This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
File:                     M03n0uuGIBi7lXSbZI3Lr1DRPag.mft (raw, json)
Hash identifier:          wfTUhM3VCrCUoi1IRdDZ52dzHmh4tKimCExyd0GzTho=
Subject key identifier:   BD:90:DA:95:A1:40:18:76:96:9C:C5:7E:25:F5:45:30:EE:93:5B:0D
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0E28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
Manifest number:          0E25
Signing time:             Mon 08 Dec 2025 01:00:44 +0000
Manifest this update:     Mon 08 Dec 2025 01:00:43 +0000
Manifest next update:     Wed 10 Dec 2025 01:00:43 +0000
Files and hashes:         1: M03n0uuGIBi7lXSbZI3Lr1DRPag.crl (hash: BwQuMwPGNPjlv346/D3y81hSqR4gIXtkFxxi2cft0CM=)
                          2: D4836C70F58E11E59F714033F8AEA228.roa (hash: pN8APZRuxk6Jm4N1ZwtHoYfsYhbm0SmVWbFKIM+vAlY=)
                          3: 6CF64EE6A62211ED8F649780F1222468.roa (hash: NWE8clw8CF7WBnE8BhZlyK4mx7cNZXF3h1x6LHBwvwc=)
                          4: F019B85EA62111ED8776367FF1222468.roa (hash: vz0gdE2qPXTbuobi42RjN0wKI0ZjByLhBDreE92zsPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3624 (0xe28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: Dec  8 01:00:43 2025 GMT
            Not After : Dec 10 01:00:43 2025 GMT
        Subject: CN=6936233c-bfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:19:74:4f:5e:5a:9d:04:ba:60:4d:08:96:
                    d3:e7:60:de:c4:a0:5c:e0:db:74:5c:49:8b:cd:37:
                    e2:00:2c:64:66:5d:b5:4f:3c:ce:e2:ab:07:37:99:
                    55:2f:98:01:6f:04:b6:27:d7:92:b8:30:01:51:df:
                    c0:d3:84:41:2f:e1:27:7b:48:a4:9f:f1:d0:d5:c4:
                    95:84:7f:a1:5e:a2:6e:02:01:aa:bc:89:f3:4f:18:
                    b5:ec:cc:be:80:c4:b8:2b:ec:78:41:09:a8:2e:46:
                    73:ba:0f:1b:c9:2c:a9:66:3d:77:55:a4:b5:63:d9:
                    0f:3a:44:bc:bb:30:12:1e:03:6b:d5:d0:b9:4e:bb:
                    92:5a:71:37:cc:92:c2:b7:0b:91:78:c9:37:7b:ac:
                    3e:8a:9a:56:e0:9a:ce:f7:ee:04:8e:a0:14:69:d5:
                    a2:99:20:d1:71:46:27:9b:bb:0a:3f:8a:28:70:84:
                    b5:7a:9a:be:fa:b8:be:4c:93:05:b5:b6:e3:bf:52:
                    71:6e:de:e1:53:fe:e1:61:7c:44:28:dd:3f:e9:3d:
                    e8:db:6a:d2:96:bf:10:13:e5:d8:bf:3d:88:80:df:
                    13:d4:8b:a5:ac:94:53:5e:6f:9d:e8:c4:d9:9f:ec:
                    6b:81:dc:cd:d1:98:ff:2b:30:7a:c3:77:e9:b9:26:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:DA:95:A1:40:18:76:96:9C:C5:7E:25:F5:45:30:EE:93:5B:0D
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:72:fe:ef:98:4e:a3:7d:71:aa:90:20:2b:b1:36:02:68:7c:
         0e:d3:27:f1:ec:85:0a:c7:8d:df:7b:27:6f:59:a0:a0:6d:e9:
         d2:28:58:b6:24:a9:fe:21:77:0b:e8:ee:75:ab:d6:e6:30:ff:
         78:b7:0e:61:9f:fa:9a:40:02:87:69:fb:5a:d3:1f:ca:d3:6f:
         cc:1e:90:bf:88:f1:7c:80:e5:39:ba:05:5f:50:e5:51:79:ae:
         0a:c6:20:a6:48:48:fe:af:74:03:b4:73:e4:52:27:25:55:82:
         b6:97:67:b5:5c:48:0c:a9:f5:d3:3b:e0:5f:d3:9d:87:e3:f1:
         25:f6:cb:ae:5a:7e:02:b2:67:53:9f:83:34:5a:68:aa:4f:b4:
         6f:30:c9:03:eb:ff:43:40:90:dc:69:c5:09:bc:af:f1:ed:93:
         4a:5f:4b:e4:bb:35:c9:b7:02:1e:f9:e6:c7:b1:d2:53:9b:24:
         c4:63:55:7f:39:d4:6d:83:e5:57:f3:7a:af:91:8e:55:a8:6f:
         b0:06:50:2b:73:83:55:59:9c:d7:70:b8:7a:31:a0:38:a7:e6:
         b4:f6:41:cb:68:5a:c1:cf:47:14:50:63:95:c4:85:3a:5b:16:
         3b:41:44:68:72:ff:b9:31:ac:cd:f6:4e:4c:6f:75:61:a2:6b:
         41:8d:09:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjNDQUZBRjExMC8GA1UEBRMoMzM0REU3RDJFQjg2MjAxOEJCOTU3NDlCNjQ4RENC
QUY1MEQxM0RBODAeFw0yNTEyMDgwMTAwNDNaFw0yNTEyMTAwMTAwNDNaMBgxFjAU
BgNVBAMTDTY5MzYyMzNjLWJmYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTVBl0T15anQS6YE0IltPnYN7EoFzg23RcSYvNN+IALGRmXbVPPM7iqwc3
mVUvmAFvBLYn15K4MAFR38DThEEv4Sd7SKSf8dDVxJWEf6Feom4CAaq8ifNPGLXs
zL6AxLgr7HhBCaguRnO6DxvJLKlmPXdVpLVj2Q86RLy7MBIeA2vV0LlOu5JacTfM
ksK3C5F4yTd7rD6Kmlbgms737gSOoBRp1aKZINFxRiebuwo/iihwhLV6mr76uL5M
kwW1tuO/UnFu3uFT/uFhfEQo3T/pPejbatKWvxAT5di/PYiA3xPUi6WslFNeb53o
xNmf7GuB3M3RmP8rMHrDd+m5JkqFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvZDa
laFAGHaWnMV+JfVFMO6TWw0wHwYDVR0jBBgwFoAUM03n0uuGIBi7lXSbZI3Lr1DR
PagwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzQ0FGL0QxM0Y5REIwRjRGMTExRTVCRThBNjM0Q0Y4QUVBMjI4L00wM24w
dXVHSUJpN2xYU2JaSTNMcjFEUlBhZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL00wM24wdXVHSUJpN2xYU2JaSTNMcjFEUlBhZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjNDQUYvRDEzRjlEQjBGNEYxMTFFNUJFOEE2MzRDRjhB
RUEyMjgvTTAzbjB1dUdJQmk3bFhTYlpJM0xyMURSUGFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlcv7vmE6jfXGqkCArsTYCaHwO0yfx
7IUKx43feydvWaCgbenSKFi2JKn+IXcL6O51q9bmMP94tw5hn/qaQAKHafta0x/K
02/MHpC/iPF8gOU5ugVfUOVRea4KxiCmSEj+r3QDtHPkUiclVYK2l2e1XEgMqfXT
O+Bf052H4/El9suuWn4CsmdTn4M0WmiqT7RvMMkD6/9DQJDcacUJvK/x7ZNKX0vk
uzXJtwIe+ebHsdJTmyTEY1V/OdRtg+VX83qvkY5VqG+wBlArc4NVWZzXcLh6MaA4
p+a09kHLaFrBz0cUUGOVxIU6WxY7QURocv+5MazN9k5Mb3VhomtBjQk1
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:06:30 2025 by rpki-client