This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
File:                     cIjstS9EHLVBKRrSDIupB7vUQFI.mft (raw, json)
Hash identifier:          n0FJUP96W5N5TY7eeC0LjysT/PrhmrCWSBoQDCHD6V4=
Subject key identifier:   D9:5F:0B:2F:17:6B:63:12:E8:2F:93:85:60:5F:15:B9:0C:41:3B:6A
Authority key identifier: 70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52
Certificate issuer:       /CN=F367FECCAR/serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
Certificate serial:       066E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
Manifest number:          066C
Signing time:             Sat 06 Dec 2025 02:17:33 +0000
Manifest this update:     Sat 06 Dec 2025 02:17:33 +0000
Manifest next update:     Mon 08 Dec 2025 02:17:33 +0000
Files and hashes:         1: cIjstS9EHLVBKRrSDIupB7vUQFI.crl (hash: vWaCdGsiqr6Z+buOkzFSe32eURw3FP79aw8ZewnN5pg=)
                          2: EBAB53E0EA3E11EB96CC7D3AD8A014CE.roa (hash: 8ccVEiAliBiH1WhFkoVeVW9p7ZDUf8PeWahrlb8I6+s=)
                          3: B9EDE330EA3F11EB9BDDAB3BD8A014CE.roa (hash: UpWRiY04Rhit9Uj9Y+xZz3ZrxHoCtYC3IGMvoMbSZgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                          rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAR, serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
        Validity
            Not Before: Dec  6 02:17:33 2025 GMT
            Not After : Dec  8 02:17:33 2025 GMT
        Subject: CN=6933923d-e54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:c6:36:b9:3b:8a:fb:2b:39:60:a5:fa:ae:
                    67:e3:82:90:58:32:b1:a0:60:5f:00:72:05:e8:cf:
                    6f:d4:47:98:1f:44:5f:bb:6d:37:aa:50:1a:a8:ff:
                    0e:34:ab:6e:f0:ba:f3:ba:d7:dc:de:8c:09:ec:4e:
                    22:ca:02:ec:b5:55:21:7e:b8:15:cc:6d:0c:1d:07:
                    c9:2b:a1:b5:c0:a8:12:a6:f8:52:24:d2:76:7a:d8:
                    f8:63:6a:15:cd:2f:b5:61:7c:2e:d2:00:30:47:87:
                    0e:f0:11:b4:5c:cf:66:b6:ec:c1:b0:58:04:bd:05:
                    37:29:ba:8e:a5:ae:79:51:88:62:2e:af:e9:a3:d8:
                    05:bc:44:f6:83:ee:f6:95:db:a5:85:7e:c5:9f:19:
                    2a:e3:cd:1c:58:bf:4f:e5:96:e1:4a:1d:30:7f:d2:
                    3f:56:97:a8:1c:40:78:76:6e:d0:e8:e8:b2:b7:64:
                    83:50:b9:2d:bc:22:96:f6:89:2d:9e:22:1a:e0:e6:
                    ee:8d:22:2e:97:b2:ef:76:5f:66:09:61:7c:07:64:
                    ae:b3:68:b8:04:3a:57:23:c5:91:aa:23:c4:3f:dc:
                    eb:ac:10:9b:eb:b5:8a:2c:6e:3c:b4:37:55:0b:43:
                    c1:7e:c1:d5:e2:1f:7e:e2:54:9e:d2:16:57:a1:4d:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5F:0B:2F:17:6B:63:12:E8:2F:93:85:60:5F:15:B9:0C:41:3B:6A
            X509v3 Authority Key Identifier:
                keyid:70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:89:c0:cc:3e:1b:53:ea:fc:90:31:33:bf:a4:e8:62:41:
         a6:26:bc:a7:8a:23:c5:74:82:41:5b:1d:ea:e5:6c:e5:c0:32:
         df:68:91:ed:4c:63:55:22:8f:a3:15:20:12:0e:d9:c1:7d:b9:
         4c:8b:d8:b4:28:8e:07:1a:19:3d:c1:9d:89:2c:be:0f:b6:d2:
         2f:65:8c:7d:c0:41:83:87:f9:4a:17:36:7e:6d:db:3d:81:a7:
         45:c7:7a:7c:8c:92:a1:3a:16:0a:17:39:17:57:09:16:95:e5:
         9e:c7:63:3c:41:d3:ce:e3:f2:78:87:72:1c:59:d5:8f:56:db:
         cd:d4:d5:60:c0:fe:6b:9d:48:71:90:ef:e4:22:4b:07:05:17:
         d6:9d:c0:f1:93:9c:83:5b:14:f2:79:70:a1:b8:c1:a6:87:7e:
         89:2b:ee:ff:ab:1c:55:19:02:49:0d:55:eb:30:45:17:1a:bd:
         c2:04:79:1b:db:a7:7e:bf:0d:03:a2:58:f1:b6:1c:03:97:cb:
         0d:9b:c4:17:8a:fb:4b:1a:2e:dd:8a:f3:2d:d4:b7:48:66:22:
         bb:c0:f7:80:b2:df:6f:15:29:f2:9e:44:52:2e:f3:4c:88:6c:
         6b:fe:2e:02:95:10:f0:2b:96:33:cc:2b:a7:19:ee:59:3c:3f:
         c7:a1:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:48:47 2025 by rpki-client