This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
File:                     jipNb8UYDX1HWKp5jDiYAu7zv7M.mft (raw, json)
Hash identifier:          bgyICSKoNtjpgclZL9ADq3LQLQRmtuwOluDm+dhFMtk=
Subject key identifier:   95:A8:A4:0B:BE:68:91:5E:7D:08:50:EF:CE:DD:89:19:DD:24:0D:D2
Authority key identifier: 8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
Certificate issuer:       /CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Certificate serial:       02A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
Manifest number:          02A0
Signing time:             Mon 08 Dec 2025 04:05:20 +0000
Manifest this update:     Mon 08 Dec 2025 04:05:19 +0000
Manifest next update:     Wed 10 Dec 2025 04:05:19 +0000
Files and hashes:         1: jipNb8UYDX1HWKp5jDiYAu7zv7M.crl (hash: C4tQaaIUkwYXTn6GNXnn7mRSmnngUe5+FhkbE6RraNo=)
                          2: BDA909CACFB911EEA2EBAB6A775412E6.roa (hash: oOsN7fS/FRC6cCK/W7sGcZ0zEfirLAaFD65Y5zMuPNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4212AF, serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
        Validity
            Not Before: Dec  8 04:05:19 2025 GMT
            Not After : Dec 10 04:05:19 2025 GMT
        Subject: CN=69364e80-49c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:fc:0a:a9:af:11:e5:71:b5:eb:10:de:b2:
                    95:39:d8:66:ab:e7:0e:9a:05:dd:d0:a3:57:f8:15:
                    27:9b:36:f4:a1:6b:33:42:cb:5c:bf:91:3b:27:f2:
                    0f:71:50:b6:6c:3c:81:7b:2a:e0:67:cf:18:f8:15:
                    88:c3:77:41:5f:50:48:03:20:67:b8:46:76:a1:68:
                    20:2a:b3:e4:92:2b:2e:8c:d5:0e:44:5b:11:23:cd:
                    ea:2b:a6:8c:fa:62:70:e6:7f:36:0a:6c:d4:4c:5c:
                    bc:a9:c8:cf:4b:e3:94:6c:6a:3b:ef:ed:df:6a:9b:
                    41:ce:c2:80:7a:a5:b9:b9:b3:46:c0:94:0f:db:d7:
                    ee:ea:c0:c1:e7:d7:e1:f0:31:02:4d:dd:b4:55:58:
                    bc:48:1e:26:22:c0:d9:f2:43:be:5b:5e:36:3d:24:
                    2a:82:b8:b2:e2:7f:d1:ab:93:e8:57:3b:08:50:c6:
                    a3:80:f2:8b:61:d4:b1:a9:ca:f1:01:b9:e7:fb:c5:
                    15:10:f7:6f:aa:b3:9d:89:79:c2:56:19:15:16:7f:
                    ea:d4:01:53:3f:1f:9c:69:e1:ea:5e:50:a8:04:fb:
                    bb:9c:cc:62:1e:54:7e:b4:af:07:c8:c2:52:59:93:
                    bb:b3:44:a5:e5:9d:e9:c6:42:34:27:01:5a:02:48:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A8:A4:0B:BE:68:91:5E:7D:08:50:EF:CE:DD:89:19:DD:24:0D:D2
            X509v3 Authority Key Identifier:
                keyid:8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:60:54:17:a0:20:40:39:ae:c4:65:b4:85:bc:b0:8e:7e:
         b3:77:4e:aa:53:5b:8c:eb:7c:fb:b2:35:78:13:2d:99:8c:f4:
         83:5f:e7:f2:ff:52:01:7f:2b:f6:8c:15:01:da:d4:01:b9:ff:
         5d:6a:fc:62:04:97:3a:8e:34:e1:07:fe:d6:31:29:bd:8d:f7:
         41:32:e4:99:14:09:bf:aa:9b:e3:bd:16:0d:c8:ce:61:1b:ce:
         a6:6f:3f:61:fb:36:25:cd:28:4b:ed:5b:c9:43:5c:66:e0:9e:
         c5:a3:97:48:cd:31:a0:06:73:90:9b:c6:28:3c:0d:ff:56:e1:
         de:fc:c4:b6:be:d8:f4:d2:95:25:b3:7b:d4:3c:97:f1:db:20:
         27:61:c2:2c:6c:39:6b:08:41:34:75:4b:e0:26:96:4a:21:67:
         07:04:b4:38:c0:f7:9e:ab:8c:cc:57:98:81:1b:4f:f4:2e:d3:
         fe:5b:75:0f:90:32:c3:dc:77:e0:03:23:78:73:e8:02:48:ff:
         af:a8:59:79:60:0b:37:41:10:f1:e9:9e:bc:d3:a7:a7:00:0a:
         ce:fb:0f:2a:a0:ab:46:cc:50:68:d2:cf:59:e6:95:d7:55:8a:
         f5:76:fd:a8:5e:65:58:02:7e:be:cb:53:dd:90:1a:b8:8c:54:
         77:a1:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:25:10 2025 by rpki-client