This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
File:                     dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft (raw, json)
Hash identifier:          KwHN5orYpop5I3dbls0GS0H6BDvRnjbz3yHgX4P8Rw4=
Subject key identifier:   23:16:32:8E:6B:99:F5:96:3F:9E:BA:24:FB:83:1F:24:44:33:89:AD
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Certificate issuer:       /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial:       B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
Manifest number:          AD
Signing time:             Sat 06 Dec 2025 05:03:44 +0000
Manifest this update:     Sat 06 Dec 2025 05:03:43 +0000
Manifest next update:     Mon 08 Dec 2025 05:03:43 +0000
Files and hashes:         1: dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl (hash: leyPkbV46dR4RF3W3E2qFzjaiT4z71Eoe/bOCrvHQM4=)
                          2: 8ECCBE949E9D11F086DF85BADAE4EC9C.roa (hash: kKrZ81PCn2m+za7JHhmjM4tkepM4BFJV4gSi/pF/HxI=)
                          3: AEC64E0AB80511F0971756F5DAE4EC9C.roa (hash: ykyErqJ9jMFlHt469iZFdc3zrZTDRfcAk+IWnW9xqMk=)
                          4: 845849AA629911F094123B7FDAE4EC9C.roa (hash: Yquy7lg+89nLssAsEAQYTmSrAV7dfqopFLqC+l9lG4Q=)
                          5: 0CCEA6DC5E9211F08D7B5BC0DAE4EC9C.roa (hash: mAyYLRcyIUE3TElt1ycaBN45k+kC6zc7xFNJFD0mN6o=)
                          6: EE670342B42211F0993F858CDAE4EC9C.roa (hash: iVTP+qjlG2fos49aJPA63qSgM1CByci4d+Gh4O+20Ng=)
                          7: 50FB913E629911F098850F7FDAE4EC9C.roa (hash: eDO1JULENP2DvOHSotlUtwQVGoJC7gZEaQKOXc6qaIw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 05:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
        Validity
            Not Before: Dec  6 05:03:43 2025 GMT
            Not After : Dec  8 05:03:43 2025 GMT
        Subject: CN=6933b930-32b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:da:d8:e0:fc:a1:45:aa:c0:9a:ec:41:dd:
                    c1:08:5c:1e:d4:b2:b9:c9:4d:a7:0d:35:25:3e:25:
                    94:dd:9a:eb:13:14:00:62:50:4b:e9:68:fe:78:ed:
                    2a:8e:72:60:37:c1:4d:46:e7:30:b7:23:c7:ab:f5:
                    ae:0c:7d:f6:1b:06:61:34:18:aa:90:0a:11:03:99:
                    cd:91:8a:15:c3:4f:bd:ba:cc:59:71:19:c9:a8:1f:
                    67:bf:80:8a:c3:35:12:e5:5b:2d:ce:4a:63:97:3b:
                    1e:8f:55:99:5e:af:32:7e:c6:22:06:9e:21:ac:5f:
                    7e:3b:62:64:c5:ac:c6:e1:d3:7a:20:3a:a3:fb:17:
                    93:99:02:44:58:f1:3f:b8:59:49:08:03:33:18:2a:
                    c1:84:4c:21:7a:41:3f:a6:35:28:ce:bd:a3:ba:a5:
                    cc:8f:2d:45:d1:b3:d4:d4:0d:d9:d3:85:1d:5d:80:
                    40:6b:9d:79:61:9a:15:72:4b:a0:38:c5:6b:59:a3:
                    dd:92:71:3a:ed:2a:ad:f6:c8:35:cd:17:7d:c4:86:
                    de:d8:1d:a7:b3:2a:a5:aa:06:bc:15:f5:95:fd:b6:
                    1c:bd:fa:4f:96:dd:f1:22:b0:7b:ee:37:59:48:cf:
                    68:1d:03:15:78:9b:2f:bc:70:03:79:99:00:18:a8:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:16:32:8E:6B:99:F5:96:3F:9E:BA:24:FB:83:1F:24:44:33:89:AD
            X509v3 Authority Key Identifier:
                keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f4:68:6f:ab:a2:d8:af:97:d5:a1:8a:0e:9e:5c:16:56:c0:
         99:70:d3:48:1e:4d:a7:91:83:99:22:05:49:ae:f2:14:6f:a9:
         b5:fd:1d:f4:50:1c:03:43:b6:af:33:ef:e4:4d:d3:ec:6a:8c:
         0a:2a:31:8a:ae:61:65:d5:12:cd:9d:8b:6e:f2:47:29:c6:d7:
         95:51:53:f0:e7:4c:c6:f8:19:63:12:31:8e:31:64:3c:ef:59:
         d7:f5:30:f4:bb:17:c3:78:3b:ed:f9:ed:ce:77:6f:fc:f2:98:
         82:7c:a8:dd:f1:83:08:ad:cc:81:4b:a2:28:44:e1:fa:fa:98:
         f9:99:b6:9f:2f:3a:07:03:23:b1:98:81:68:08:5b:3a:7a:c2:
         9a:c1:8d:9e:d0:cf:b2:b2:8f:c5:00:ad:28:8a:dd:8f:5a:da:
         07:1d:6e:31:93:8f:80:20:d3:fd:77:ab:99:63:3b:6d:1e:af:
         66:fa:e3:3a:aa:7d:c7:ba:e0:14:f5:e2:c5:22:95:9f:85:d7:
         25:80:4f:63:2f:cb:f5:88:37:9d:af:11:b9:3d:3c:a4:a9:9e:
         c0:d7:59:c9:33:f0:a4:8a:fa:92:b0:fa:fd:eb:c9:b3:aa:f0:
         d2:ec:5a:d5:3f:24:1c:4b:56:d3:4a:15:22:e7:70:e8:a0:88:
         01:10:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:46:17 2025 by rpki-client