This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
File:                     v1plQpwwfXk7DXBa2V_P60lCIWo.mft (raw, json)
Hash identifier:          YjICeFMNWfOIfaCOs9ztzBuEFgcvG+yQp39Sc11UK2w=
Subject key identifier:   AB:02:BB:03:4E:6A:00:B8:4B:D1:77:AE:5A:F0:8F:41:D9:E7:17:80
Authority key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Certificate issuer:       /CN=F3619CE0AF/serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
Certificate serial:       0184
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
Manifest number:          0183
Signing time:             Tue 09 Dec 2025 04:44:22 +0000
Manifest this update:     Tue 09 Dec 2025 04:44:21 +0000
Manifest next update:     Thu 11 Dec 2025 04:44:21 +0000
Files and hashes:         1: v1plQpwwfXk7DXBa2V_P60lCIWo.crl (hash: wtNyPWtrEe90xPQN0eCqsDcgTLLeHaNft39UUzRNynE=)
                          2: 3995E772B22911EF8FFA5C88762E951A.roa (hash: q5GdnXuThvMc7lFNIre+h57AswQCqM5v2uH6+3ENceQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619CE0AF, serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
        Validity
            Not Before: Dec  9 04:44:21 2025 GMT
            Not After : Dec 11 04:44:21 2025 GMT
        Subject: CN=6937a926-1611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:0c:ce:d2:fb:6e:1a:30:57:6c:7f:ba:c9:
                    53:c5:58:dd:bc:7e:d9:f2:fb:8e:02:b2:c6:11:8b:
                    c4:9b:46:ba:2f:3e:40:e8:69:3a:38:da:11:9c:a9:
                    38:63:af:a7:8f:ed:c5:69:3d:f9:ba:d9:bd:f1:c6:
                    1e:5b:ec:9a:58:91:55:e6:53:ce:a8:fb:3e:e2:6b:
                    d7:6e:15:f4:5f:d1:a8:b4:67:9a:34:c0:d5:5f:34:
                    e4:72:86:5d:85:48:0e:06:d6:3c:f9:aa:46:fe:d8:
                    b9:93:fd:57:45:6f:7e:88:7f:fa:e5:6e:a0:b5:3b:
                    0d:c9:1c:9e:35:4e:9a:1f:6d:e1:08:ca:e5:02:34:
                    9d:07:a9:cc:08:0b:e7:a3:f2:f0:6f:91:87:ea:e2:
                    41:f7:de:27:da:17:05:1c:8c:f9:2f:c5:9e:91:69:
                    e7:3e:02:44:90:3c:de:06:58:11:87:a5:a7:52:35:
                    0c:ea:b6:fb:52:d1:1b:bf:4c:24:9d:69:f5:c2:1d:
                    9d:d1:cb:bf:ee:4c:a4:b1:7b:a1:5c:f1:5c:b2:58:
                    45:c5:80:8d:e9:31:cf:93:09:55:c9:d0:9d:09:79:
                    0c:c5:b0:27:1a:84:8e:c1:91:e0:57:0a:6c:37:4d:
                    f9:5e:38:3f:b6:c4:c7:f7:17:d5:9e:09:67:c6:38:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:BB:03:4E:6A:00:B8:4B:D1:77:AE:5A:F0:8F:41:D9:E7:17:80
            X509v3 Authority Key Identifier:
                keyid:BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:cb:d4:07:99:bb:f7:44:9d:fb:d6:8c:7f:22:d1:d1:20:d5:
         64:ed:1e:92:c9:45:08:05:ab:ea:9a:72:bf:3f:eb:ae:9d:de:
         93:13:bd:c3:5e:2d:fb:fb:15:d6:66:a8:e2:bd:93:db:cb:f3:
         16:16:5d:97:17:86:27:50:e4:44:80:0b:e5:aa:7f:42:3c:78:
         c1:2c:09:e5:07:0d:4a:a7:d3:53:55:9f:5f:5b:e9:49:bc:71:
         6e:6c:d5:8e:6c:e9:20:61:57:ac:00:ad:a2:83:a3:63:c6:aa:
         66:cf:64:86:b6:88:8f:4f:4b:1c:bf:ff:6c:77:53:0e:44:57:
         e8:7b:99:22:a8:fe:cf:95:99:43:c6:8b:ec:f3:23:85:6f:5b:
         7b:cc:82:af:18:5b:dd:6e:9f:e3:ca:98:79:bb:e0:bb:e0:25:
         0a:81:c7:b3:c2:a8:3a:4b:33:ca:d3:0b:84:f9:2a:fe:42:54:
         bc:51:d5:7a:d6:55:2c:4e:94:d7:6a:47:ca:24:8b:20:f1:04:
         f7:6c:f9:d4:ce:61:b0:2b:33:8c:ff:1a:23:e7:dd:de:9d:69:
         0d:c2:ea:bb:94:4a:14:19:3a:76:78:4b:53:80:94:ba:db:fc:
         a3:1a:62:64:86:92:de:3a:f7:e1:e3:52:d7:c2:30:c1:11:82:
         b4:ac:d8:2d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlDRTBBRjExMC8GA1UEBRMoQkY1QTY1NDI5QzMwN0Q3OTNCMEQ3MDVBRDk1RkNG
RUI0OTQyMjE2QTAeFw0yNTEyMDkwNDQ0MjFaFw0yNTEyMTEwNDQ0MjFaMBgxFjAU
BgNVBAMTDTY5MzdhOTI2LTE2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCq7QzO0vtuGjBXbH+6yVPFWN28ftny+44CssYRi8SbRrovPkDoaTo42hGc
qThjr6eP7cVpPfm62b3xxh5b7JpYkVXmU86o+z7ia9duFfRf0ai0Z5o0wNVfNORy
hl2FSA4G1jz5qkb+2LmT/VdFb36If/rlbqC1Ow3JHJ41TpofbeEIyuUCNJ0HqcwI
C+ej8vBvkYfq4kH33ifaFwUcjPkvxZ6Raec+AkSQPN4GWBGHpadSNQzqtvtS0Ru/
TCSdafXCHZ3Ry7/uTKSxe6Fc8VyyWEXFgI3pMc+TCVXJ0J0JeQzFsCcahI7BkeBX
Cmw3TfleOD+2xMf3F9WeCWfGOIXBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqwK7
A05qALhL0XeuWvCPQdnnF4AwHwYDVR0jBBgwFoAUv1plQpwwfXk7DXBa2V/P60lC
IWowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5Q0UwL0ZDMjc1QTI0QUQ1RjExRUY5MUUzMDk1Nzc2MkU5NTFBL3YxcGxR
cHd3ZlhrN0RYQmEyVl9QNjBsQ0lXby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3YxcGxRcHd3ZlhrN0RYQmEyVl9QNjBsQ0lXby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTlDRTAvRkMyNzVBMjRBRDVGMTFFRjkxRTMwOTU3NzYy
RTk1MUEvdjFwbFFwd3dmWGs3RFhCYTJWX1A2MGxDSVdvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDLy9QHmbv3RJ371ox/ItHRINVk7R6S
yUUIBavqmnK/P+uund6TE73DXi37+xXWZqjivZPby/MWFl2XF4YnUOREgAvlqn9C
PHjBLAnlBw1Kp9NTVZ9fW+lJvHFubNWObOkgYVesAK2ig6Njxqpmz2SGtoiPT0sc
v/9sd1MORFfoe5kiqP7PlZlDxovs8yOFb1t7zIKvGFvdbp/jyph5u+C74CUKgcez
wqg6SzPK0wuE+Sr+QlS8UdV61lUsTpTXakfKJIsg8QT3bPnUzmGwKzOM/xoj593e
nWkNwuq7lEoUGTp2eEtTgJS62/yjGmJkhpLeOvfh41LXwjDBEYK0rNgt
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:40:21 2025 by rpki-client