This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.mft (raw, json)
Hash identifier:          GPIulluRaHVaRwqubedCUBh8fYKxQZScYQLQO91SaxE=
Subject key identifier:   A7:6F:44:BC:AE:B3:88:3F:E4:43:5D:35:79:A3:E7:25:90:06:D6:C8
Authority key identifier: EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Certificate issuer:       /CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
Certificate serial:       0717
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
Manifest number:          0715
Signing time:             Mon 08 Dec 2025 02:00:36 +0000
Manifest this update:     Mon 08 Dec 2025 02:00:35 +0000
Manifest next update:     Wed 10 Dec 2025 02:00:35 +0000
Files and hashes:         1: 6y_2M0NFlzp0sAkALjaRcdk48DM.crl (hash: EzBXWTjun7FSTP/9D8umDN4fY4Hix5Dhx9TXAiiSBBE=)
                          2: 3ED2C7FA73DF11F08938C08EDAE4EC9C.roa (hash: iyabqTBm+x48hvA2ztaOaTXns/fPRnTXSFF6KRFDSwY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Validity
            Not Before: Dec  8 02:00:35 2025 GMT
            Not After : Dec 10 02:00:35 2025 GMT
        Subject: CN=69363144-6b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:44:39:c4:d6:36:46:4b:e4:c6:9f:92:dd:
                    cb:20:cd:48:79:23:54:a4:1e:45:42:67:57:10:e6:
                    16:c9:33:5a:af:ac:4e:3e:71:8e:ab:32:e9:01:af:
                    68:3a:23:25:c1:c2:4f:f7:18:68:fd:83:13:05:2f:
                    06:23:7a:04:54:86:6e:12:d9:1c:19:85:fd:3a:87:
                    dd:6e:fa:ab:8a:bf:44:e2:53:a6:73:c6:22:3f:46:
                    c1:52:b0:0a:a4:e5:c2:78:25:cd:26:ad:e6:dc:c5:
                    0b:c1:54:ae:74:ac:c9:25:49:88:91:ef:f0:b7:af:
                    bd:c9:0d:0c:a5:19:20:4b:ff:41:49:ba:48:9a:55:
                    ea:28:b6:42:d7:22:60:f0:3a:8e:35:37:1c:ec:03:
                    b8:66:19:eb:f9:68:cc:cd:28:7b:77:85:f5:a2:4e:
                    65:e5:7c:a5:e8:a3:4c:95:ed:7f:76:f8:17:88:85:
                    1d:0d:53:c4:82:93:bc:46:d1:6f:fa:87:29:3e:e8:
                    58:8d:9f:6a:fe:03:8e:d5:8c:d8:d1:9b:85:52:cf:
                    6a:06:98:08:f6:49:6a:7b:79:9f:18:e7:77:91:7e:
                    5c:9e:31:12:13:23:5d:9a:3f:1f:f0:08:1c:2b:52:
                    48:5b:ca:5e:aa:3d:d0:7c:32:97:d2:5a:9b:04:29:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:44:BC:AE:B3:88:3F:E4:43:5D:35:79:A3:E7:25:90:06:D6:C8
            X509v3 Authority Key Identifier:
                keyid:EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:15:40:ce:dd:5f:6f:da:31:c8:44:12:6b:d8:75:ef:6d:0e:
         85:49:e3:b3:db:98:79:52:ff:8b:96:84:19:62:76:70:1d:cc:
         4f:54:c6:44:a3:d8:0c:95:52:51:31:57:26:54:a0:df:82:c1:
         04:05:42:c1:6e:5b:80:6b:67:38:ff:70:61:95:d2:5e:1f:4a:
         b4:61:92:d8:6a:6f:4a:0d:ce:a6:48:67:46:5e:33:b5:af:d5:
         4b:78:f5:1d:72:fb:7a:08:dc:d2:fd:ae:5a:24:db:c1:1c:26:
         34:33:bf:f7:f5:86:2e:9c:bc:6a:c7:37:4d:ea:dd:91:c1:69:
         37:53:46:46:48:4f:2f:c2:b4:64:c2:65:15:c9:ae:79:da:6b:
         fb:8f:c7:5e:18:82:4e:2f:cf:9a:23:9a:d1:9e:f3:d4:3a:08:
         0f:e9:84:5c:3f:8d:f3:12:c5:cd:4d:ae:34:32:71:b4:26:62:
         d7:d8:d5:32:b1:e2:25:05:1f:45:b2:2d:96:9a:6d:a6:f6:f7:
         fe:f8:4c:f7:82:c5:b0:05:10:16:62:a1:61:a0:0b:55:14:da:
         e5:2a:bb:01:3f:fe:77:69:9a:ba:09:2e:1c:be:3a:c4:2d:6a:
         9f:07:82:32:39:47:d4:90:83:f3:34:ce:a3:4d:9c:4a:a8:cd:
         11:6b:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:30 2025 by rpki-client