This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
File:                     W8VPKEgipxexrUw3z2nQls5_Z3M.mft (raw, json)
Hash identifier:          BP5sJlalRqrG4TP1cduaaQsEtD6s2416GTSdZyl2XNc=
Subject key identifier:   53:4B:0B:B8:12:EF:79:DB:55:6C:49:EF:38:25:D5:5F:13:73:35:CD
Authority key identifier: 5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73
Certificate issuer:       /CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
Certificate serial:       0629
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
Manifest number:          0624
Signing time:             Sun 07 Dec 2025 02:28:07 +0000
Manifest this update:     Sun 07 Dec 2025 02:28:07 +0000
Manifest next update:     Tue 09 Dec 2025 02:28:07 +0000
Files and hashes:         1: W8VPKEgipxexrUw3z2nQls5_Z3M.crl (hash: 1ScwJssOI1qRGolc9dnycHwd8RpHdQIbRxY9T4iQ7PI=)
                          2: 7D4DF23EBD5E11F0AC3505AFDAE4EC9C.roa (hash: 66WTE1t1auuEEXYPV89TT/2BRb9tAd4Yku3NmYbxCrY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                          rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577 (0x629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FRI, serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
        Validity
            Not Before: Dec  7 02:28:07 2025 GMT
            Not After : Dec  9 02:28:07 2025 GMT
        Subject: CN=6934e637-13cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:41:62:f4:fb:d7:54:9b:81:d4:7c:a8:24:ae:
                    33:db:14:eb:48:73:b0:f5:1f:9d:ce:ad:b8:82:73:
                    7c:3a:12:33:d3:7a:5b:a2:1d:1d:cb:cf:0c:b6:82:
                    2f:7f:fb:31:04:83:8f:b3:1d:64:94:6a:e2:00:2e:
                    dc:73:34:bc:d4:79:33:c1:f7:e5:51:ac:5f:f3:02:
                    f3:b0:8d:d9:04:f4:f9:7b:ed:6c:6b:fc:ec:33:c2:
                    6b:9d:02:80:2c:ad:60:76:12:e9:11:0d:cd:09:8c:
                    37:91:e1:66:fa:82:c0:3a:2f:11:b5:f6:b9:7a:ee:
                    13:e1:f1:b5:06:c9:67:ca:b2:82:d7:fd:89:0c:a2:
                    1f:78:be:d2:6d:ae:75:1f:f7:c1:7f:8b:2b:6e:a8:
                    02:fc:0c:62:08:27:f1:7b:e7:7b:57:bc:a7:40:28:
                    3c:b3:0d:79:56:8e:6e:7e:8e:66:fc:85:a7:eb:7d:
                    c2:55:c3:d0:47:62:b1:b9:56:59:c5:a0:57:35:57:
                    35:d4:90:13:e2:23:2d:03:a2:58:23:18:38:94:8d:
                    01:fa:cc:b0:ef:6f:9c:2c:06:62:24:41:b2:97:9c:
                    64:3a:32:82:a1:46:73:01:2a:6c:e8:39:16:9f:de:
                    ad:d8:8a:bd:6c:70:a7:61:68:2b:93:c8:76:88:6e:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4B:0B:B8:12:EF:79:DB:55:6C:49:EF:38:25:D5:5F:13:73:35:CD
            X509v3 Authority Key Identifier:
                keyid:5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:0c:b7:7d:12:8b:ea:75:e8:1b:de:69:c6:7a:3d:c0:32:
         ad:86:89:7e:b2:a9:97:a7:f3:48:bb:b7:87:57:a3:42:3b:03:
         9e:1c:01:7b:f8:2d:b3:43:10:43:55:19:c2:2d:9b:19:e4:69:
         6e:bd:24:7e:8c:80:23:37:a0:1f:73:ba:2e:f7:87:39:30:bd:
         71:c6:87:8d:88:97:98:f0:e5:f4:b5:fb:c0:92:3d:1d:4f:03:
         25:41:78:6a:45:bf:45:90:c5:57:4b:6b:dc:df:76:dc:d2:ab:
         e6:e0:1d:88:9b:58:7c:67:ac:aa:33:19:55:8d:e3:15:32:9c:
         44:01:1b:ab:05:a9:82:5a:65:a8:84:e8:48:3d:f8:7e:95:e7:
         2d:20:b5:22:f0:b5:f6:ba:16:55:87:26:3b:e7:35:17:4e:c3:
         be:75:de:80:53:4e:2e:3b:cc:9e:72:62:d7:37:74:94:71:cd:
         87:8f:0d:bb:c1:71:79:ca:9a:94:da:23:7d:57:62:8d:56:51:
         f7:3a:0f:1a:b2:67:7b:89:f9:10:1d:0e:ff:f3:b3:84:9e:41:
         3c:67:de:b9:82:71:4a:ad:75:55:82:3a:89:bd:2b:88:5e:88:
         66:2f:3c:2b:d3:2e:81:f7:71:aa:24:51:6c:f7:ee:ca:54:e9:
         b9:08:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:00:46 2025 by rpki-client