This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File:                     Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier:          6H9+/RjFGhpXPuTaLVkmdj0ezqEwkXNKsclj4PHPQoI=
Subject key identifier:   82:AA:62:34:AE:1B:1F:A3:CF:23:62:8A:A6:52:6B:A8:15:2E:16:1A
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer:       /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial:       058B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number:          0585
Signing time:             Sat 06 Dec 2025 02:40:17 +0000
Manifest this update:     Sat 06 Dec 2025 02:40:17 +0000
Manifest next update:     Mon 08 Dec 2025 02:40:17 +0000
Files and hashes:         1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: Gtwu1a0dcqsGzYMkZGspCrsmVqTebmoS8qjYRwDM+NQ=)
                          2: B59F24BCF57211EC993D889DF1222468.roa (hash: maJQ7QpaTAEJtJEDY71F+/C/LFPT623BEcfsghzWeRo=)
                          3: 7FA7A028F57211ECB728E09CF1222468.roa (hash: SHmJD0o/WKe9DuMaCzkIRZ50PJsm8QXP+INyJbesPiI=)
                          4: 331F5746A0F411ECAE812B975A40D577.roa (hash: FvEjzuf2UFe1epBdLgowypdTxhYaL6zKJK6RJCwngCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
        Validity
            Not Before: Dec  6 02:40:17 2025 GMT
            Not After : Dec  8 02:40:17 2025 GMT
        Subject: CN=69339791-4ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:f0:1e:82:f4:5b:a9:9d:cd:6a:01:d3:7b:
                    02:06:96:92:65:0e:fc:a5:d6:cd:62:04:c4:8e:3f:
                    b2:94:67:44:c8:66:5d:32:1a:9f:7d:fb:3e:73:7a:
                    78:ce:22:95:f7:c6:8c:15:70:a2:d8:c3:38:a0:98:
                    26:1c:b4:3e:a6:d1:d2:bb:33:d6:10:df:c8:9f:00:
                    4f:38:85:c5:66:72:8d:a0:52:ec:15:09:56:65:95:
                    31:9d:62:80:5a:8c:23:f9:a8:ca:72:bb:b3:ac:2c:
                    30:31:df:e6:a4:d9:3c:4d:4c:3f:d9:5b:8d:ca:d3:
                    7d:a8:04:93:b6:2c:94:73:72:54:83:47:9b:91:e3:
                    63:60:25:74:fe:76:34:32:7c:74:ca:c4:94:aa:f7:
                    49:99:b2:33:0b:c2:11:07:23:6a:0b:de:dd:92:b9:
                    70:6b:e9:61:f7:6a:20:e0:9e:94:c0:ba:4e:05:2d:
                    e7:5c:1b:02:14:9d:fe:f7:33:4a:28:08:cb:3c:4f:
                    56:cc:44:24:91:67:fa:2d:03:dc:40:a5:71:15:f0:
                    67:27:26:bd:23:96:e4:66:8e:d5:45:2e:3b:4c:fc:
                    a0:34:0e:3f:54:bc:ce:35:37:26:86:96:36:06:71:
                    74:df:32:84:de:fe:b6:fb:40:be:fe:50:52:88:8e:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AA:62:34:AE:1B:1F:A3:CF:23:62:8A:A6:52:6B:A8:15:2E:16:1A
            X509v3 Authority Key Identifier:
                keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:96:7b:56:0a:d8:68:9a:b3:9e:d7:26:72:5f:61:70:10:6d:
         3c:17:1a:d9:1a:f0:53:9a:76:fc:28:62:0f:90:c0:9d:c4:4d:
         61:d8:61:1e:14:6e:c5:ed:67:22:16:a0:85:d6:a4:cd:c2:d6:
         c0:b3:e5:0d:81:9f:97:da:28:0b:8c:87:6e:84:4a:95:73:c5:
         ae:1f:f9:64:6a:60:5d:0e:11:91:ce:cd:b4:25:a1:c8:58:ab:
         65:66:b9:5e:f6:d4:a6:bb:54:16:2f:42:05:5a:5e:20:be:44:
         7e:ab:7a:eb:4f:a3:9b:0b:d4:2b:47:51:da:fc:39:2d:3b:74:
         96:12:80:d0:51:7a:a8:d5:df:a2:ea:39:fb:8a:24:2f:7a:2b:
         be:be:4c:6a:e7:cf:1c:f0:a3:0e:e5:88:0c:51:d5:56:64:e8:
         aa:07:b9:0d:d0:41:81:9c:62:d0:7f:a1:d0:15:a5:33:22:0d:
         51:af:5a:b7:22:f8:9a:e5:6e:3b:67:be:98:9e:40:2f:cf:46:
         70:00:77:07:8c:6a:1a:38:f8:23:b6:3c:6c:be:00:d9:f8:15:
         e5:4e:ce:b8:25:17:79:0a:80:70:00:95:29:06:cf:db:c9:2c:
         fd:49:5d:96:9e:f0:ed:1f:e2:b0:cc:be:8e:8b:dc:6e:77:77:
         0b:06:d1:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBYswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDM5MzBBRjExMC8GA1UEBRMoMzVDRjA2N0RDMjZFRTQ4OTVGNEIxNkFEOUJEMzAw
RkVBQkMzQTM1MzAeFw0yNTEyMDYwMjQwMTdaFw0yNTEyMDgwMjQwMTdaMBgxFjAU
BgNVBAMTDTY5MzM5NzkxLTRlYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOcvAegvRbqZ3NagHTewIGlpJlDvyl1s1iBMSOP7KUZ0TIZl0yGp99+z5z
enjOIpX3xowVcKLYwzigmCYctD6m0dK7M9YQ38ifAE84hcVmco2gUuwVCVZllTGd
YoBajCP5qMpyu7OsLDAx3+ak2TxNTD/ZW43K032oBJO2LJRzclSDR5uR42NgJXT+
djQyfHTKxJSq90mZsjMLwhEHI2oL3t2SuXBr6WH3aiDgnpTAuk4FLedcGwIUnf73
M0ooCMs8T1bMRCSRZ/otA9xApXEV8GcnJr0jluRmjtVFLjtM/KA0Dj9UvM41NyaG
ljYGcXTfMoTe/rb7QL7+UFKIjlWrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUgqpi
NK4bH6PPI2KKplJrqBUuFhowHwYDVR0jBBgwFoAUNc8GfcJu5IlfSxatm9MA/qvD
o1MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzOTMwLzYzQzQ2RUM4QTBGMzExRUM5NDZFREE5NDVBNDBENTc3L05jOEdm
Y0p1NUlsZlN4YXRtOU1BX3F2RG8xTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05jOEdmY0p1NUlsZlN4YXRtOU1BX3F2RG8xTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDM5MzAvNjNDNDZFQzhBMEYzMTFFQzk0NkVEQTk0NUE0
MEQ1NzcvTmM4R2ZjSnU1SWxmU3hhdG05TUFfcXZEbzFNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCilntWCthomrOe1yZyX2FwEG08FxrZ
GvBTmnb8KGIPkMCdxE1h2GEeFG7F7WciFqCF1qTNwtbAs+UNgZ+X2igLjIduhEqV
c8WuH/lkamBdDhGRzs20JaHIWKtlZrle9tSmu1QWL0IFWl4gvkR+q3rrT6ObC9Qr
R1Ha/DktO3SWEoDQUXqo1d+i6jn7iiQveiu+vkxq588c8KMO5YgMUdVWZOiqB7kN
0EGBnGLQf6HQFaUzIg1Rr1q3Ivia5W47Z76YnkAvz0ZwAHcHjGoaOPgjtjxsvgDZ
+BXlTs64JRd5CoBwAJUpBs/bySz9SV2WnvDtH+KwzL6Oi9xud3cLBtG0
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:49 2025 by rpki-client