This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier:          g7dZFf+fdf+hRV32qzne7LqLYJxysp4Zg0jo58xys3s=
Subject key identifier:   6C:8F:E7:AF:17:85:3B:5F:EB:9E:08:2C:CA:82:2E:7F:E6:7F:B7:21
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer:       /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial:       02B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number:          02AE
Signing time:             Mon 08 Dec 2025 04:05:08 +0000
Manifest this update:     Mon 08 Dec 2025 04:05:07 +0000
Manifest next update:     Wed 10 Dec 2025 04:05:07 +0000
Files and hashes:         1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: nJLtYoW5fVBJraxKklnci3+hzGlmnKx1t75FGU/04dc=)
                          2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
                          3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
                          4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
                          5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
                          6: 2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa (hash: wvL1zVkk4PrEbO1hOI+/jbrgVbiJrtyBQ/7aczeZOJg=)
                          7: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Validity
            Not Before: Dec  8 04:05:07 2025 GMT
            Not After : Dec 10 04:05:07 2025 GMT
        Subject: CN=69364e73-3ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:c7:69:31:3f:08:ac:6b:0b:8a:cb:54:16:
                    1a:85:f7:a6:b2:67:96:cc:78:a6:50:a4:7f:58:55:
                    67:02:e8:b9:c0:84:e5:89:c0:ff:94:fd:78:6e:10:
                    7f:9c:9b:fb:6b:3e:fd:c2:21:d6:35:6a:c5:aa:9e:
                    3e:dc:ee:17:32:b2:5d:a1:5c:7a:8a:65:05:01:24:
                    6c:a4:d1:d7:57:5a:98:d2:22:6b:f0:90:84:4f:7c:
                    83:a5:80:ed:4d:bc:83:17:50:62:34:fa:1d:06:a4:
                    61:b5:9a:72:7d:37:f9:3e:89:3b:e9:e0:24:a1:0e:
                    19:4f:b8:26:a9:ae:54:e7:79:f5:a3:d3:00:41:58:
                    fc:45:d1:aa:d3:c7:08:e9:f1:8e:c9:34:7a:08:18:
                    07:00:db:58:fe:76:26:88:3f:92:a3:4e:03:4c:79:
                    6d:fa:ea:72:cc:0f:1e:04:8d:54:2d:90:37:95:a6:
                    10:43:17:eb:56:67:95:9d:72:61:57:74:3b:7b:de:
                    35:e4:38:a1:ca:8f:f1:8c:99:3c:c7:2d:0c:86:f0:
                    ac:15:4d:91:96:aa:6b:2c:66:a2:af:a8:18:77:c4:
                    f9:ba:67:75:dd:53:6a:ff:ad:80:70:77:2f:03:55:
                    29:7d:c8:e5:a7:cd:96:e3:4c:8f:05:2e:d4:2d:63:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8F:E7:AF:17:85:3B:5F:EB:9E:08:2C:CA:82:2E:7F:E6:7F:B7:21
            X509v3 Authority Key Identifier:
                keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:08:e9:a7:2d:ac:97:d6:de:af:c8:8f:40:6f:93:18:71:df:
         46:90:4f:9b:e8:4a:be:86:72:ac:40:2c:ad:a2:f3:a7:72:b7:
         e8:cb:01:10:d7:e4:c3:ed:1e:1e:5c:b1:11:f3:a6:e2:ce:eb:
         e6:fe:ca:06:3a:04:73:e0:2e:8d:9e:d8:4e:01:90:f8:79:c7:
         ac:3a:fc:5a:c4:05:d8:19:55:61:74:c5:32:1d:3e:27:c6:6d:
         77:db:16:d9:a2:9e:22:78:84:33:17:fb:c7:fd:4d:cc:61:df:
         c4:79:99:80:87:a1:c8:18:7e:5a:90:f4:4f:7d:9f:ac:31:2b:
         45:9c:45:12:7e:50:9a:ee:7b:38:78:25:59:2f:36:12:96:be:
         b5:90:87:b4:43:cd:6b:9b:f6:5c:f2:59:59:52:e7:f8:24:b3:
         30:f9:52:9a:9e:d8:28:c9:04:13:4b:7f:97:20:f4:43:eb:ab:
         4b:39:5c:8f:0b:4c:3b:80:1d:7b:36:cb:9c:1c:b7:ce:8e:a6:
         a8:88:cb:69:8a:e8:73:84:56:f2:25:dc:a5:dd:32:30:b9:4b:
         30:5c:8c:08:b5:57:69:33:ee:4d:47:78:26:13:72:eb:5e:80:
         e8:ba:22:bf:49:1e:9a:19:ac:77:c3:d3:d9:25:5e:9f:41:9d:
         7f:fe:39:e5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICArcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRBRDFBRjExMC8GA1UEBRMoODBENDM1QkJDNzcwOTRFODVCN0JGMzA4MjU4MEQx
MjdCOTEwNzc5RTAeFw0yNTEyMDgwNDA1MDdaFw0yNTEyMTAwNDA1MDdaMBgxFjAU
BgNVBAMTDTY5MzY0ZTczLTNhYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4IMdpMT8IrGsListUFhqF96ayZ5bMeKZQpH9YVWcC6LnAhOWJwP+U/Xhu
EH+cm/trPv3CIdY1asWqnj7c7hcysl2hXHqKZQUBJGyk0ddXWpjSImvwkIRPfIOl
gO1NvIMXUGI0+h0GpGG1mnJ9N/k+iTvp4CShDhlPuCaprlTnefWj0wBBWPxF0arT
xwjp8Y7JNHoIGAcA21j+diaIP5KjTgNMeW366nLMDx4EjVQtkDeVphBDF+tWZ5Wd
cmFXdDt73jXkOKHKj/GMmTzHLQyG8KwVTZGWqmssZqKvqBh3xPm6Z3XdU2r/rYBw
dy8DVSl9yOWnzZbjTI8FLtQtY8gLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbI/n
rxeFO1/rnggsyoIuf+Z/tyEwHwYDVR0jBBgwFoAUgNQ1u8dwlOhbe/MIJYDRJ7kQ
d54wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0QUQxLzIyOEY1QjMyQ0YwMTExRUU5NEY1ODZCOTc3NTQxMkU2L2dOUTF1
OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dOUTF1OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTRBRDEvMjI4RjVCMzJDRjAxMTFFRTk0RjU4NkI5Nzc1
NDEyRTYvZ05RMXU4ZHdsT2hiZV9NSUpZRFJKN2tRZDU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVCOmnLayX1t6vyI9Ab5MYcd9GkE+b
6Eq+hnKsQCytovOncrfoywEQ1+TD7R4eXLER86bizuvm/soGOgRz4C6NnthOAZD4
ecesOvxaxAXYGVVhdMUyHT4nxm132xbZop4ieIQzF/vH/U3MYd/EeZmAh6HIGH5a
kPRPfZ+sMStFnEUSflCa7ns4eCVZLzYSlr61kIe0Q81rm/Zc8llZUuf4JLMw+VKa
ntgoyQQTS3+XIPRD66tLOVyPC0w7gB17NsucHLfOjqaoiMtpiuhzhFbyJdyl3TIw
uUswXIwItVdpM+5NR3gmE3LrXoDouiK/SR6aGax3w9PZJV6fQZ1//jnl
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:59 2025 by rpki-client