This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          0eTTSFyxISl8eRi/RLL8lMEbhG1Wut9G31eFWXVyFoo=
Subject key identifier:   6B:2F:DA:33:1A:37:CF:8E:5F:11:C4:AD:5A:5B:F7:8C:B0:2A:E9:F8
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       02CE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          02CD
Signing time:             Sat 06 Dec 2025 03:59:17 +0000
Manifest this update:     Sat 06 Dec 2025 03:59:16 +0000
Manifest next update:     Mon 08 Dec 2025 03:59:16 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: OCRevufdy5RtNiy+3tkhOfMkDEhUGxfxhJpBb+7JHn8=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Dec  6 03:59:16 2025 GMT
            Not After : Dec  8 03:59:16 2025 GMT
        Subject: CN=6933aa15-8e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:ef:02:ff:d4:0c:b7:b3:cd:05:e5:96:dd:
                    d1:a9:c0:d2:7c:05:3d:2c:5b:ff:79:79:22:02:a1:
                    1a:01:fd:66:67:43:5b:82:21:8d:48:c7:f4:d8:c5:
                    0b:72:5c:2c:24:aa:bf:f0:a6:07:6a:db:99:42:20:
                    12:20:d2:3c:8d:d2:ef:8d:4a:f4:37:ca:fc:87:11:
                    b1:40:02:13:cb:3b:e9:fe:4a:52:b5:82:e9:0f:43:
                    95:ed:bd:88:20:84:36:c7:d1:58:a4:cf:a4:74:ac:
                    1a:10:1a:70:6e:93:53:46:ba:13:e7:5b:6e:77:88:
                    79:46:e9:7e:93:6b:00:c3:b7:cc:20:5b:d2:52:12:
                    04:30:9d:41:bc:aa:d5:5b:e7:ae:2c:2a:ac:4e:28:
                    41:20:ec:1a:8c:db:00:f5:35:f5:75:0f:06:e0:82:
                    f6:27:21:66:17:f9:5e:8e:a3:e1:8f:ef:88:c2:21:
                    47:b8:c9:93:f9:b0:81:77:2a:73:32:d5:b7:af:d4:
                    4c:17:19:12:d8:fb:64:b1:b7:10:a6:6c:50:08:ab:
                    19:3f:1a:52:5d:78:81:4f:9e:89:d4:e9:10:38:aa:
                    dd:fa:64:34:a9:d8:95:37:e7:a7:91:e2:04:f3:8e:
                    86:8e:85:32:2b:05:97:f8:0b:88:d8:72:3e:fc:4d:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2F:DA:33:1A:37:CF:8E:5F:11:C4:AD:5A:5B:F7:8C:B0:2A:E9:F8
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:90:e6:53:cd:91:7e:e2:f5:4b:66:2a:b9:c8:38:f4:7e:50:
         1b:c0:e6:b5:8b:26:d9:39:e6:53:80:75:83:5a:68:bc:bf:b6:
         a8:dd:e7:a0:04:8e:72:29:2e:dd:08:26:3e:e6:86:62:55:a5:
         02:87:58:51:0e:b5:df:a5:4e:74:dd:eb:f4:9a:d2:65:c3:2d:
         d7:d9:77:b5:21:01:22:e2:ec:63:f2:05:02:88:49:fb:3c:46:
         80:1f:52:af:10:20:6b:09:ad:a7:e3:48:69:11:05:b0:0a:fb:
         f1:ab:82:96:dc:a7:c7:ff:ec:79:00:89:bf:f7:89:27:e7:74:
         a6:6b:85:49:19:e2:83:bc:39:e1:f2:d5:f5:9a:d5:e6:06:71:
         73:bb:e6:c4:fc:25:04:65:95:b7:24:0d:40:5f:10:16:13:11:
         14:76:e9:bf:42:b3:49:ce:07:fb:1e:8c:a0:85:3a:6a:f3:96:
         96:98:d4:c2:ec:a1:14:4a:89:f3:57:33:60:f5:dc:57:1c:cd:
         2c:3c:85:8e:93:0e:28:27:bc:17:e2:36:ec:34:30:6b:4c:be:
         ee:79:07:f7:0f:eb:9f:30:8f:ff:06:8d:68:cf:32:ec:a6:37:
         cd:e0:14:a1:2a:5a:66:a2:0f:9b:e7:fd:21:29:cd:47:4f:c7:
         fa:4e:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:45:40 2025 by rpki-client