This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          /1wfaKyLw378dAGN697Z766Kgl2AllcWmi6jhg7djGA=
Subject key identifier:   C1:19:3B:DA:70:0F:41:37:0E:9E:AA:B3:3E:E1:C2:4D:73:34:B3:DD
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       022E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          022D
Signing time:             Sat 06 Dec 2025 04:17:55 +0000
Manifest this update:     Sat 06 Dec 2025 04:17:54 +0000
Manifest next update:     Mon 08 Dec 2025 04:17:54 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: FmxNO+Tq/jo0fJvKf0plb6b7p7JyHjCHqww52yEl1K4=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Dec  6 04:17:54 2025 GMT
            Not After : Dec  8 04:17:54 2025 GMT
        Subject: CN=6933ae72-c786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:eb:9b:c7:f1:4f:46:39:c9:08:43:d3:82:
                    09:31:66:d7:d6:4c:0c:4c:89:71:07:b0:f7:0e:ba:
                    c5:ee:66:30:33:54:28:da:7f:c1:22:ed:a5:a0:be:
                    69:e9:4f:a5:1f:70:86:39:7e:3c:11:bd:e5:d0:b1:
                    38:69:f3:f4:e5:3f:24:a7:61:15:95:01:9f:64:e7:
                    1f:23:4d:48:cd:ae:12:e9:9b:33:25:27:05:40:99:
                    6a:a1:20:51:b6:a1:60:49:b7:d3:5a:cc:7f:44:9c:
                    dc:e8:bd:d2:04:0e:d9:c6:a8:16:79:05:37:bb:03:
                    10:25:45:5f:0e:4a:6d:a3:3e:69:b7:0b:d1:4d:eb:
                    0b:36:c6:e9:21:89:1b:9c:d2:ca:62:9a:b5:76:71:
                    e5:e9:0c:8b:b0:41:6a:23:d9:a5:5f:82:ad:34:92:
                    4f:51:94:09:14:91:1d:28:82:61:5d:5d:15:04:6a:
                    16:62:40:81:dc:08:7b:ba:44:2c:7b:5c:b7:e2:8a:
                    65:9d:6b:e8:c7:27:b7:12:e3:54:c6:13:b1:f7:e6:
                    05:ec:01:9b:02:53:9d:2f:99:d6:b5:7b:0e:a3:6d:
                    dc:74:8d:fe:03:37:37:eb:2a:e5:d7:5f:10:52:92:
                    7f:62:fa:09:b4:b2:f9:c8:da:a7:70:f3:b5:32:2e:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:19:3B:DA:70:0F:41:37:0E:9E:AA:B3:3E:E1:C2:4D:73:34:B3:DD
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:19:3d:de:9f:50:34:31:e1:a6:65:2a:11:76:f0:eb:9f:b0:
         a7:b3:af:d6:9c:d9:b2:de:40:25:b0:ee:52:01:75:ec:f5:ae:
         ad:a4:16:ae:d6:dd:e3:aa:c3:cb:c4:43:69:79:89:64:e6:a5:
         10:bc:db:7c:b0:16:80:6c:9a:28:ba:91:7b:cb:f3:9e:2b:30:
         f1:ae:4d:5f:62:d1:ef:c4:e7:1a:8b:f6:df:d9:bb:0b:f4:98:
         d2:09:36:d8:47:e0:bf:0d:0f:61:da:8b:e2:6a:c8:37:bf:85:
         71:b9:2a:84:e1:81:88:d2:08:57:a9:31:35:68:98:66:59:39:
         59:c6:05:45:dc:c5:6d:da:71:82:6a:5b:20:08:ad:72:ec:14:
         2f:09:9d:8d:37:ec:64:45:e1:22:d5:03:f3:e4:24:b3:6a:85:
         2b:63:fb:9a:89:74:dd:cd:93:44:a3:ae:ca:de:3c:0e:82:7f:
         fe:61:3b:85:28:4f:c5:99:83:0c:6f:ed:96:48:9c:4a:70:c9:
         4e:2e:c2:a9:e1:66:73:6a:c9:0f:3b:8f:d8:56:ed:6c:14:66:
         99:b9:7d:ae:0c:da:98:05:50:13:2e:2f:02:1f:cc:be:af:38:
         24:5e:62:05:0e:66:56:65:a6:25:e3:76:ff:aa:64:7f:68:21:
         af:93:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:45 2025 by rpki-client