f6:ff:c9:3e:f7:2b:d2:15:35:af:93:39:be:
                    fb:01:0e:52:50:b5:6b:f0:93:5e:8a:69:24:f2:85:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:CF:90:8E:31:0F:BC:24:44:B3:CA:57:F4:34:43:03:F7:71:40
            X509v3 Authority Key Identifier:
                keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ba:27:68:6d:22:2f:fd:ec:df:bf:6f:08:eb:8d:67:25:26:
         7f:2e:a9:e8:89:0d:f0:e2:65:07:e5:b4:36:1c:ac:91:14:9f:
         7d:6f:04:3f:3f:c1:a8:80:ac:7b:76:a8:8a:a9:44:eb:ed:6a:
         c2:15:70:32:a2:67:06:38:86:01:10:95:7b:60:48:6e:49:96:
         1f:a6:a1:2a:24:b5:12:22:0a:ab:85:f4:96:d9:d6:b9:83:56:
         91:e2:6c:f8:c2:07:51:31:3b:3e:c5:9e:32:3b:5b:d1:14:81:
         bc:c6:26:cd:6b:47:83:e2:17:22:89:cb:bb:ac:95:2e:0e:6c:
         0e:98:f4:0e:64:8d:f0:7a:81:37:63:bb:2b:41:9b:ce:18:59:
         43:2b:a4:50:48:7a:0d:a0:0f:4d:9a:e3:42:ee:90:67:a5:c8:
         73:41:60:0b:fb:1b:69:f1:a8:b2:a2:85:0d:6f:aa:31:5c:58:
         06:fd:51:45:67:83:ce:62:d8:32:6a:a3:eb:0b:a8:b6:86:ae:
         8c:de:6a:9b:f7:52:fb:7f:cf:a7:dc:25:ef:dc:a3:a8:9a:31:
         1a:33:bb:2f:4e:69:2f:e1:b8:40:99:8b:02:1a:4c:05:6a:ac:
         0d:c3:98:fa:02:dd:34:11:95:42:38:f8:0b:68:1f:bd:9e:a3:
         4d:f3:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:05 2025 by rpki-client