This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
File:                     4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft (raw, json)
Hash identifier:          xMkMUQJxo9PtAI5DBY3pRmV26jsWR+bq0s8BLhpKkhw=
Subject key identifier:   7F:22:22:12:28:01:68:A3:DB:31:1F:72:5C:CC:19:71:25:81:01:B5
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
Manifest number:          4C
Signing time:             Mon 08 Dec 2025 05:18:55 +0000
Manifest this update:     Mon 08 Dec 2025 05:18:55 +0000
Manifest next update:     Wed 10 Dec 2025 05:18:55 +0000
Files and hashes:         1: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl (hash: UNzKHeVzQaKEvqb1Xi78nq0tl5lIImsYeO9BTBdm0X4=)
                          2: 0DFB1610CFB411F0ACADEE97DAE4EC9C.roa (hash: oNtnDf8ut6TfrarC9fdRpoYpJaKwDjYLXntPcZiKhEo=)
                          3: BE77F3A4CFB511F0A7895EA2DAE4EC9C.roa (hash: aBMgrxCb/6HvnfERUlNb4dZkjtc9w7jnD9/Dl4m4NtQ=)
                          4: C43CA8C6CFB411F0A80C339CDAE4EC9C.roa (hash: YU0Mz0+xBwbICuOKhPlbTNIIJa5T3xaQhk9igOv4NOo=)
                          5: 676690CCBDAC11F0831D1C90DAE4EC9C.roa (hash: XdWDKXcmXYcv422+a15/XwULu5rKZP/wlv0cct+XoGM=)
                          6: E3368278CFB511F09DA22AA4DAE4EC9C.roa (hash: UmbZ34CSy4QaM4G3BT9GvNwUwyyD8ApbDtMH0IJg4ro=)
                          7: 1FB32634CFB611F0A31DAAA4DAE4EC9C.roa (hash: DZhYeLrVZ0weMplnQYlSAPus+IEMEVNVzO++jLpv0YY=)
                          8: 955A189CCFB711F096BC2FADDAE4EC9C.roa (hash: Jkt44yIX0lWC6HixdIwzEzPoo7kWFY38ZglZAMhMwDk=)
                          9: 34CEF68ECFB511F094C7EE9FDAE4EC9C.roa (hash: DOZkdMukh+v2DBjPXn5J+dS+3o+FoDrcyvSwkXpJNvE=)
                          10: 58302BAACFB711F0A097A8ACDAE4EC9C.roa (hash: CkHt7rAtBCp/QPk/zm1djDgp2QmYdp2PKLNfVgYviqY=)
                          11: EA178B88CFB411F0B28F1D9EDAE4EC9C.roa (hash: ZwYrxXtAM9XzzHF/9hbViIMZsHfzBZbOHuyEVywDODY=)
                          12: 9A4B1C1ECFB411F0BC19C49BDAE4EC9C.roa (hash: YGJdonhqiNxPWjkiBw/jIJCO9cM7sdqfJewzCOXf35k=)
                          13: 11EAFD34CFB511F0A85F229EDAE4EC9C.roa (hash: ktCsVGelnDxhF1brhkkAXgPNdkq/+H9UbhWPD7GDAWM=)
                          14: 13AACCE2CFB711F09229CCAADAE4EC9C.roa (hash: fS1ORJyrCWqpjqKTqGpU1u815FIRaBm8TD7If34NgsA=)
                          15: 678DD4CECFE111F0BD278CAEDAE4EC9C.roa (hash: +RuqPven+NHEM2Si5h21IV25PaXZhNuO+WJIWyUztcI=)
                          16: A7699538CFE111F0831786B0DAE4EC9C.roa (hash: rGEU7wb15ljnefLRJ9OZgSMtwFY9/ZN9iJIKv7H8jX4=)
                          17: 107ED0CACFE111F0957C53ACDAE4EC9C.roa (hash: RIkwUzoDd3XDed4hEq/jalYnrLUgJWyxDayVH4F6t5g=)
                          18: B48F3596CFE711F0828DCFD7DAE4EC9C.roa (hash: Wr1t59nNOd6ISD5g7N+kDQohsibxPi8uS73t8uqyDbA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  8 05:18:55 2025 GMT
            Not After : Dec 10 05:18:55 2025 GMT
        Subject: CN=69365fbf-c490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:e6:ab:f2:ef:38:3a:d3:eb:a5:f8:28:60:
                    eb:40:8e:07:b3:02:6e:88:36:4f:79:77:06:2c:bb:
                    af:ca:db:cb:a8:1c:ab:c0:ae:36:c4:91:f5:cc:a5:
                    b5:6a:b1:f4:a0:3d:93:b4:fa:eb:05:8d:10:c7:0c:
                    48:cc:4f:4b:4b:54:d4:9e:fb:39:4c:b7:b9:e2:f8:
                    18:19:99:95:76:23:91:d5:f7:da:23:8e:86:a1:b3:
                    99:76:86:85:20:aa:51:a2:aa:14:6c:41:4f:26:07:
                    73:65:34:cc:4c:2c:06:c8:de:7b:75:b6:0c:c0:07:
                    53:e7:61:bc:6b:27:99:d8:4f:9b:26:66:65:bd:f1:
                    85:38:6d:58:72:05:7b:43:00:36:fd:7c:5e:52:44:
                    27:b2:c2:29:d4:94:0f:32:0d:c0:37:69:2e:3a:26:
                    5f:f9:ba:9b:96:4d:e5:c5:b4:2d:32:10:48:ca:53:
                    44:bc:96:3a:63:c2:18:4c:9c:11:ca:18:9e:77:61:
                    64:be:04:fa:d6:0f:82:cf:0a:00:7d:e1:8c:a6:79:
                    9e:a2:92:1b:37:7f:aa:c6:1b:eb:4a:6b:43:08:1e:
                    f0:7c:5d:4e:19:d8:75:3f:d8:78:26:f3:d2:99:8f:
                    bc:00:61:ee:49:e3:02:50:61:e0:e1:70:aa:94:1b:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:22:12:28:01:68:A3:DB:31:1F:72:5C:CC:19:71:25:81:01:B5
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:93:f5:5c:66:c8:82:d3:0c:0c:63:66:55:3c:b1:25:51:
         44:22:35:68:a4:41:0b:6e:d3:d0:16:24:55:35:32:f7:8c:d5:
         bd:9f:de:88:59:7c:56:a0:46:a4:f7:93:66:1a:f1:e5:14:dc:
         8b:3d:84:d7:bb:e0:2b:ca:2b:24:83:05:62:0b:22:88:de:42:
         58:e6:60:33:df:6f:dc:ff:6f:b9:52:9b:5c:60:67:41:81:d7:
         53:26:dc:a5:0b:85:ec:2f:bd:41:65:61:18:ea:9e:e8:e4:b7:
         e9:8d:03:47:fd:44:07:6f:0d:e4:82:be:71:22:09:77:c2:4a:
         c5:6e:e0:32:56:af:c4:28:42:47:97:fc:80:90:e7:97:cd:5c:
         d2:3d:b5:ce:49:6b:9e:14:e1:d0:7a:61:ba:d2:5c:45:78:a7:
         6a:61:df:08:d8:6a:fa:41:c4:60:d6:23:19:01:40:37:dc:a2:
         0f:b3:b6:8f:fd:c5:97:6a:7e:8d:3c:e6:5f:11:c4:2a:e6:8b:
         b9:df:58:2d:1a:75:3c:77:48:c9:df:e5:cf:5a:52:f6:1e:9c:
         35:6e:e3:57:a2:84:51:ab:e9:fc:96:1f:6e:b3:4e:50:de:d9:
         10:85:c8:67:5a:9b:d9:54:19:dd:a0:94:0e:5e:22:17:21:b8:
         74:c0:39:42
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBRzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NUQ3QkFGMTEwLwYDVQQFEyhFMkZFNTZBRkU2NkFCMERGM0UzOTVFRERCNDE4OTNF
MDBERjZBRUY3MB4XDTI1MTIwODA1MTg1NVoXDTI1MTIxMDA1MTg1NVowGDEWMBQG
A1UEAxMNNjkzNjVmYmYtYzQ5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKDD5qvy7zg60+ul+Chg60COB7MCbog2T3l3Biy7r8rby6gcq8CuNsSR9cyl
tWqx9KA9k7T66wWNEMcMSMxPS0tU1J77OUy3ueL4GBmZlXYjkdX32iOOhqGzmXaG
hSCqUaKqFGxBTyYHc2U0zEwsBsjee3W2DMAHU+dhvGsnmdhPmyZmZb3xhThtWHIF
e0MANv18XlJEJ7LCKdSUDzINwDdpLjomX/m6m5ZN5cW0LTIQSMpTRLyWOmPCGEyc
EcoYnndhZL4E+tYPgs8KAH3hjKZ5nqKSGzd/qsYb60prQwge8HxdThnYdT/YeCbz
0pmPvABh7knjAlBh4OFwqpQb/bMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBR/IiIS
KAFoo9sxH3JczBlxJYEBtTAfBgNVHSMEGDAWgBTi/lav5mqw3z45Xt20GJPgDfau
9zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFFNEVDOUMvNHY1V3It
WnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNHY1V3ItWnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYyNUQ3Qi8zQ0U4OEQwOEJEQTkxMUYwOENBMDg5N0FEQUU0
RUM5Qy80djVXci1acXNOOC1PVjdkdEJpVDRBMzJydmMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKL8k/VcZsiC0wwMY2ZVPLElUUQiNWik
QQtu09AWJFU1MveM1b2f3ohZfFagRqT3k2Ya8eUU3Is9hNe74CvKKySDBWILIoje
QljmYDPfb9z/b7lSm1xgZ0GB11Mm3KULhewvvUFlYRjqnujkt+mNA0f9RAdvDeSC
vnEiCXfCSsVu4DJWr8QoQkeX/ICQ55fNXNI9tc5Ja54U4dB6YbrSXEV4p2ph3wjY
avpBxGDWIxkBQDfcog+zto/9xZdqfo085l8RxCrmi7nfWC0adTx3SMnf5c9aUvYe
nDVu41eihFGr6fyWH26zTlDe2RCFyGdam9lUGd2glA5eIhchuHTAOUI=
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:16:37 2025 by rpki-client