This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          FID1znCH60h9Pm7A9YiNjGrRgQpH6ry2SQiXyop+5Kc=
Subject key identifier:   CA:BD:F0:89:7F:FC:01:D8:12:08:55:77:77:2D:30:A2:F7:34:E5:38
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0E86
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0E7C
Signing time:             Sat 06 Dec 2025 01:00:29 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:28 +0000
Manifest next update:     Mon 08 Dec 2025 01:00:28 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: zfzluiKyRWa+wCDIc8XKm9/Mn2O6G+gsSZnKtDVBf0U=)
                          2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
                          4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
                          5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
                          7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
                          8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
                          9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3718 (0xe86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Dec  6 01:00:28 2025 GMT
            Not After : Dec  8 01:00:28 2025 GMT
        Subject: CN=6933802d-75a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:2e:6d:02:6c:7b:47:06:eb:1b:36:f4:e9:
                    2d:c1:1e:02:39:f6:45:47:83:38:9d:36:6b:7f:1e:
                    e3:19:a5:9b:01:24:fe:5b:9f:dc:30:5a:4a:32:19:
                    fd:6f:5e:3d:99:40:91:66:95:5b:a4:b6:8a:dc:99:
                    78:9c:c2:d4:6b:3f:f8:bf:90:0c:12:73:41:46:69:
                    d5:9c:3a:cb:b6:39:20:69:20:bf:6d:fd:58:1e:95:
                    16:11:d6:a8:7c:7e:12:57:2e:d6:44:a5:24:bb:2d:
                    07:35:2e:5b:34:a8:30:65:2f:06:cc:8e:db:3f:be:
                    cb:0d:70:27:a8:2e:f3:3e:56:6a:63:75:d4:7d:a0:
                    31:26:19:e1:a8:fc:78:98:6f:26:78:81:ef:0f:40:
                    ec:8f:77:0f:f2:50:bd:cb:d9:35:e8:18:51:b1:42:
                    a4:05:8c:c7:d5:24:06:51:89:0e:f8:f6:fa:04:b3:
                    d3:06:3a:55:51:31:45:fe:29:75:46:07:2f:da:ac:
                    f5:28:87:5a:b2:b1:6d:3d:ce:0a:50:24:8b:54:02:
                    f8:92:03:83:62:a8:32:43:6e:68:c6:30:e4:e8:ad:
                    ba:4e:ee:38:6f:44:7e:f4:a4:ff:b0:aa:63:56:c4:
                    e8:45:e9:7e:8d:85:2f:f2:d6:fe:63:80:e3:2b:78:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:F0:89:7F:FC:01:D8:12:08:55:77:77:2D:30:A2:F7:34:E5:38
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:a4:ea:0f:01:a0:e8:05:dd:85:61:cd:ee:92:9f:15:d6:
         0e:b8:0f:71:a6:c8:7c:16:4e:a7:12:6d:2d:c9:aa:3a:3c:82:
         25:69:f1:aa:cd:5b:2c:c0:03:e6:e0:4c:6c:ad:2a:22:69:c8:
         37:73:fb:df:77:77:d9:cd:72:36:8f:7d:80:90:81:f4:65:3b:
         10:dc:ff:59:80:02:f7:22:e5:fa:8d:2f:3a:58:9d:1c:1d:e1:
         c0:84:be:97:ae:19:95:18:9d:56:0d:9c:d5:0b:02:4e:2b:a0:
         41:97:ea:98:25:6d:43:65:2d:77:4e:16:a7:6a:b0:9e:26:bd:
         9a:3b:ff:27:a6:4e:ad:e3:ba:c9:80:c5:bf:3c:b3:6f:d5:e9:
         e9:d7:21:17:fc:9e:f2:7c:18:13:a6:69:51:e5:2f:28:68:b1:
         1e:77:4a:fe:68:43:28:86:ef:06:30:1a:0e:3c:3f:12:48:84:
         a3:54:10:3d:9b:f6:22:a0:4b:5f:c3:bd:45:ce:69:7c:95:71:
         6f:f7:21:4b:e1:32:aa:79:32:c4:08:9b:fa:98:92:7f:f6:9d:
         09:f0:3d:b6:93:11:af:28:8d:9c:08:a8:c8:a1:37:5b:50:79:
         6d:14:cc:e7:69:5f:d8:eb:8f:da:bc:fc:c3:a3:ac:1b:43:74:
         98:13:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:25 2025 by rpki-client