This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
File:                     i-GoLMm4kURYOcv-vplg8wM9pUI.mft (raw, json)
Hash identifier:          lugSf4am4c9grSM3+KGPnfr7ZepLK3fvwAXyxBr16sw=
Subject key identifier:   8F:00:C1:37:B3:91:FE:0B:75:21:E7:95:BD:2B:25:24:AF:24:50:21
Authority key identifier: 8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42
Certificate issuer:       /CN=F365FABERI/serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
Certificate serial:       AC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
Manifest number:          AA
Signing time:             Sun 07 Dec 2025 04:58:40 +0000
Manifest this update:     Sun 07 Dec 2025 04:58:39 +0000
Manifest next update:     Tue 09 Dec 2025 04:58:39 +0000
Files and hashes:         1: i-GoLMm4kURYOcv-vplg8wM9pUI.crl (hash: YHhjLIFBrbmcIrj96zsVKhPznM5+GBA+h+HAkoZO0xc=)
                          2: 71089910A43C11F0A4AF11ADDAE4EC9C.roa (hash: U5LDkkC16R2QjhJl9qo+wu8OGplriwnSfZRYIPerRao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                          rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FABERI, serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
        Validity
            Not Before: Dec  7 04:58:39 2025 GMT
            Not After : Dec  9 04:58:39 2025 GMT
        Subject: CN=69350980-ad5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:05:3a:95:8d:f9:9d:e3:61:ce:d5:67:77:
                    3b:9e:ad:cb:3d:a8:a5:59:c0:8b:d2:e5:b7:d2:11:
                    cb:15:cb:e8:3b:8a:34:9b:fb:df:2e:96:52:f7:e4:
                    b8:99:67:ab:0a:17:fa:5c:b5:96:83:67:ee:4f:e0:
                    bd:63:07:81:b9:9a:9b:66:38:bd:b8:5f:37:9d:19:
                    0a:8f:a0:f3:b3:a1:ec:33:a6:ac:df:0c:cb:45:64:
                    1f:0e:f8:08:42:cd:69:11:32:70:6d:d0:aa:87:2f:
                    b2:ba:ef:66:e6:29:d9:b9:2b:37:7c:9e:66:ae:85:
                    7d:54:84:55:97:31:93:47:36:c8:d7:91:e1:a0:99:
                    cb:14:c1:ae:ec:c0:02:18:f0:f2:b3:91:84:11:1a:
                    c7:1f:32:1f:b0:a0:70:70:64:1d:03:16:bf:a0:88:
                    63:91:06:a4:d0:06:58:27:62:a5:9d:6d:24:73:ba:
                    ea:83:1b:90:1c:ef:c1:ff:a7:ae:57:69:a8:8f:94:
                    55:dc:8d:61:2d:5b:ef:42:1c:6f:5e:7e:58:0e:11:
                    bf:1f:12:e4:ba:f7:a4:85:ed:0d:d2:56:65:84:0c:
                    d7:a6:22:98:d5:e8:cf:b4:ab:0d:89:19:9f:39:b8:
                    15:52:bd:95:df:8f:82:9e:f3:2b:af:f9:95:9b:49:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:C1:37:B3:91:FE:0B:75:21:E7:95:BD:2B:25:24:AF:24:50:21
            X509v3 Authority Key Identifier:
                keyid:8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:00:e5:8b:47:fb:2b:5b:44:d3:8f:09:06:21:50:06:14:47:
         15:68:ce:30:84:b5:75:14:26:c3:1f:6d:5f:fa:07:2e:90:7a:
         58:d0:f7:4c:cc:d0:4e:e7:1e:82:e0:86:cc:d4:f7:ed:68:66:
         f0:6c:a2:fd:10:f4:38:09:86:3c:89:30:67:2c:60:7f:d7:a7:
         d5:fa:e9:0a:b5:59:be:eb:09:5a:bb:ba:bf:08:75:91:df:9b:
         82:79:b1:8f:63:24:3e:79:81:29:c4:93:dc:57:c6:e8:5a:85:
         a8:d0:5f:34:f2:cb:6b:c2:0c:16:e6:8f:3c:fa:98:4d:ae:3f:
         82:a9:d6:3e:e2:35:b2:8f:24:60:a6:d0:48:0d:b7:63:63:22:
         02:f5:fe:9d:a1:3b:be:64:5e:3f:a6:b3:d3:d3:bf:90:03:00:
         ea:1b:b7:16:4b:71:ce:b3:4f:6f:ab:34:db:ea:a6:15:34:6e:
         b6:d8:a4:d7:e6:ae:99:15:58:7c:a4:13:9b:6d:6f:79:5c:4c:
         d8:67:ba:71:ce:12:3a:2d:d2:e5:53:86:8b:e1:57:4c:31:00:
         57:49:f7:e7:1a:36:00:ee:be:3d:8a:29:43:ba:6e:bf:13:90:
         54:d1:b0:28:22:51:2b:ef:a0:bc:66:d9:9c:8a:fb:26:04:77:
         17:0e:20:77
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUZBQkVSSTExMC8GA1UEBRMoOEJFMUE4MkNDOUI4OTE0NDU4MzlDQkZFQkU5OTYw
RjMwMzNEQTU0MjAeFw0yNTEyMDcwNDU4MzlaFw0yNTEyMDkwNDU4MzlaMBgxFjAU
BgNVBAMTDTY5MzUwOTgwLWFkNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAFwU6lY35neNhztVndzuercs9qKVZwIvS5bfSEcsVy+g7ijSb+98ullL3
5LiZZ6sKF/pctZaDZ+5P4L1jB4G5mptmOL24XzedGQqPoPOzoewzpqzfDMtFZB8O
+AhCzWkRMnBt0KqHL7K672bmKdm5Kzd8nmauhX1UhFWXMZNHNsjXkeGgmcsUwa7s
wAIY8PKzkYQRGscfMh+woHBwZB0DFr+giGORBqTQBlgnYqWdbSRzuuqDG5Ac78H/
p65XaaiPlFXcjWEtW+9CHG9eflgOEb8fEuS696SF7Q3SVmWEDNemIpjV6M+0qw2J
GZ85uBVSvZXfj4Ke8yuv+ZWbSRh3AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUjwDB
N7OR/gt1IeeVvSslJK8kUCEwHwYDVR0jBBgwFoAUi+GoLMm4kURYOcv+vplg8wM9
pUIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGQUJFL0Q5QjgyMjFBNTM0MTExRjA5OTQwMzlEQURBRTRFQzlDL2ktR29M
TW00a1VSWU9jdi12cGxnOHdNOXBVSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2ktR29MTW00a1VSWU9jdi12cGxnOHdNOXBVSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUZBQkUvRDlCODIyMUE1MzQxMTFGMDk5NDAzOURBREFFNEVD
OUMvaS1Hb0xNbTRrVVJZT2N2LXZwbGc4d005cFVJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpAOWLR/srW0TTjwkGIVAGFEcVaM4whLV1
FCbDH21f+gcukHpY0PdMzNBO5x6C4IbM1PftaGbwbKL9EPQ4CYY8iTBnLGB/16fV
+ukKtVm+6wlau7q/CHWR35uCebGPYyQ+eYEpxJPcV8boWoWo0F808strwgwW5o88
+phNrj+CqdY+4jWyjyRgptBIDbdjYyIC9f6doTu+ZF4/prPT07+QAwDqG7cWS3HO
s09vqzTb6qYVNG622KTX5q6ZFVh8pBObbW95XEzYZ7pxzhI6LdLlU4aL4VdMMQBX
SffnGjYA7r49iilDum6/E5BU0bAoIlEr76C8ZtmcivsmBHcXDiB3
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:30:52 2025 by rpki-client