This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
File:                     xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft (raw, json)
Hash identifier:          78TNxZd51bV5egu+RvjFIyINeHh1e8XhiUZEOczUkNc=
Subject key identifier:   42:3A:61:9B:EC:4E:B6:53:85:C8:82:0E:D5:89:98:69:23:AA:97:AD
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Certificate issuer:       /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial:       0406
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
Manifest number:          03F7
Signing time:             Sat 06 Dec 2025 03:26:29 +0000
Manifest this update:     Sat 06 Dec 2025 03:26:28 +0000
Manifest next update:     Mon 08 Dec 2025 03:26:28 +0000
Files and hashes:         1: xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl (hash: 1feAN3zM9albRSXKGOh93Nc7q0+uhJhVTpOrQl0UiNw=)
                          2: 916580AACA5A11EEBC5AFA9D775412E6.roa (hash: ztp7/02g9RTHkUR+QiE90a3d75LjUNCsuA1EVWoHlVU=)
                          3: 9291A14C941E11EEBBAE4A1ED25BE465.roa (hash: hoQ0WHzltGfNVqWYNvwkPi5gw4CWcPqSrUNOVflBYxw=)
                          4: 05E09FE07B3C11EFA2CFEB45762E951A.roa (hash: cVeBq/iu4EVAtdwg8HApbjb07OUiv7eyhugdvSJdFOo=)
                          5: AE10BD027B3D11EFA19A5950762E951A.roa (hash: pBZPZsU0a4Hyx7jC1O2ChKZlKrJuIUtFfo6uMv2dY6Q=)
                          6: 151F2E827B3B11EF80BDC540762E951A.roa (hash: +sFHoHgCQHoGDtM7InUTilsDdnQATx775LFAedkvfBU=)
                          7: 71B9ADBAF48311ED8AC17D2C4AD9E6FC.roa (hash: H2R++FRMLxMiqVXy8BRmuUKzD8njGoupil4sDGEQyh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 03:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363EA80AF, serialNumber=C67C6231120941235581D5942565ABF7419DCECC
        Validity
            Not Before: Dec  6 03:26:28 2025 GMT
            Not After : Dec  8 03:26:28 2025 GMT
        Subject: CN=6933a265-c426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:13:c1:1e:56:a8:e2:5e:13:da:c8:52:47:
                    ba:09:0b:ee:5e:f4:6c:52:b2:b1:c8:28:05:2f:78:
                    3d:43:89:f7:0c:d1:46:e9:04:6e:86:7b:37:06:f4:
                    b3:32:52:b5:6b:b6:95:e0:dc:9f:fa:36:a6:77:76:
                    e4:3c:fd:7c:0a:49:89:69:85:39:0b:1e:7e:b9:b2:
                    4f:37:91:c8:85:5f:ef:54:44:5b:48:b0:26:75:dd:
                    c5:a8:db:f7:5b:72:ed:ca:29:61:e4:bb:ae:fd:fb:
                    a1:71:10:85:8b:1b:1c:20:d3:93:8f:6f:4f:4b:25:
                    0a:7b:79:d3:a7:b8:4d:1b:9f:e2:9a:73:bd:c2:db:
                    1d:42:62:db:e0:29:56:99:17:6b:4e:2e:1a:fa:56:
                    b5:8f:e6:ef:24:64:d0:e2:26:44:16:8a:0f:ed:b0:
                    df:b9:de:17:6c:22:35:46:60:30:6c:65:6d:9a:42:
                    6e:e1:95:e9:f0:51:14:0e:32:b6:a7:42:16:52:74:
                    24:2e:81:3a:64:7f:7e:cb:06:8d:76:9d:5b:f4:7f:
                    27:0f:38:aa:c4:01:a3:90:af:91:47:ee:15:3c:34:
                    ba:61:fa:e6:94:29:a5:1a:e0:af:18:06:29:18:a7:
                    bb:e7:70:0e:0e:18:80:a8:6d:00:40:ad:5a:2a:48:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3A:61:9B:EC:4E:B6:53:85:C8:82:0E:D5:89:98:69:23:AA:97:AD
            X509v3 Authority Key Identifier:
                keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:47:19:14:d7:45:7f:4a:1c:76:03:29:00:43:0c:11:3a:
         3b:a6:0a:93:84:a6:a4:f7:6d:13:2c:d0:f2:86:89:07:5b:48:
         86:1e:d6:8a:57:33:3f:d9:21:95:71:b5:9b:1c:d7:1b:b5:f0:
         3d:cf:fe:df:6c:80:9d:55:eb:23:9f:16:d2:d9:7c:2c:4a:7c:
         d6:e3:99:21:07:51:51:c9:da:78:bd:d3:8a:fd:32:cf:ef:2b:
         8f:5a:a8:2f:a3:85:fc:82:0b:d9:ef:71:39:d0:e4:5b:2b:de:
         e4:a2:f7:6d:9e:b0:25:92:f4:a7:79:fb:fe:5c:77:6c:d8:41:
         36:a8:17:fb:b2:13:7a:43:ab:c3:35:f1:b2:17:c7:14:00:e3:
         52:4e:d7:01:1e:62:02:85:03:25:71:90:9d:1f:a2:e3:1e:a7:
         ac:5e:bf:95:ac:61:c8:eb:b4:34:a1:22:b6:5e:43:5e:79:54:
         de:25:29:ba:19:55:cd:a8:58:c5:2e:2c:19:db:89:17:c1:49:
         cf:ba:af:72:d4:b9:48:5e:08:07:d0:19:95:18:dd:e2:e0:61:
         12:4e:99:1c:3f:3a:ac:8c:cd:22:93:13:95:ba:c7:3d:98:ac:
         e4:39:ea:eb:ed:b6:93:51:92:28:cc:53:bc:ad:97:b4:53:0c:
         71:cd:33:e9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0VBODBBRjExMC8GA1UEBRMoQzY3QzYyMzExMjA5NDEyMzU1ODFENTk0MjU2NUFC
Rjc0MTlEQ0VDQzAeFw0yNTEyMDYwMzI2MjhaFw0yNTEyMDgwMzI2MjhaMBgxFjAU
BgNVBAMTDTY5MzNhMjY1LWM0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIfhPBHlao4l4T2shSR7oJC+5e9GxSsrHIKAUveD1DifcM0UbpBG6GezcG
9LMyUrVrtpXg3J/6NqZ3duQ8/XwKSYlphTkLHn65sk83kciFX+9URFtIsCZ13cWo
2/dbcu3KKWHku679+6FxEIWLGxwg05OPb09LJQp7edOnuE0bn+Kac73C2x1CYtvg
KVaZF2tOLhr6VrWP5u8kZNDiJkQWig/tsN+53hdsIjVGYDBsZW2aQm7hlenwURQO
MranQhZSdCQugTpkf37LBo12nVv0fycPOKrEAaOQr5FH7hU8NLph+uaUKaUa4K8Y
BikYp7vncA4OGICobQBArVoqSMzRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQjph
m+xOtlOFyIIO1YmYaSOql60wHwYDVR0jBBgwFoAUxnxiMRIJQSNVgdWUJWWr90Gd
zswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMwNkQ4QzFEL3hueGlN
UklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hueGlNUklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0VBODAvMjNENTRCMjhERERBMTFFRDg2NTMyRTBEMzA2
RDhDMUQveG54aU1SSUpRU05WZ2RXVUpXV3I5MEdkenN3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOy0cZFNdFf0ocdgMpAEMMETo7pgqT
hKak920TLNDyhokHW0iGHtaKVzM/2SGVcbWbHNcbtfA9z/7fbICdVesjnxbS2Xws
SnzW45khB1FRydp4vdOK/TLP7yuPWqgvo4X8ggvZ73E50ORbK97kovdtnrAlkvSn
efv+XHds2EE2qBf7shN6Q6vDNfGyF8cUAONSTtcBHmIChQMlcZCdH6LjHqesXr+V
rGHI67Q0oSK2XkNeeVTeJSm6GVXNqFjFLiwZ24kXwUnPuq9y1LlIXggH0BmVGN3i
4GESTpkcPzqsjM0ikxOVusc9mKzkOerr7baTUZIozFO8rZe0UwxxzTPp
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:48:42 2025 by rpki-client