This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          FFfvfmlpNq2p13AUx/myzuHdg0SnzlHeql3wFEYuIb0=
Subject key identifier:   F3:90:1D:75:83:1E:9A:A9:BA:0C:8D:3D:5D:D5:FD:82:B8:74:7E:6B
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       03AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          03AA
Signing time:             Thu 04 Dec 2025 03:30:00 +0000
Manifest this update:     Thu 04 Dec 2025 03:29:59 +0000
Manifest next update:     Sat 06 Dec 2025 03:29:59 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: Z7ppPwbIkBaMPr8ov7Jwe2I/0L9WzZGRN1MMES8CYbs=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: Dec  4 03:29:59 2025 GMT
            Not After : Dec  6 03:29:59 2025 GMT
        Subject: CN=69310038-1761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f7:b5:e3:fc:96:98:0f:ad:98:88:24:74:1a:
                    de:98:be:33:fc:19:75:72:90:27:de:bb:c1:c1:17:
                    30:0a:13:c4:70:88:dc:71:37:1a:f4:bf:a8:02:36:
                    aa:13:d1:09:56:1d:e6:fb:d7:79:95:5e:1c:b5:05:
                    f2:60:8c:27:9e:5b:7c:15:0e:a1:13:b4:67:52:7e:
                    9f:67:45:7a:68:e9:31:ef:d4:bb:85:12:22:76:88:
                    49:89:62:cb:87:bd:ef:ff:d3:96:e4:83:58:18:e8:
                    b3:b4:57:95:20:e3:4a:ad:96:af:61:0c:ef:48:77:
                    84:05:06:9b:52:29:35:80:74:09:6f:f9:95:c0:c9:
                    a8:03:e2:3e:94:05:8f:e6:a9:4a:c6:2b:79:65:e7:
                    08:ec:3b:91:30:c3:74:d8:f6:2a:96:4f:42:84:5b:
                    52:77:36:3a:7f:70:35:1c:56:cd:00:b3:8d:30:88:
                    98:6b:49:d2:31:01:bf:62:f2:47:f5:bc:5f:f5:fb:
                    cc:38:c2:f7:9b:fc:45:c2:39:cc:81:69:01:17:c5:
                    5e:7d:2e:8a:1f:36:00:da:fe:b3:5c:1c:09:a7:d7:
                    97:43:c6:e1:89:8e:dc:88:b9:e0:79:60:a1:ec:c3:
                    13:d6:22:d2:de:8b:fc:fc:b8:59:c6:b2:cb:bc:45:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:90:1D:75:83:1E:9A:A9:BA:0C:8D:3D:5D:D5:FD:82:B8:74:7E:6B
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:7c:e0:cf:7e:62:96:34:30:da:52:82:1d:fc:73:21:7a:
         6e:e0:54:89:4b:5d:58:45:5b:b0:23:1d:c8:b4:31:ce:55:86:
         bb:3a:2f:33:9b:5e:19:cf:c0:10:09:1e:54:0a:7c:e0:59:fb:
         8f:fb:5f:ce:b4:33:05:80:34:4a:a6:7d:99:1d:6c:f1:35:0d:
         8a:bc:be:c1:11:f3:74:c7:99:63:2c:21:23:05:25:59:a1:da:
         96:7c:d4:88:45:23:db:27:8e:ac:65:ed:39:ce:40:c1:d6:e5:
         9a:9d:de:55:fe:7e:cb:15:16:bc:d8:ae:49:f4:80:fc:44:19:
         fb:45:23:e8:41:1b:5e:24:71:a8:38:ea:f9:90:7d:86:8d:bd:
         05:e3:90:d4:c3:dc:00:aa:7c:76:d4:ea:cf:00:4e:8c:aa:fd:
         c2:ca:78:bb:92:74:bd:07:18:fe:a5:69:27:4e:2a:65:91:46:
         df:72:95:65:d4:24:64:f4:3b:fc:a1:ea:5f:be:55:22:09:8a:
         17:ea:6b:51:bc:cf:b8:42:cc:7a:d7:80:ee:4d:97:48:8e:d9:
         30:e0:91:6a:2b:8b:ab:e6:94:dc:88:53:31:3b:e5:c4:e3:69:
         4e:4e:cd:3f:7d:c4:64:41:bf:2d:b2:f1:09:fc:df:33:35:cd:
         11:46:e3:9b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA6swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTVBNDhBRjExMC8GA1UEBRMoRDg2MTNCRUY3RDcyNTU2NzVBNjRBOUE4RTJBNUQy
NkZERjJFNUM2RTAeFw0yNTEyMDQwMzI5NTlaFw0yNTEyMDYwMzI5NTlaMBgxFjAU
BgNVBAMTDTY5MzEwMDM4LTE3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDc97Xj/JaYD62YiCR0Gt6YvjP8GXVykCfeu8HBFzAKE8RwiNxxNxr0v6gC
NqoT0QlWHeb713mVXhy1BfJgjCeeW3wVDqETtGdSfp9nRXpo6THv1LuFEiJ2iEmJ
YsuHve//05bkg1gY6LO0V5Ug40qtlq9hDO9Id4QFBptSKTWAdAlv+ZXAyagD4j6U
BY/mqUrGK3ll5wjsO5Eww3TY9iqWT0KEW1J3Njp/cDUcVs0As40wiJhrSdIxAb9i
8kf1vF/1+8w4wveb/EXCOcyBaQEXxV59LoofNgDa/rNcHAmn15dDxuGJjtyIueB5
YKHswxPWItLei/z8uFnGssu8RWpfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU85Ad
dYMemqm6DI09XdX9grh0fmswHwYDVR0jBBgwFoAU2GE7731yVWdaZKmo4qXSb98u
XG4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1QTQ4LzQ2MEQzNTg4MDQzMjExRUU5OTQ2MjY1QzRBRDlFNkZDLzJHRTc3
MzF5VldkYVpLbW80cVhTYjk4dVhHNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJHRTc3MzF5VldkYVpLbW80cVhTYjk4dVhHNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTVBNDgvNDYwRDM1ODgwNDMyMTFFRTk5NDYyNjVDNEFE
OUU2RkMvMkdFNzczMXlWV2RhWkttbzRxWFNiOTh1WEc0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM1nzgz35iljQw2lKCHfxzIXpu4FSJ
S11YRVuwIx3ItDHOVYa7Oi8zm14Zz8AQCR5UCnzgWfuP+1/OtDMFgDRKpn2ZHWzx
NQ2KvL7BEfN0x5ljLCEjBSVZodqWfNSIRSPbJ46sZe05zkDB1uWand5V/n7LFRa8
2K5J9ID8RBn7RSPoQRteJHGoOOr5kH2Gjb0F45DUw9wAqnx21OrPAE6Mqv3Cyni7
knS9Bxj+pWknTiplkUbfcpVl1CRk9Dv8oepfvlUiCYoX6mtRvM+4Qsx614DuTZdI
jtkw4JFqK4ur5pTciFMxO+XE42lOTs0/fcRkQb8tsvEJ/N8zNc0RRuOb
-----END CERTIFICATE-----
Generated at Fri Dec 5 02:26:00 2025 by rpki-client