This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
File:                     qEB8UNNVEmlZXYTPEkOl86_4EHA.mft (raw, json)
Hash identifier:          pgs0sM7BDVwmZr1soRnOgKA0/qpt4v3MOkPlQdWGE/g=
Subject key identifier:   5E:F1:AD:0B:C1:07:65:6E:F5:98:F3:29:70:A8:E1:7D:DF:DA:48:3E
Authority key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Certificate issuer:       /CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Certificate serial:       098D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
Manifest number:          098B
Signing time:             Sat 06 Dec 2025 01:24:35 +0000
Manifest this update:     Sat 06 Dec 2025 01:24:35 +0000
Manifest next update:     Mon 08 Dec 2025 01:24:35 +0000
Files and hashes:         1: qEB8UNNVEmlZXYTPEkOl86_4EHA.crl (hash: VdZ1sRlkAXMUVG4WMV0CsboD/0yonHKppBiv640SN8Q=)
                          2: 42E0DF7E85E011E989E4CF0DF8AEA228.roa (hash: ub04iL+FdrPKe6xm0DlU5EWb8IsSt+07XZ7Am9PMCkI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                          rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C895RI, serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
        Validity
            Not Before: Dec  6 01:24:35 2025 GMT
            Not After : Dec  8 01:24:35 2025 GMT
        Subject: CN=693385d3-61fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:5a:ca:cc:c0:da:8a:9b:84:ad:4c:8d:0b:
                    5d:72:2b:ca:fd:30:e0:0e:11:97:1d:22:21:7e:c9:
                    ca:25:b9:4f:c6:54:cf:7c:ea:6e:e7:57:8f:ee:2f:
                    eb:25:31:2d:b4:ac:e8:1a:e3:00:77:e4:fd:59:f6:
                    85:99:2b:ea:c4:87:be:a5:37:13:37:71:e1:ba:b6:
                    a3:74:93:94:24:72:16:3c:b1:95:d6:c7:b5:bb:3d:
                    b3:e8:fc:4f:9d:86:f1:71:8d:b7:24:66:dc:33:e7:
                    df:31:b8:1b:53:1d:ac:b6:38:a6:13:cc:d4:30:74:
                    4c:2f:30:cb:86:2a:6a:7f:3e:70:e5:aa:8f:f6:cf:
                    af:d6:69:dd:28:6f:fe:af:5f:31:4b:d7:83:be:23:
                    79:37:f0:39:83:13:4d:d5:7a:83:4f:76:85:59:78:
                    92:04:34:3a:fe:e5:00:dc:b7:4a:05:c7:64:2e:52:
                    e6:bd:81:e3:c3:b6:10:ac:53:a0:e1:16:aa:28:fb:
                    ea:d2:3b:1b:46:36:cc:3a:6f:3d:4c:e4:37:29:99:
                    dd:7f:1f:b4:b8:96:da:79:54:e1:d5:e9:1d:fc:83:
                    48:fc:b4:45:55:86:ca:ee:8f:8f:17:dd:2b:72:a1:
                    37:ba:74:c8:26:ce:18:07:2f:da:8f:39:ed:d9:41:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F1:AD:0B:C1:07:65:6E:F5:98:F3:29:70:A8:E1:7D:DF:DA:48:3E
            X509v3 Authority Key Identifier:
                keyid:A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:8e:5e:b7:b6:df:40:d9:1d:be:1c:ee:2b:b2:6c:e0:83:
         e8:3d:a0:22:57:5e:57:3f:0c:2e:a5:21:90:4c:15:51:09:d0:
         d4:15:28:e4:2d:be:05:a4:71:89:bf:62:1d:d8:d1:d8:14:27:
         ed:05:39:be:57:17:d6:e5:a7:ba:11:b5:9c:29:4f:ee:ef:d4:
         d7:8f:5a:8d:0c:9e:37:1f:46:96:46:a1:b9:d0:ce:68:e4:85:
         da:df:d0:41:fc:ed:8b:5e:7d:be:a9:cc:de:a2:88:a7:4a:14:
         8f:bb:55:59:0f:c1:5f:38:ae:90:a0:40:10:03:6c:05:11:76:
         83:d9:5b:6a:2d:79:f5:3a:2e:e0:29:b8:d3:aa:de:81:d3:f7:
         42:a7:4c:25:bf:09:c3:5f:39:89:b7:ca:6f:30:91:ec:ff:db:
         be:4e:db:d4:e0:b0:10:2a:6f:52:c5:62:f9:d1:57:83:81:01:
         b3:c5:b4:ef:a0:8b:02:ca:3f:00:02:7c:e3:db:3c:6d:61:b8:
         56:de:00:57:ee:6e:e7:f7:85:cf:e3:76:6f:45:a4:e3:f5:cd:
         a2:74:b5:b2:2d:0c:f1:61:db:98:95:c8:40:c4:cd:1c:76:88:
         0d:f3:d4:0f:9d:07:b7:e9:af:49:40:ce:da:af:43:3a:0d:aa:
         f4:05:95:a1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM4OTVSSTExMC8GA1UEBRMoQTg0MDdDNTBEMzU1MTI2OTU5NUQ4NENGMTI0M0E1
RjNBRkY4MTA3MDAeFw0yNTEyMDYwMTI0MzVaFw0yNTEyMDgwMTI0MzVaMBgxFjAU
BgNVBAMTDTY5MzM4NWQzLTYxZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM51rKzMDaipuErUyNC11yK8r9MOAOEZcdIiF+ycoluU/GVM986m7nV4/u
L+slMS20rOga4wB35P1Z9oWZK+rEh76lNxM3ceG6tqN0k5QkchY8sZXWx7W7PbPo
/E+dhvFxjbckZtwz598xuBtTHay2OKYTzNQwdEwvMMuGKmp/PnDlqo/2z6/Wad0o
b/6vXzFL14O+I3k38DmDE03VeoNPdoVZeJIENDr+5QDct0oFx2QuUua9gePDthCs
U6DhFqoo++rSOxtGNsw6bz1M5Dcpmd1/H7S4ltp5VOHV6R38g0j8tEVVhsruj48X
3StyoTe6dMgmzhgHL9qPOe3ZQUyjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXvGt
C8EHZW71mPMpcKjhfd/aSD4wHwYDVR0jBBgwFoAUqEB8UNNVEmlZXYTPEkOl86/4
EHAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDODk1L0Y0MjBDNkE0ODVEQzExRTk4MDg3QkYwQkY4QUVBMjI4L3FFQjhV
Tk5WRW1sWlhZVFBFa09sODZfNEVIQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L3FFQjhVTk5WRW1sWlhZVFBFa09sODZfNEVIQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUM4OTUvRjQyMEM2QTQ4NURDMTFFOTgwODdCRjBCRjhBRUEy
MjgvcUVCOFVOTlZFbWxaWFlUUEVrT2w4Nl80RUhBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfD45et7bfQNkdvhzuK7Js4IPoPaAiV15X
PwwupSGQTBVRCdDUFSjkLb4FpHGJv2Id2NHYFCftBTm+VxfW5ae6EbWcKU/u79TX
j1qNDJ43H0aWRqG50M5o5IXa39BB/O2LXn2+qczeooinShSPu1VZD8FfOK6QoEAQ
A2wFEXaD2VtqLXn1Oi7gKbjTqt6B0/dCp0wlvwnDXzmJt8pvMJHs/9u+TtvU4LAQ
Km9SxWL50VeDgQGzxbTvoIsCyj8AAnzj2zxtYbhW3gBX7m7n94XP43ZvRaTj9c2i
dLWyLQzxYduYlchAxM0cdogN89QPnQe36a9JQM7ar0M6Dar0BZWh
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:47 2025 by rpki-client