This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File:                     h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier:          s4wrmW4ka9RtwTRaxafDV45scB3M5kUpk8XAat9O42U=
Subject key identifier:   B6:D4:D5:41:0A:FB:3A:9E:04:9C:44:4B:B2:89:4E:73:91:91:38:11
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       04E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number:          04DB
Signing time:             Mon 08 Dec 2025 09:14:48 +0000
Manifest this update:     Mon 08 Dec 2025 09:14:47 +0000
Manifest next update:     Wed 10 Dec 2025 09:14:47 +0000
Files and hashes:         1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: zwcDJdI3PWiWh96d7YTZpneMoy1WaWyiTFBXc2YIWs0=)
                          2: 5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa (hash: B4meKXMBx/VoIvCrgLDGhjqQbFQ+74jsI7Z9mpVTaGc=)
                          3: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
                          4: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
                          5: 548EDFBAD41611F09F8A6C9FDAE4EC9C.roa (hash: k8FRmBKTxWl53FchMRaZBeBDbnAPcS6cvBX3aUVupmA=)
                          6: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Dec  8 09:14:47 2025 GMT
            Not After : Dec 10 09:14:47 2025 GMT
        Subject: CN=69369708-534c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ff:b7:4b:9b:8d:49:a8:55:58:51:1b:c8:92:
                    e1:04:af:9f:20:66:c2:42:e6:61:f6:6c:d3:12:8f:
                    ea:fd:64:d0:09:6d:00:58:12:79:f7:ee:3e:62:a8:
                    2d:22:ff:07:91:d4:58:21:98:c3:52:b1:68:ea:d8:
                    81:f2:fa:61:95:a0:da:58:da:82:c7:e2:e2:bc:3f:
                    fd:b1:da:af:8c:d1:98:c4:ee:81:46:e0:c6:21:da:
                    61:d1:c4:d4:7e:eb:75:21:59:6c:5a:5f:0a:93:bf:
                    e2:8b:39:a0:04:72:9b:33:0e:07:1c:8f:91:65:85:
                    7a:d8:4d:3a:35:70:a0:2d:ea:06:5b:f8:95:96:a8:
                    de:09:22:55:da:70:91:2d:d8:56:7d:61:06:68:5d:
                    e3:8d:d3:9e:9a:86:f9:ed:23:6d:7b:8e:4d:88:06:
                    e0:7b:39:dd:2f:68:7a:07:79:f5:93:ce:33:bc:ed:
                    74:8d:c4:5e:87:f1:bb:fd:2d:a8:0d:4e:0b:f8:8b:
                    06:46:4e:07:a4:0e:3d:97:53:d9:cf:fe:93:b4:38:
                    1c:34:d6:ee:9c:f9:b3:b2:7a:23:74:fe:de:db:aa:
                    49:3e:75:21:a9:eb:af:17:07:c5:78:a6:d2:0c:2b:
                    6e:db:49:ca:39:cd:c0:f9:41:e8:85:a3:54:34:e3:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:D5:41:0A:FB:3A:9E:04:9C:44:4B:B2:89:4E:73:91:91:38:11
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:02:4a:c3:c1:ac:bd:76:54:91:76:27:9f:6d:0b:6c:1c:d2:
         89:22:1c:16:65:c5:fc:ff:f7:50:ef:b4:2c:a9:51:25:fe:d4:
         94:dc:e5:56:58:60:55:8b:7b:a1:d8:76:8b:6c:3d:b9:a2:20:
         c0:e1:4b:a9:39:c6:f4:24:9e:a6:51:8c:c1:94:1a:7c:db:7a:
         a7:45:54:58:34:18:1c:63:90:1b:eb:ee:bd:66:30:db:ca:a1:
         78:3a:a5:ad:2c:02:ed:27:09:04:ce:fb:72:0c:44:c2:c0:ec:
         44:e1:16:e5:41:9c:73:d8:48:68:34:85:be:91:7b:db:ce:3d:
         a9:08:74:dc:65:d7:99:f5:b8:1c:ba:3b:97:83:0c:35:61:46:
         fc:3f:fe:2f:6b:e0:42:9a:6d:f6:9c:f4:70:be:2c:15:ae:99:
         8c:5e:a6:7d:9f:1f:99:92:aa:0e:86:85:e1:30:c9:00:16:41:
         07:f5:f7:b7:50:0d:9b:2c:6e:c9:48:94:17:40:17:0d:3a:57:
         4f:15:3b:e9:38:6f:1a:42:14:ea:1d:5f:c0:2a:52:4c:58:d7:
         58:62:7b:8c:85:fc:9f:2d:0c:58:e4:2c:76:bd:b3:a0:f8:dc:
         ba:e4:b7:1e:bb:6a:90:07:18:13:7b:7f:ef:e1:dd:65:0e:30:
         84:b5:17:28
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU3MjFBRjExMC8GA1UEBRMoODdGM0FEQzNBNTBBNzc3NjM4MzZBRThFMzdGNUQ5
Mzg2OTU3MTFDQTAeFw0yNTEyMDgwOTE0NDdaFw0yNTEyMTAwOTE0NDdaMBgxFjAU
BgNVBAMTDTY5MzY5NzA4LTUzNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDz/7dLm41JqFVYURvIkuEEr58gZsJC5mH2bNMSj+r9ZNAJbQBYEnn37j5i
qC0i/weR1FghmMNSsWjq2IHy+mGVoNpY2oLH4uK8P/2x2q+M0ZjE7oFG4MYh2mHR
xNR+63UhWWxaXwqTv+KLOaAEcpszDgccj5FlhXrYTTo1cKAt6gZb+JWWqN4JIlXa
cJEt2FZ9YQZoXeON056ahvntI217jk2IBuB7Od0vaHoHefWTzjO87XSNxF6H8bv9
LagNTgv4iwZGTgekDj2XU9nP/pO0OBw01u6c+bOyeiN0/t7bqkk+dSGp668XB8V4
ptIMK27bSco5zcD5QeiFo1Q0425ZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUttTV
QQr7Op4EnERLsolOc5GROBEwHwYDVR0jBBgwFoAUh/Otw6UKd3Y4Nq6ON/XZOGlX
EcowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NzIxLzREODU3OEUwMzdGRDExRURCOEEyQURGOUYxMjIyNDY4L2hfT3R3
NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hfT3R3NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU3MjEvNEQ4NTc4RTAzN0ZEMTFFREI4QTJBREY5RjEy
MjI0NjgvaF9PdHc2VUtkM1k0TnE2T05fWFpPR2xYRWNvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTAkrDway9dlSRdiefbQtsHNKJIhwW
ZcX8//dQ77QsqVEl/tSU3OVWWGBVi3uh2HaLbD25oiDA4UupOcb0JJ6mUYzBlBp8
23qnRVRYNBgcY5Ab6+69ZjDbyqF4OqWtLALtJwkEzvtyDETCwOxE4RblQZxz2Eho
NIW+kXvbzj2pCHTcZdeZ9bgcujuXgww1YUb8P/4va+BCmm32nPRwviwVrpmMXqZ9
nx+ZkqoOhoXhMMkAFkEH9fe3UA2bLG7JSJQXQBcNOldPFTvpOG8aQhTqHV/AKlJM
WNdYYnuMhfyfLQxY5Cx2vbOg+Ny65Lceu2qQBxgTe3/v4d1lDjCEtRco
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:50 2025 by rpki-client