This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
File:                     8qncFw2PMqBEwa8QUgRdbU4kIus.mft (raw, json)
Hash identifier:          nINbn0YZM5PU90SiiihhsmqeqU9MP1JGJZkyhBU4z5c=
Subject key identifier:   4D:29:29:32:D8:4F:81:9D:8C:74:87:60:D8:74:3D:FF:4E:83:C1:B0
Authority key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Certificate issuer:       /CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Certificate serial:       020F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
Manifest number:          020A
Signing time:             Sun 07 Dec 2025 04:22:08 +0000
Manifest this update:     Sun 07 Dec 2025 04:22:07 +0000
Manifest next update:     Tue 09 Dec 2025 04:22:07 +0000
Files and hashes:         1: 8qncFw2PMqBEwa8QUgRdbU4kIus.crl (hash: 86veLbmLnf59w+zITWfWe2dQGQoSHx7XbblUKxDh/aY=)
                          2: FC4A2F76AE5411F0845735D4DAE4EC9C.roa (hash: SMRY+pIlsouKJZTIiIZKkMn4t/uSvGmP4BPbjx27UP0=)
                          3: 6943C2245A1C11EF8AD3AB9F762E951A.roa (hash: 4I82hmzIVlcUSpjIKbPk3aHDkUVJd1jgQcDFX1IaaAM=)
                          4: E0539FCE5A1211EF8F707262762E951A.roa (hash: bcfZ/95PQQlS2eDlkdUzWliC6UA2tyCBDeR/FA3hgqE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                          rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65RI, serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
        Validity
            Not Before: Dec  7 04:22:07 2025 GMT
            Not After : Dec  9 04:22:07 2025 GMT
        Subject: CN=693500f0-c08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:b8:6b:da:ba:9d:39:1c:6e:88:2f:3e:30:
                    d4:55:55:a2:b2:6e:3e:10:f5:fa:25:cb:05:07:3c:
                    dd:ac:bd:c5:0e:97:a5:71:b8:8e:ea:f0:27:5d:aa:
                    24:79:5b:1d:af:b6:82:17:cd:e7:69:15:b6:7e:89:
                    b4:9f:7e:52:6d:21:88:ee:69:3e:06:ad:72:f9:79:
                    2a:11:4e:2e:8a:15:b9:4d:9d:c1:d7:ec:99:bc:37:
                    5e:fb:a4:3f:af:39:e4:24:3b:77:e2:82:b8:b2:02:
                    c7:27:f4:c2:c5:33:7d:cb:37:a5:ef:68:4b:84:b3:
                    66:32:96:ae:f8:0b:30:01:1d:67:7e:e9:10:15:ac:
                    61:86:f0:81:9b:97:fd:7b:34:47:3d:c5:ad:c1:9c:
                    c2:53:ec:00:86:9d:35:eb:22:f5:ff:f7:88:9d:7d:
                    ec:ef:e4:fd:50:0e:83:a2:50:bb:98:78:9f:66:0e:
                    e0:82:ef:9e:b4:16:32:96:06:4b:17:35:dc:67:49:
                    c0:d9:60:0f:af:90:49:a6:67:a7:69:4d:ed:a0:e9:
                    f9:b4:65:59:60:99:b5:db:73:c6:42:3f:84:53:f2:
                    37:ed:eb:ed:99:59:03:1b:91:8a:30:d6:aa:c0:aa:
                    50:6a:a6:fd:4a:1a:18:51:81:fc:f7:36:a0:5f:02:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:29:29:32:D8:4F:81:9D:8C:74:87:60:D8:74:3D:FF:4E:83:C1:B0
            X509v3 Authority Key Identifier:
                keyid:F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:7d:ba:f0:ba:5f:3c:90:5d:99:a5:37:98:12:79:d7:f3:
         44:74:11:a5:57:10:68:a8:94:84:2d:a2:60:8a:d4:49:de:06:
         0d:38:b8:f5:01:86:19:1e:e2:67:54:58:50:90:21:18:c6:b6:
         6f:b2:52:42:87:e2:b9:a4:de:35:a7:ba:71:d1:a8:cb:65:70:
         d1:f2:a0:26:5b:98:4f:25:08:d5:bd:78:88:91:36:fc:95:2c:
         bd:7a:63:c5:c6:9a:4e:64:bb:d0:e7:04:0f:4d:60:03:1d:fd:
         81:4e:23:a6:99:61:10:55:fa:4d:fc:cd:b1:db:8c:a0:e4:f9:
         97:85:14:8e:d0:72:5f:af:97:f3:2c:c5:4a:85:2e:3f:8d:75:
         5d:3a:a4:43:b8:aa:3d:88:c8:3a:a4:cd:2a:06:77:5f:d6:09:
         74:fa:3a:87:0c:f3:de:e0:38:06:68:fe:5e:19:81:bb:1a:f2:
         f3:4b:4a:37:63:6a:7e:e6:4b:d1:a7:1d:fd:b8:81:5d:d3:93:
         bb:73:f1:60:36:a5:05:b4:c0:df:5a:95:b1:4f:8c:29:ce:f1:
         06:3f:58:a5:06:e9:6e:16:fa:4d:7f:40:9d:7d:e4:ed:75:62:
         9e:7e:16:8e:50:25:29:f6:9a:08:b7:46:69:21:44:29:d9:24:
         24:a8:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:22:45 2025 by rpki-client