This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          pHEQC9FjdueZo2BjLZgA7+o3cBJrhGvTmQhn2bcfGpo=
Subject key identifier:   3F:28:52:D7:61:26:2C:72:51:0D:CC:45:D7:4B:56:6B:5E:05:BD:5D
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       01EB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          01EA
Signing time:             Sat 06 Dec 2025 04:30:53 +0000
Manifest this update:     Sat 06 Dec 2025 04:30:52 +0000
Manifest next update:     Mon 08 Dec 2025 04:30:52 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: NUJB8lXg3UAAgOKcUxga4AYzHKx0KEG2NuexXoIR5GU=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Dec  6 04:30:52 2025 GMT
            Not After : Dec  8 04:30:52 2025 GMT
        Subject: CN=6933b17d-bd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:2f:1f:b2:f8:6c:cc:37:9b:8a:ba:f6:17:
                    35:d5:50:72:ef:da:bc:6c:da:d5:88:f9:14:d8:82:
                    1e:65:0d:51:4d:ea:78:11:b9:22:19:8a:61:e9:30:
                    61:74:5a:89:33:6e:6d:b5:b6:1a:55:fe:3b:1e:81:
                    b1:ce:4b:c8:0e:9b:61:05:c7:3e:a0:29:38:c6:e7:
                    ef:54:dd:88:2c:40:40:8c:37:24:b4:9c:1b:a6:91:
                    fa:47:bb:21:be:28:d1:b1:35:e7:73:77:32:e7:c4:
                    cd:2e:bd:0f:4b:e0:c8:cd:92:7f:86:51:c8:45:67:
                    33:a3:9d:cb:c8:18:5d:be:64:46:6c:26:7d:3a:c5:
                    c3:b8:03:95:9e:92:9b:b2:69:78:6c:c8:8f:84:9e:
                    78:ad:2c:20:5a:a3:9c:26:65:f7:92:f0:17:45:54:
                    7c:5a:21:ee:69:cd:cd:4a:77:ca:c1:ec:d6:70:c4:
                    cb:fb:a8:d6:58:d6:93:40:46:4b:92:5b:ea:b7:a4:
                    66:09:fe:86:2c:96:1a:f8:46:d2:05:a0:09:9a:4f:
                    8f:d7:6a:b6:dd:03:a6:21:40:cd:37:6a:50:e8:53:
                    d7:c1:d4:43:34:39:52:58:ac:80:1b:80:6a:0e:0e:
                    9f:50:52:c9:a6:29:02:69:62:1f:9b:4a:7d:fb:ad:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:28:52:D7:61:26:2C:72:51:0D:CC:45:D7:4B:56:6B:5E:05:BD:5D
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:71:54:93:3e:85:40:bd:ec:b2:6e:b8:2d:84:a2:cd:a2:
         ce:85:c0:90:f2:46:d7:f0:56:d4:4d:10:1c:35:2d:25:4a:40:
         ae:d2:70:af:24:62:05:e7:c1:c5:e2:11:97:5d:09:d7:bd:fa:
         32:73:f4:f4:05:19:9a:55:1d:40:48:22:2f:c8:23:b8:ab:44:
         95:b7:5b:ad:9f:54:6e:e9:42:d9:aa:1b:7f:0f:b2:39:dc:ea:
         c0:f3:45:25:19:e9:d3:80:f3:95:88:e4:aa:f9:70:07:0c:57:
         71:58:63:89:cd:2c:08:d9:20:13:5c:0e:6a:5a:13:ec:a9:bb:
         57:e8:56:3a:0e:03:7e:79:4c:bc:ce:13:4f:20:fd:24:92:1a:
         71:8b:4b:3d:6e:78:7b:e6:91:26:d5:5f:df:15:54:e4:53:68:
         d7:8a:43:53:2b:39:34:5d:c4:cc:bb:c2:99:1b:d8:3f:40:9c:
         0b:84:0b:23:95:97:1a:a6:d2:d6:06:69:17:19:78:96:15:c0:
         a7:d1:64:15:a7:c8:d3:01:7a:a0:c7:4d:d5:a7:af:bd:c2:55:
         a5:d6:f1:a3:31:41:36:73:da:fa:0e:d8:cc:92:cd:00:40:d0:
         51:a1:50:fe:9c:5f:6a:3d:5c:6f:b7:98:24:b0:5b:74:11:61:
         b4:58:37:67
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAeswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlDOENBUjExMC8GA1UEBRMoQjQ4MEU0QTNBNkQ1QzcyNDVEMEY2MDY4QUM4NTRC
OEY3MEFFQzU0RDAeFw0yNTEyMDYwNDMwNTJaFw0yNTEyMDgwNDMwNTJaMBgxFjAU
BgNVBAMTDTY5MzNiMTdkLWJkMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDj8i8fsvhszDebirr2FzXVUHLv2rxs2tWI+RTYgh5lDVFN6ngRuSIZimHp
MGF0Wokzbm21thpV/jsegbHOS8gOm2EFxz6gKTjG5+9U3YgsQECMNyS0nBumkfpH
uyG+KNGxNedzdzLnxM0uvQ9L4MjNkn+GUchFZzOjncvIGF2+ZEZsJn06xcO4A5We
kpuyaXhsyI+EnnitLCBao5wmZfeS8BdFVHxaIe5pzc1Kd8rB7NZwxMv7qNZY1pNA
RkuSW+q3pGYJ/oYslhr4RtIFoAmaT4/XarbdA6YhQM03alDoU9fB1EM0OVJYrIAb
gGoODp9QUsmmKQJpYh+bSn37rcJHAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPyhS
12EmLHJRDcxF10tWa14FvV0wHwYDVR0jBBgwFoAUtIDko6bVxyRdD2BorIVLj3Cu
xU0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QzhDL0Y1Qjc4RDhBNUZEQTExRUZCRjVEODVBQjc2MkU5NTFBL3RJRGtv
NmJWeHlSZEQyQm9ySVZMajNDdXhVMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3RJRGtvNmJWeHlSZEQyQm9ySVZMajNDdXhVMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTlDOEMvRjVCNzhEOEE1RkRBMTFFRkJGNUQ4NUFCNzYyRTk1
MUEvdElEa282YlZ4eVJkRDJCb3JJVkxqM0N1eFUwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA26HFUkz6FQL3ssm64LYSizaLOhcCQ8kbX
8FbUTRAcNS0lSkCu0nCvJGIF58HF4hGXXQnXvfoyc/T0BRmaVR1ASCIvyCO4q0SV
t1utn1Ru6ULZqht/D7I53OrA80UlGenTgPOViOSq+XAHDFdxWGOJzSwI2SATXA5q
WhPsqbtX6FY6DgN+eUy8zhNPIP0kkhpxi0s9bnh75pEm1V/fFVTkU2jXikNTKzk0
XcTMu8KZG9g/QJwLhAsjlZcaptLWBmkXGXiWFcCn0WQVp8jTAXqgx03Vp6+9wlWl
1vGjMUE2c9r6DtjMks0AQNBRoVD+nF9qPVxvt5gksFt0EWG0WDdn
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:01 2025 by rpki-client