This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File:                     Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier:          lIBnNwFHqhdgiVToz3E9543Y9TjoQwk0L/8Zbbk+4bg=
Subject key identifier:   84:3E:44:23:AB:C6:16:1B:93:2F:C4:CB:9D:E8:B8:DB:F7:59:0B:32
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer:       /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial:       03CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number:          03CA
Signing time:             Sat 06 Dec 2025 03:28:09 +0000
Manifest this update:     Sat 06 Dec 2025 03:28:08 +0000
Manifest next update:     Mon 08 Dec 2025 03:28:08 +0000
Files and hashes:         1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: Kxv9KY6aVcZlmS9q0XUh0ugthL97gw3UyAbcl3tlx3U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                          rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 03:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AR, serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
        Validity
            Not Before: Dec  6 03:28:08 2025 GMT
            Not After : Dec  8 03:28:08 2025 GMT
        Subject: CN=6933a2c8-b6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f9:35:27:16:74:34:2b:9b:7d:c5:4d:cf:fc:
                    5f:26:59:18:66:49:83:2b:7a:b8:bf:97:9c:26:8e:
                    06:cb:2f:6e:6b:58:ce:81:7a:cf:34:7a:4f:e9:d6:
                    38:77:3f:d5:90:52:08:83:b6:85:69:3b:f2:27:dc:
                    f9:c8:c8:be:77:bd:c9:10:f1:3a:31:0e:9a:db:3b:
                    63:3f:3e:5a:90:9f:11:c2:57:61:ea:0a:0d:cf:ca:
                    e7:83:da:12:1a:47:09:49:35:37:1d:33:56:d7:f8:
                    53:ad:f1:a5:09:b9:5e:5c:a4:b1:b7:32:90:7e:21:
                    de:6f:85:c3:f9:6c:5f:64:a1:7e:b8:af:eb:37:ac:
                    50:4f:c3:df:57:a1:26:6f:d5:1e:60:64:49:dc:92:
                    9d:bc:88:3e:16:b7:a5:46:63:42:3c:2a:e6:ba:b1:
                    35:83:11:f4:1f:67:15:b4:9d:de:d0:ba:5e:0c:82:
                    bf:66:b6:ef:7e:76:3a:32:6f:77:4c:e0:d2:33:2b:
                    de:fe:b9:16:e6:ce:df:ca:87:6e:35:12:41:34:0f:
                    fd:bd:33:27:e7:58:f8:12:a2:f7:da:9f:10:ca:14:
                    bb:d6:ed:5a:e2:96:a7:75:65:9e:43:e0:e9:90:41:
                    60:56:e5:3e:b4:dd:82:14:f0:db:dc:8a:dd:a6:b6:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3E:44:23:AB:C6:16:1B:93:2F:C4:CB:9D:E8:B8:DB:F7:59:0B:32
            X509v3 Authority Key Identifier:
                keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:5d:0c:1c:bd:ce:24:0a:ab:1e:0e:07:d2:6f:3b:af:76:
         c4:47:2a:30:39:37:68:3c:e5:ed:09:b1:68:2b:12:2a:69:8c:
         e5:75:53:a4:82:fe:dc:f8:21:83:3f:3d:14:9b:8c:25:eb:5b:
         37:da:9c:8f:55:fd:5c:17:b5:ea:fd:7a:26:01:d2:dd:40:0e:
         df:70:dd:9a:61:b7:4d:0b:c4:14:23:28:f5:be:e8:99:1c:61:
         3d:0f:2a:f6:3d:f5:4f:01:c5:e7:26:c5:d4:01:12:54:76:4a:
         67:ed:2a:dc:9f:3c:66:29:46:da:c9:1a:6b:c1:d8:f1:eb:d1:
         1b:ad:a0:cf:ea:cf:9e:5c:df:01:c4:3f:4c:27:68:8f:23:53:
         d4:3f:d6:6e:cb:09:17:1a:ac:55:73:c8:d2:32:6a:d7:b2:d3:
         5b:bb:03:ac:1f:ea:f2:41:74:7c:ed:09:99:f0:d9:0f:9b:1a:
         68:11:71:42:e1:41:6d:ea:32:1a:4c:a1:6e:7b:46:ed:8c:0d:
         47:b1:ed:f2:b0:db:b4:ea:b5:25:dd:5f:b5:79:84:c0:5d:4e:
         1b:95:63:db:67:7d:2a:8a:6c:54:c5:65:99:2a:9f:34:9f:bc:
         f0:20:34:f5:61:36:ca:7b:d3:04:74:9e:f1:85:93:db:6d:47:
         49:90:4e:93
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA8swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjRFMzJBUjExMC8GA1UEBRMoNTYwQUJCRUU5OTQ0QkMxNjM3NEQyOEJFNEMyNjA3
MjEyQzVDODQxQTAeFw0yNTEyMDYwMzI4MDhaFw0yNTEyMDgwMzI4MDhaMBgxFjAU
BgNVBAMTDTY5MzNhMmM4LWI2YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDn+TUnFnQ0K5t9xU3P/F8mWRhmSYMreri/l5wmjgbLL25rWM6Bes80ek/p
1jh3P9WQUgiDtoVpO/In3PnIyL53vckQ8ToxDprbO2M/PlqQnxHCV2HqCg3PyueD
2hIaRwlJNTcdM1bX+FOt8aUJuV5cpLG3MpB+Id5vhcP5bF9koX64r+s3rFBPw99X
oSZv1R5gZEnckp28iD4Wt6VGY0I8Kua6sTWDEfQfZxW0nd7Qul4Mgr9mtu9+djoy
b3dM4NIzK97+uRbmzt/Kh241EkE0D/29MyfnWPgSovfanxDKFLvW7Vrilqd1ZZ5D
4OmQQWBW5T603YIU8Nvcit2mtpPNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUhD5E
I6vGFhuTL8TLnei42/dZCzIwHwYDVR0jBBgwFoAUVgq77plEvBY3TSi+TCYHISxc
hBowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0RTMyL0YxMzQwRTRFRUU3MjExRURCQTUzMjcxNjRBRDlFNkZDL1ZncTc3
cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1ZncTc3cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjRFMzIvRjEzNDBFNEVFRTcyMTFFREJBNTMyNzE2NEFEOUU2
RkMvVmdxNzdwbEV2QlkzVFNpLVRDWUhJU3hjaEJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADt10MHL3OJAqrHg4H0m87r3bERyowOTdo
POXtCbFoKxIqaYzldVOkgv7c+CGDPz0Um4wl61s32pyPVf1cF7Xq/XomAdLdQA7f
cN2aYbdNC8QUIyj1vuiZHGE9Dyr2PfVPAcXnJsXUARJUdkpn7SrcnzxmKUbayRpr
wdjx69EbraDP6s+eXN8BxD9MJ2iPI1PUP9ZuywkXGqxVc8jSMmrXstNbuwOsH+ry
QXR87QmZ8NkPmxpoEXFC4UFt6jIaTKFue0btjA1Hse3ysNu06rUl3V+1eYTAXU4b
lWPbZ30qimxUxWWZKp80n7zwIDT1YTbKe9MEdJ7xhZPbbUdJkE6T
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:13:55 2025 by rpki-client