This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          zzfkmdNayXh1EQy0NUnVP2sh5EItANYtiMdgo5SW6eQ=
Subject key identifier:   BB:23:76:48:FF:70:04:11:B8:A4:02:03:7C:D4:28:21:A9:D9:85:CA
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       07B0
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          07AF
Signing time:             Sun 07 Dec 2025 01:54:01 +0000
Manifest this update:     Sun 07 Dec 2025 01:54:00 +0000
Manifest next update:     Tue 09 Dec 2025 01:54:00 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: aq6xECphUETpuRJfdJbxA61JYW3bNdb0jl4A2pq+wR0=)
                          2: 315816DECF5F11ECA89077C9F1222468.roa (hash: nXuxmOxMY30f7U13vd8vjgc0lhwJby8Cd+gymuJClmU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: Dec  7 01:54:00 2025 GMT
            Not After : Dec  9 01:54:00 2025 GMT
        Subject: CN=6934de38-1ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:b9:a2:41:34:2a:52:f4:ec:03:a5:b4:87:
                    d9:ce:e8:7d:5d:93:39:a1:49:ce:ab:38:33:e9:c0:
                    d6:c0:0c:7d:8f:2f:22:cf:b6:71:29:02:03:06:c8:
                    12:4e:b2:20:2c:92:95:b8:46:5e:a5:48:19:e5:ea:
                    e2:42:52:2d:ad:8f:7d:ce:8e:ed:03:fd:07:0d:b5:
                    28:9c:de:d3:55:a9:c6:fd:1a:ec:87:29:f7:28:b4:
                    c2:01:92:f8:ba:38:2d:20:f7:14:42:73:55:ca:74:
                    a0:22:ba:dc:f6:17:04:d5:c5:e2:8d:7f:36:85:79:
                    68:f6:92:f3:8b:eb:df:84:44:06:ee:a8:d1:17:7a:
                    2a:bc:5a:8f:a5:6c:74:1e:9d:3e:44:e5:1d:2e:c2:
                    01:62:e6:94:3c:ab:79:78:53:30:de:0f:79:f0:6f:
                    6f:5c:9a:0c:9c:d3:0b:7a:65:70:7f:b9:57:15:2e:
                    ef:1f:c0:c2:9f:a5:a2:23:f3:8f:cd:86:3d:f1:db:
                    e5:ac:92:5d:a3:38:ef:d9:5e:6f:b6:4a:66:67:aa:
                    e6:9e:4a:04:fc:a9:9f:f3:09:a9:16:95:ef:91:88:
                    b9:7e:0c:3b:11:29:f3:4f:c6:73:1c:b0:3b:f2:ef:
                    e3:4a:43:9a:57:21:a0:cc:96:5b:8a:72:e0:0f:02:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:76:48:FF:70:04:11:B8:A4:02:03:7C:D4:28:21:A9:D9:85:CA
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:61:cb:78:50:ef:9b:7f:53:94:6f:03:a2:5b:3a:5d:2d:04:
         79:0e:65:3d:d4:89:63:24:52:bc:77:81:d0:ce:13:90:11:56:
         88:77:0c:b8:11:f1:77:1a:88:57:a9:a2:88:0b:9a:2a:40:37:
         5b:21:14:83:f3:50:73:b0:41:23:e5:51:d0:1c:1a:c4:9d:01:
         63:4f:b2:e0:6f:72:24:dd:fa:de:6a:89:37:50:f7:99:aa:30:
         72:27:08:13:f5:0a:56:46:1d:c0:97:cf:fa:48:3a:f7:9f:91:
         45:05:46:7f:70:f5:23:ec:96:49:b2:5b:a2:d3:7e:84:86:5d:
         2c:3b:51:61:65:54:8e:0c:06:8c:f7:96:cb:5e:00:42:c4:47:
         fc:03:d9:b5:cf:64:60:39:2a:86:f2:a0:ad:a0:64:e8:6b:62:
         9c:fa:38:82:31:ae:cb:d7:48:14:1e:bc:2a:9b:76:84:7f:d8:
         13:cd:00:67:17:0e:2c:08:e8:92:dc:fb:3d:a6:52:d1:2c:cb:
         eb:6d:a6:f2:c3:85:9d:52:66:78:19:d6:d1:e0:49:5b:6e:fc:
         fb:10:57:10:8a:10:ba:74:8b:82:be:a0:2e:02:c7:44:c0:12:
         c8:ae:7d:d5:3b:77:87:c3:df:fd:a9:e2:48:2b:6a:e0:50:70:
         e1:60:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:25:48 2025 by rpki-client