This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File:                     h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier:          1by1i1L7cHqzoxpI3UC8bGmIzT/s6cfhjincM/bIEjI=
Subject key identifier:   52:35:B2:D4:F6:B6:FC:A7:78:7C:B4:AF:C8:E0:0F:B1:BA:96:EE:97
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer:       /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial:       D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number:          D0
Signing time:             Sat 06 Dec 2025 04:58:36 +0000
Manifest this update:     Sat 06 Dec 2025 04:58:35 +0000
Manifest next update:     Mon 08 Dec 2025 04:58:35 +0000
Files and hashes:         1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: gU8rXhi0cKZyyCSqu8BjDfYeEDtnbGS2/qpNLM2HKi4=)
                          2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
                          3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
        Validity
            Not Before: Dec  6 04:58:35 2025 GMT
            Not After : Dec  8 04:58:35 2025 GMT
        Subject: CN=6933b7fc-958b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:7d:e0:d5:27:f5:9f:80:6a:aa:f2:5f:c2:
                    eb:b4:ee:7c:e3:c3:6c:14:c4:cc:96:84:55:d6:22:
                    37:76:9b:0f:68:55:1c:d7:60:18:f0:8e:d3:69:86:
                    9d:a7:fd:2b:6c:ae:ab:97:a1:1e:13:60:5b:b5:39:
                    65:8f:da:59:9e:17:65:ac:d9:51:dd:7b:d7:51:9c:
                    5a:2e:b2:73:a4:42:c3:d0:93:45:70:59:6d:2d:f3:
                    77:b7:e8:72:f9:5e:8b:a9:37:1f:8b:05:af:1a:70:
                    67:43:14:34:5d:07:d3:d7:80:73:1a:a2:92:3d:b8:
                    3a:94:d2:53:42:a6:bf:ed:da:bf:37:38:8d:dc:ab:
                    22:45:9c:c1:2f:9b:f3:6a:23:00:fb:11:f7:04:1b:
                    5d:b0:e9:9d:18:c3:31:43:6d:63:4e:ac:59:70:24:
                    13:33:63:d9:71:32:fc:93:26:69:0d:eb:1e:8f:97:
                    e7:b8:31:5b:7a:95:dd:7b:bf:33:4f:fa:20:ac:3f:
                    86:5f:52:b9:50:d1:b9:19:24:e5:7f:4c:fc:db:fb:
                    ca:4d:0f:27:cf:54:ad:20:ad:b7:e1:f1:78:e3:2e:
                    d4:10:cd:b1:ed:11:7f:2e:6c:59:3e:e8:02:d5:c2:
                    68:6b:c4:be:f3:04:fa:bc:87:5f:a6:14:26:43:45:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:35:B2:D4:F6:B6:FC:A7:78:7C:B4:AF:C8:E0:0F:B1:BA:96:EE:97
            X509v3 Authority Key Identifier:
                keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:be:e2:6c:8c:0b:7a:1b:1a:ff:77:23:ba:69:7e:80:70:2a:
         c3:03:d6:e7:56:c0:5c:29:07:63:d4:b6:0f:d8:85:ba:4f:18:
         78:5a:a2:5d:0a:6e:26:a7:ab:1c:25:62:32:64:a8:a1:8e:7d:
         43:28:fe:a4:09:a2:0d:dd:3d:15:9f:6d:74:f0:74:15:45:89:
         9d:ce:61:e9:59:6e:62:cc:4f:7c:67:a2:5c:de:97:d7:75:0a:
         8d:18:bf:c9:54:6d:fd:64:7d:26:5a:4a:d3:7a:80:d3:bc:2e:
         08:46:81:79:77:a3:4b:4b:02:fb:cc:83:e5:0c:4d:67:04:cc:
         b3:36:c1:8a:53:a1:b4:13:23:c9:75:ef:a7:8c:15:33:a3:3f:
         7f:2a:5a:8c:7a:64:56:92:6d:e5:39:59:ca:ca:47:9d:32:01:
         1e:65:58:74:e0:2a:44:0b:60:b9:54:4a:25:ac:ed:b8:48:12:
         90:8b:5c:de:b2:7f:83:4a:fc:28:ef:15:e6:ff:e4:c5:1c:c8:
         ee:8c:2f:52:0b:a5:d4:3f:f4:2c:00:a0:87:3d:eb:c0:80:2e:
         05:1d:e5:31:b2:17:6c:42:c0:5f:86:32:16:be:ca:da:5d:dc:
         12:e7:5c:d7:9e:51:1e:e7:25:39:10:e3:cb:a2:8e:35:08:66:
         21:bd:d9:5b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTZFQTRBRjExMC8GA1UEBRMoODc2ODc0MzYwODk2NDIyNTlFMUM3OTQ0NDcxNzVB
MkM3NjU4RUFBQzAeFw0yNTEyMDYwNDU4MzVaFw0yNTEyMDgwNDU4MzVaMBgxFjAU
BgNVBAMTDTY5MzNiN2ZjLTk1OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvGn3g1Sf1n4BqqvJfwuu07nzjw2wUxMyWhFXWIjd2mw9oVRzXYBjwjtNp
hp2n/StsrquXoR4TYFu1OWWP2lmeF2Ws2VHde9dRnFousnOkQsPQk0VwWW0t83e3
6HL5XoupNx+LBa8acGdDFDRdB9PXgHMaopI9uDqU0lNCpr/t2r83OI3cqyJFnMEv
m/NqIwD7EfcEG12w6Z0YwzFDbWNOrFlwJBMzY9lxMvyTJmkN6x6Pl+e4MVt6ld17
vzNP+iCsP4ZfUrlQ0bkZJOV/TPzb+8pNDyfPVK0grbfh8XjjLtQQzbHtEX8ubFk+
6ALVwmhrxL7zBPq8h1+mFCZDRSxvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUjWy
1Pa2/Kd4fLSvyOAPsbqW7pcwHwYDVR0jBBgwFoAUh2h0NgiWQiWeHHlERxdaLHZY
6qwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE2RUE0L0QwNzQ0MTdDMzU0RTExRjA5NzQzNERBM0RBRTRFQzlDL2gyaDBO
Z2lXUWlXZUhIbEVSeGRhTEhaWTZxdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2gyaDBOZ2lXUWlXZUhIbEVSeGRhTEhaWTZxdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTZFQTQvRDA3NDQxN0MzNTRFMTFGMDk3NDM0REEzREFF
NEVDOUMvaDJoME5naVdRaVdlSEhsRVJ4ZGFMSFpZNnF3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABvuJsjAt6Gxr/dyO6aX6AcCrDA9bn
VsBcKQdj1LYP2IW6Txh4WqJdCm4mp6scJWIyZKihjn1DKP6kCaIN3T0Vn2108HQV
RYmdzmHpWW5izE98Z6Jc3pfXdQqNGL/JVG39ZH0mWkrTeoDTvC4IRoF5d6NLSwL7
zIPlDE1nBMyzNsGKU6G0EyPJde+njBUzoz9/KlqMemRWkm3lOVnKykedMgEeZVh0
4CpEC2C5VEolrO24SBKQi1zesn+DSvwo7xXm/+TFHMjujC9SC6XUP/QsAKCHPevA
gC4FHeUxshdsQsBfhjIWvsraXdwS51zXnlEe5yU5EOPLoo41CGYhvdlb
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:15:30 2025 by rpki-client