This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          eUyOlG2a+iYOBbCvjJDyKEQ0CDpWeaXdGhScYmsLlVo=
Subject key identifier:   B1:25:D0:BB:E6:32:AC:42:22:2D:02:D9:8A:B4:49:4C:95:13:6E:8B
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       0556
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          0555
Signing time:             Sat 06 Dec 2025 02:42:44 +0000
Manifest this update:     Sat 06 Dec 2025 02:42:44 +0000
Manifest next update:     Mon 08 Dec 2025 02:42:44 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: 2ipaLoU5KhUK9yO7YPXY59ThiHwUhlScBIZfIqq7kN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Dec  6 02:42:44 2025 GMT
            Not After : Dec  8 02:42:44 2025 GMT
        Subject: CN=69339824-e3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:79:68:00:cb:f1:ce:51:04:0f:21:2b:7d:
                    97:bb:f4:9a:6a:41:47:5b:f1:80:94:ca:34:a7:88:
                    9a:5b:3e:3c:1a:99:0d:72:5b:c9:49:65:39:29:ec:
                    5e:37:7f:8a:39:20:d6:ec:82:04:e6:e7:04:74:c5:
                    16:c4:9f:0b:e8:2f:92:72:83:49:78:0c:b7:d1:a2:
                    27:ba:b4:15:2d:76:84:41:69:a9:c0:07:2f:9b:93:
                    52:45:05:8d:95:4b:75:4a:50:38:ae:dd:b0:8a:23:
                    e9:b3:b4:0b:ef:11:13:24:75:54:a9:f0:22:df:6d:
                    7e:90:5f:bc:1e:81:0f:47:e8:2b:f9:78:a7:db:5e:
                    ff:fb:69:65:88:12:c1:d2:d1:b9:e3:cf:16:4d:e8:
                    ee:49:7c:26:0c:7c:ed:f9:47:2e:61:c2:a1:7c:fa:
                    8d:03:ef:26:0d:11:38:3d:13:0b:37:98:51:c6:27:
                    6d:53:42:5c:12:29:e1:0c:a5:7d:a2:8e:23:e5:86:
                    fe:fe:c3:ee:96:36:e9:c1:18:22:ac:f4:66:0b:f1:
                    a5:a2:21:3b:65:ef:c8:c6:77:d0:29:13:69:b7:a9:
                    22:28:bf:36:83:c5:10:b1:95:f4:31:e2:24:de:d8:
                    f0:79:48:79:42:bd:f7:74:18:45:b3:97:de:e3:04:
                    92:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:25:D0:BB:E6:32:AC:42:22:2D:02:D9:8A:B4:49:4C:95:13:6E:8B
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cf:9e:6e:f4:46:f7:80:ca:03:fc:05:20:5a:6e:a7:90:f8:
         a3:c7:27:71:f1:59:9f:4e:b4:e6:9d:8f:78:04:a6:1a:4a:3c:
         9e:01:5b:85:d8:e3:62:c5:f3:2c:48:12:70:cb:71:42:97:f1:
         96:49:8a:2e:64:ba:2b:14:91:e8:fa:e5:33:98:29:74:5c:24:
         ad:69:88:8c:44:16:49:82:7e:78:7c:ee:2b:4b:52:a3:70:2a:
         b1:f1:64:ae:55:9e:57:50:0d:a2:ea:b0:4a:3e:72:f0:59:12:
         34:7e:5d:e4:c4:0c:ab:73:29:72:44:13:0e:18:95:9b:bb:e0:
         12:7f:bc:2f:16:15:cd:2f:38:d4:74:45:4c:01:c1:61:a1:76:
         45:d4:47:13:71:1d:cb:6f:f1:db:de:5e:df:0f:d1:9c:a5:0f:
         86:24:a5:7a:ca:85:aa:74:1a:7b:f7:b5:d2:8a:75:46:20:2d:
         92:f7:3f:f6:e3:7f:e8:71:ef:70:12:12:a4:85:07:65:79:82:
         78:a9:4c:63:59:57:5e:06:f9:14:1d:a3:84:4a:e7:91:06:ae:
         a3:1e:00:c5:9b:22:c6:28:62:f2:9b:06:c3:01:b8:27:d2:06:
         22:b2:ca:a0:e5:d2:9a:2a:1e:39:26:56:2a:da:26:58:8c:eb:
         89:9c:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:31 2025 by rpki-client