This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          2CslF01IzVHolEbWLe/4PBMtn3Knp7BzcnWNEY1j81k=
Subject key identifier:   73:56:0F:4C:4A:92:E9:26:26:69:E7:71:03:14:F5:3D:6C:A3:55:D3
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       01FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          01FC
Signing time:             Mon 08 Dec 2025 04:24:21 +0000
Manifest this update:     Mon 08 Dec 2025 04:24:20 +0000
Manifest next update:     Wed 10 Dec 2025 04:24:20 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: UpnLNvqbuR0H8OeDjLgqWkX1fik55RMy4pIPGvC+wuY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Dec  8 04:24:20 2025 GMT
            Not After : Dec 10 04:24:20 2025 GMT
        Subject: CN=693652f5-de39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:aa:04:b7:fe:a6:d0:aa:88:19:7d:6e:77:
                    ce:e2:41:c6:38:65:29:22:18:91:13:d3:f2:4f:ce:
                    01:63:e1:25:86:da:87:0b:b6:72:45:27:f4:36:9d:
                    7c:8e:c3:4b:8d:10:6e:30:1c:99:c6:a3:3d:5c:2d:
                    7b:ce:58:d1:2a:65:c2:ca:57:22:e4:77:cc:9e:0f:
                    79:ce:65:1e:a4:7a:56:3a:4c:4a:09:8c:01:23:c8:
                    a7:a1:a1:d6:7f:c2:37:05:ed:64:73:6d:fa:56:75:
                    f9:d8:7c:22:14:9d:7f:a9:d8:77:2f:d1:fa:0c:b0:
                    73:d9:43:07:23:a1:cf:3f:47:31:22:35:6d:31:34:
                    44:ec:81:5f:fa:28:32:5c:a2:b5:70:e0:19:94:ee:
                    9c:ae:66:f4:3d:d3:1d:3d:0c:3f:42:ae:fb:90:f5:
                    0d:66:ff:a6:09:61:b6:a7:d9:e4:02:7c:14:f0:78:
                    22:e0:30:82:3a:17:be:54:65:ee:fb:0a:34:29:e5:
                    ca:58:89:e4:56:09:64:a3:0a:ec:bb:30:e1:13:a8:
                    0e:43:f7:a1:0c:ae:f2:b6:fd:45:d7:3b:ea:af:e2:
                    ca:63:c8:11:a4:45:e0:cc:94:4b:cf:4e:cc:50:66:
                    97:21:4f:eb:90:7d:40:26:c8:b0:6a:67:60:25:5b:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:56:0F:4C:4A:92:E9:26:26:69:E7:71:03:14:F5:3D:6C:A3:55:D3
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1b:24:99:f5:e9:62:cc:6e:3c:fc:e6:3c:ec:6d:c3:c7:81:
         0d:99:67:8d:3c:c2:db:5f:ae:a8:22:d5:14:0c:2f:4c:bf:5e:
         27:f3:7b:6d:13:2a:f7:c1:63:69:3c:b3:f9:be:3a:3f:6f:1f:
         84:8e:4c:e5:ce:0c:2a:cd:64:5e:79:4e:2a:d0:8a:f0:8d:9f:
         e6:8f:03:68:a8:2a:e7:71:52:8d:6f:f4:37:14:d0:1f:09:98:
         56:ca:7d:43:f8:2c:03:12:bb:26:99:d9:c3:81:b4:c9:ea:60:
         c4:33:66:d8:31:2a:2d:5d:12:6b:b7:7a:7d:57:79:bc:8f:c4:
         81:2a:2b:b2:94:8e:a8:19:82:e2:eb:d5:4a:ec:c2:ea:61:38:
         fe:aa:48:81:e5:3c:96:30:2f:15:77:06:26:7d:b7:83:4a:e9:
         53:ee:1b:05:5d:8c:bb:43:d6:2c:5a:5c:40:ac:3a:f3:98:1c:
         56:1c:05:45:c5:24:55:6a:63:b3:01:b9:2a:b9:be:30:b9:e8:
         f1:25:23:75:e8:76:b2:49:c6:f7:90:be:03:24:f1:d1:e4:f3:
         39:e0:cf:c2:44:76:08:ab:73:25:ec:b9:48:96:43:98:42:da:
         02:4c:dc:b0:30:3e:42:f4:37:8e:e5:b7:ab:5f:d7:69:2a:88:
         23:ae:ba:d0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTg1ODNBRjExMC8GA1UEBRMoRkJGNEM3Q0Y1RUM4NjJENDJEQzgxMEEwNDMwMDIx
MUJBMkI3QzUwODAeFw0yNTEyMDgwNDI0MjBaFw0yNTEyMTAwNDI0MjBaMBgxFjAU
BgNVBAMTDTY5MzY1MmY1LWRlMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJoaoEt/6m0KqIGX1ud87iQcY4ZSkiGJET0/JPzgFj4SWG2ocLtnJFJ/Q2
nXyOw0uNEG4wHJnGoz1cLXvOWNEqZcLKVyLkd8yeD3nOZR6kelY6TEoJjAEjyKeh
odZ/wjcF7WRzbfpWdfnYfCIUnX+p2Hcv0foMsHPZQwcjoc8/RzEiNW0xNETsgV/6
KDJcorVw4BmU7pyuZvQ90x09DD9CrvuQ9Q1m/6YJYban2eQCfBTweCLgMII6F75U
Ze77CjQp5cpYieRWCWSjCuy7MOETqA5D96EMrvK2/UXXO+qv4spjyBGkReDMlEvP
TsxQZpchT+uQfUAmyLBqZ2AlWxItAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUc1YP
TEqS6SYmaedxAxT1PWyjVdMwHwYDVR0jBBgwFoAU+/THz17IYtQtyBCgQwAhG6K3
xQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4NTgzLzZFNTU4OTQwNEU0QzExRUZCM0YwNjdBRjc2MkU5NTFBLy1fVEh6
MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1fVEh6MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTg1ODMvNkU1NTg5NDA0RTRDMTFFRkIzRjA2N0FGNzYy
RTk1MUEvLV9USHoxN0lZdFF0eUJDZ1F3QWhHNkszeFFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARGySZ9elizG48/OY87G3Dx4ENmWeN
PMLbX66oItUUDC9Mv14n83ttEyr3wWNpPLP5vjo/bx+EjkzlzgwqzWReeU4q0Irw
jZ/mjwNoqCrncVKNb/Q3FNAfCZhWyn1D+CwDErsmmdnDgbTJ6mDEM2bYMSotXRJr
t3p9V3m8j8SBKiuylI6oGYLi69VK7MLqYTj+qkiB5TyWMC8VdwYmfbeDSulT7hsF
XYy7Q9YsWlxArDrzmBxWHAVFxSRVamOzAbkqub4wuejxJSN16HayScb3kL4DJPHR
5PM54M/CRHYIq3Ml7LlIlkOYQtoCTNywMD5C9DeO5berX9dpKogjrrrQ
-----END CERTIFICATE-----
Generated at Mon Dec 8 18:19:02 2025 by rpki-client