This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          OxXcHagLZrKLqBTQ23ByxS/Ad0MQ+t/TncZZPHH9Foo=
Subject key identifier:   EA:07:93:6F:CF:5D:E9:5B:6A:4B:D0:13:0A:81:7D:07:41:20:C9:EA
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       08CE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          08CB
Signing time:             Sat 06 Dec 2025 01:41:07 +0000
Manifest this update:     Sat 06 Dec 2025 01:41:06 +0000
Manifest next update:     Mon 08 Dec 2025 01:41:06 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: cxmwVUhhBeyoV7oG68wpAcz117LYvHlNqjkTj/Gvt50=)
                          2: F31E6B76755711ED9B93B29DF1222468.roa (hash: NAQ4ruRr3CeKBEbG5bbYSwTINb1GDpCxoruFb42Xz/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254 (0x8ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Dec  6 01:41:06 2025 GMT
            Not After : Dec  8 01:41:06 2025 GMT
        Subject: CN=693389b3-295d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:e8:6b:a0:69:fd:fb:c4:dc:d9:47:75:80:
                    45:fa:c0:e2:64:09:ff:57:a2:96:61:44:ff:cb:16:
                    e4:1a:68:38:56:1e:99:6a:f4:01:2e:58:b5:4e:e3:
                    9b:d8:ca:67:88:24:2e:26:da:6c:c4:cc:bd:66:08:
                    ee:b4:fa:72:07:a5:1f:00:c8:35:85:31:67:24:8a:
                    d1:10:15:df:56:20:9a:6f:92:0f:b7:45:b4:11:09:
                    0d:19:68:d9:3f:45:ca:ec:f8:83:3e:68:e8:ac:53:
                    0e:7c:b9:4c:bc:83:be:aa:ec:63:2a:7e:ef:9d:29:
                    96:c8:08:ca:7e:88:dd:3e:a8:a8:cd:16:47:9f:a6:
                    c9:95:04:83:c5:6a:37:06:6e:17:69:6b:dc:2d:bb:
                    e5:db:eb:fb:fa:07:fd:b9:ef:02:25:99:69:c7:ee:
                    4b:5c:c5:27:83:7b:d2:3b:83:da:e1:10:eb:50:78:
                    d9:b3:75:09:1c:43:06:a4:55:cd:c3:0f:ff:bc:d9:
                    60:6a:44:79:d6:84:97:8f:34:9c:0d:04:0d:ee:46:
                    a4:f0:c1:5e:4d:75:24:40:dd:27:82:55:d8:b8:58:
                    ec:e5:d0:5f:41:60:ef:13:70:3a:0b:0d:99:5e:19:
                    8a:6e:4b:05:70:dd:24:97:e1:4e:7e:d9:8a:5b:22:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:93:6F:CF:5D:E9:5B:6A:4B:D0:13:0A:81:7D:07:41:20:C9:EA
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:da:a5:8d:45:de:83:3a:30:34:a8:ef:74:49:22:51:1f:8a:
         08:48:e6:e2:8b:75:c1:c5:24:dc:6d:91:09:28:89:03:70:93:
         46:78:0f:59:08:c5:3f:b0:12:cd:ee:00:c0:b1:92:b6:89:a4:
         fe:cf:a7:33:0b:4c:8f:f4:72:3f:55:e5:40:dd:b2:b8:94:bc:
         35:ce:4f:4c:2b:db:e3:98:25:cc:6d:c9:94:8b:35:ba:4b:f6:
         ed:70:a0:ec:20:34:30:58:55:98:86:b6:e9:b2:13:1d:f3:19:
         ae:09:01:4a:bd:55:c6:a7:17:6f:c2:18:31:be:45:e9:f0:c4:
         95:dc:d2:3d:c7:37:0c:e0:55:ee:98:7e:a7:9f:e4:87:4c:f6:
         4b:0d:f0:c5:8c:c3:b0:c5:24:b7:b7:6c:aa:a8:08:21:cd:36:
         ff:26:8c:52:0e:ce:a3:3b:dd:f4:98:6a:2b:ed:67:3e:3b:d0:
         45:8b:10:3d:14:75:85:73:a3:f8:81:5c:a9:ac:a6:2d:31:b1:
         81:30:fa:7d:f0:d1:47:d7:36:ce:57:b9:42:2a:c4:c1:50:69:
         33:83:ac:0b:76:e1:41:72:ab:78:b7:1d:83:dc:cd:a4:b8:a5:
         f2:17:62:31:b6:6b:2e:29:9f:b4:10:9f:45:de:6e:65:d0:9d:
         12:ab:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:06:56 2025 by rpki-client