This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File:                     f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier:          bKYfATeTCB9IOKEJfBQxg6uCSj8vVIhje80/jPCUP2g=
Subject key identifier:   F8:9A:9F:06:8A:66:82:D3:1A:FC:EE:A1:65:4A:D9:FE:D2:92:4F:19
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10B0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number:          1004
Signing time:             Mon 22 Dec 2025 00:45:34 +0000
Manifest this update:     Mon 22 Dec 2025 00:45:31 +0000
Manifest next update:     Wed 24 Dec 2025 00:45:31 +0000
Files and hashes:         1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: nY+PtR4g0jZMLZmuP/3s78V0SxtwSxDYGrTJirnkKKM=)
                          2: wDt4YuRBsALhCei7e6wo-u2Xl08.cer (hash: iV1DqoQdpA6h00cHhaDR2nv6t+uTSU3HY5ed54+LPVo=)
                          3: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7QtdnaQza7N4jDnPovc1w8gF48Ij+qmzZLDIkyC63O8=)
                          4: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: 4EvvdvWNdGnaHC0ksGa9n34SIrtveRqx7aUjfJ5vgAM=)
                          5: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: bBV5obWB28b3fjtHXuMC6GE0zb3F2jnXWysfemiYklw=)
                          6: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: CC3hg+mcFc4UQvWif2Z6cGSaFUXRvXNRNJBbDnIHepk=)
                          7: wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer (hash: 0Qu/WhiFaF0UkAqN2ciihsd0a1XbIULq2HaYd8rPizg=)
                          8: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: DpTRWhjCxqJPv0tA3HKAJTvp2o1a7CI8HDBrqVfTOTg=)
                          9: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: dslyP+wRPUnioCJrBU2EarUy9Gis6BBRiNzD4Ok9qtg=)
                          10: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: rOTGOTt3lhWZ9SfTS235YkHvYjCeNdAkZtvftw0cvF4=)
                          11: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: JYh5Iqrt4qoHSp6swIesPEtVVSEDDysMp71dOKb2ow0=)
                          12: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: AhHBgKR9j/6MxZii8GMzEcZ3icKR5vSn1U96Lut42oI=)
                          13: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: BA4R/qMEmq9shG2AzCjk53F+kykngTuQNTlYjUKEEzc=)
                          14: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: jkPeHZLkph4AzMqn8n5gUr6W70YNpBkeTAvz2j8/sTw=)
                          15: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: NTfudnRepXxK1NGJ1lOWpfBClqBr1/uPZzAhn8ECkk0=)
                          16: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: SWyEW0ny7DVt22fVGXyUitLE2JKk91dpiv1RN6IWJYM=)
                          17: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: SKc016m8ZfBvJifk221ftKMQnw2b9DH1+uoR0q7sCrI=)
                          18: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: km5ZQRKr6MuRSMSkLPjEu48TVmAJxaKADCUvLLLg5pE=)
                          19: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 2ldNgrPGbqk7UmMFXzOFMiDHVNv+SnifaFsIo1ljShU=)
                          20: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: x30oGqbSvDOgtg8EVHsWv0U6J+s6R5CmW9IqDdDHFik=)
                          21: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: 9hpPYklOD3XG/G8S7pdKH5CWcV6yfvG+mmcFzdbdANU=)
                          22: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: bxdyY+YC5sMpCqFa4CchM4qwJZ4/UDW29OSQHF8vXKg=)
                          23: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: uCddsWdTHuhu5zutaMvClmXkP3yNhSdEe0lg+ZnGJf8=)
                          24: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: qzqa/EWjKYt10shJo6iqZfyO12/WeiCNb221+cMBDl4=)
                          25: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: A7NGQB9Y2tDK0hdHpY14+eWiYUNSilHI6Cst0V4PN8g=)
                          26: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: ogkdWMCSCp8TH1UsMGksxpT3c3fYVMvy5zn9Uq5GspE=)
                          27: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: s9iHUxqoqEycr0EEXtUBqyzDYCl+yqrLelwsJZWIgl0=)
                          28: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: pEQr+A60oSWY/kcRrRbGG0Tp9jeeN4neU7ayipYIlpw=)
                          29: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: NmhijwgaaRi7wfyDtBhDaDrHkolrhLeYVUkjNd6EoNc=)
                          30: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: QY1uIbSDSrt6JZK4BqOanR6OMpSYU61g21V6Nk95CXY=)
                          31: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: Vx8lkbe2NR9bjeDT7O6AuwX/6SOJPkcaQrSLwwrYULA=)
                          32: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: 2LL1qyXgeBRiJonvJRKLq/Q4yexHpVqtjOIDk4QZo6E=)
                          33: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: rS2pcd7r7ooWVJNNDn+2116kQ37UYpf+i3iwIY8mG5c=)
                          34: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: TNkTO/pixFRRXLoSIPl4IxLnS9nF1IoL86pR0YdCzQg=)
                          35: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: TD/rChZMStyBeKdEGSrDGDlahtRc7JCEAFzA6+l3cRM=)
                          36: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: ikkS/ZM+jg2Wfqd8pmrhX/sC4BJhR/M0ONoBX5eZ3qM=)
                          37: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: zDmK+MKgRiaziwVTgCusHGz8cinKCsIwDgBaRFvdSU0=)
                          38: oHAxgIgisopRzqJ21BM9cIqlFO0.cer (hash: lrGeA2aaokf1+03I4sIOyzSNIv0LR4anBlfCux+Uo30=)
                          39: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: a7LKY45MlLtsNts6PbOTMOHUPfe/UslJzJzAyod75Hc=)
                          40: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: 1bY/LWpjUEz4TNJbFG0XryMvHG3oC1g3zrRLJvSnwXM=)
                          41: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: wqMcExsMYRVHd4ij2jyGrBfJAXDPQ5Idh6TDGeKZLXY=)
                          42: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: n1VD08oUn/IQqNfjAeJRzt/NrlyG0pwtoNy2cGABQKg=)
                          43: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: geB1ekaUnJR16eMRyFdk0rOgBzNirsc2PboPTc3PEPk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4272 (0x10b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Dec 22 00:45:31 2025 GMT
            Not After : Dec 24 00:45:31 2025 GMT
        Subject: CN=694894ab-0558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:9d:30:8f:67:03:07:ee:37:d8:c4:10:57:
                    7e:55:12:a4:80:1c:2e:11:64:09:b1:b9:2d:12:80:
                    f9:4d:ea:a0:c8:58:12:11:70:07:cc:11:d1:19:48:
                    68:63:bb:e8:58:14:b3:59:80:c9:55:9a:68:28:f4:
                    86:18:3a:8a:d8:87:df:9f:f4:c6:69:14:92:cd:7d:
                    6a:d2:01:20:e8:c1:a1:c0:17:1a:73:2d:0e:20:8e:
                    64:b8:e4:0f:ef:da:5f:c0:13:53:f4:a9:1a:47:d2:
                    c6:d5:c3:8d:5a:89:7f:f4:3b:25:d0:63:ef:2a:9b:
                    db:7a:42:3a:d7:6d:96:29:98:2e:31:e1:33:00:6f:
                    c6:4b:3a:9c:37:a6:f9:15:8e:5c:c6:db:c0:74:ed:
                    40:fd:ec:59:2f:b6:bf:b9:2c:70:ee:3f:fb:59:e6:
                    db:6d:e3:c9:91:40:43:9f:58:d2:b5:a2:9f:36:1a:
                    e5:eb:e0:65:50:ea:4f:76:a9:a7:37:6a:8a:0f:68:
                    93:80:c5:93:c0:e2:ca:83:4b:76:a5:a1:a3:b0:34:
                    a9:93:f0:13:46:c6:db:51:af:11:27:19:0c:79:d7:
                    32:00:50:04:f5:e3:5b:e9:24:33:d2:a6:f3:d6:93:
                    b1:1a:f3:fa:1d:28:67:e5:8f:a7:0e:2c:01:45:0b:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9A:9F:06:8A:66:82:D3:1A:FC:EE:A1:65:4A:D9:FE:D2:92:4F:19
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:1d:22:ee:03:6d:a4:e7:7a:2b:a5:38:6f:3b:0c:fc:7a:
         4a:8d:24:05:f2:e8:17:d0:7f:52:e9:e2:b7:21:9a:11:6a:76:
         45:93:00:4b:db:8a:de:ce:3c:f9:cc:aa:4a:8f:1e:72:b3:a9:
         fa:2b:e9:3d:1e:2d:60:59:43:d8:0e:f7:59:83:77:92:80:10:
         80:f9:e6:ca:26:a5:fc:30:ed:23:62:e4:33:81:cf:67:cd:08:
         d9:74:97:81:53:70:9c:00:9c:36:5c:c9:43:b3:b6:ad:e6:d8:
         08:d7:1b:24:23:d1:67:c6:f0:e7:23:4e:86:ea:39:a6:f8:7a:
         d4:36:85:c6:aa:d7:92:2d:f6:d1:17:ac:c7:4c:e1:78:dc:0e:
         d8:c0:50:48:71:e9:5e:eb:3b:70:a1:56:da:8e:1b:9b:20:64:
         f1:eb:73:b3:4a:49:62:5a:b6:54:ed:a9:b1:20:97:5c:26:22:
         29:3f:25:23:f9:3e:56:4c:29:c4:f2:73:4d:8f:e7:a5:cd:5d:
         d8:54:da:28:ff:dd:dd:ac:86:9a:97:01:e7:fd:f4:75:bd:67:
         37:36:c4:26:ea:6b:2e:43:63:bb:95:00:6d:f2:45:66:67:d0:
         0e:cc:ea:36:ce:0b:a6:d6:2c:e5:90:df:71:ad:ed:14:3a:83:
         21:88:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----