This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
File:                     7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft (raw, json)
Hash identifier:          HTB8HHScNv7WOCN4MWSQGnnbJX0uvXnI/7dyz4H7VDs=
Subject key identifier:   06:65:74:40:BF:43:87:91:65:B8:0D:40:93:66:0D:AB:B5:4C:B8:6D
Authority key identifier: EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
Certificate issuer:       /CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Certificate serial:       0A68
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
Manifest number:          0A65
Signing time:             Thu 11 Dec 2025 01:15:48 +0000
Manifest this update:     Thu 11 Dec 2025 01:15:47 +0000
Manifest next update:     Sat 13 Dec 2025 01:15:47 +0000
Files and hashes:         1: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl (hash: vySCb5WJrPS5KenkFYKE1yul5nzqgiPvxphI0hEsG48=)
                          2: E0D747A87C2811ED97EC03DEF1222468.roa (hash: KuxC2oW0LJganBPkuHcCbqhMMXwVkPZeWM7/glv9ahM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1RI, serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
        Validity
            Not Before: Dec 11 01:15:47 2025 GMT
            Not After : Dec 13 01:15:47 2025 GMT
        Subject: CN=693a1b44-1cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:42:fb:a5:78:b2:41:45:4e:04:71:82:78:
                    a4:a6:ed:85:46:52:c3:75:92:4a:dd:ca:5e:3f:cf:
                    b7:2c:d7:5b:50:f7:45:35:19:1a:5e:c1:5e:b7:7d:
                    d0:07:65:6f:1f:86:76:d5:b0:51:52:c1:b3:ac:68:
                    d9:4d:9b:9a:c3:08:a9:82:13:71:0a:f6:cf:0c:ba:
                    f5:f6:1f:a4:2c:fc:49:13:08:53:fb:a5:42:73:a5:
                    ba:54:b9:d5:fa:69:c0:22:31:70:4e:8a:4f:88:24:
                    c7:8a:e5:5d:39:7d:3d:c9:a6:c8:cf:e3:16:e6:f0:
                    1d:42:73:96:fd:b0:dc:16:b3:33:14:f8:79:49:b9:
                    ee:38:32:64:17:12:ac:21:27:0c:9c:65:bf:c9:f2:
                    3e:dc:73:81:6a:e0:b2:78:ea:f1:f1:fd:a4:d9:34:
                    1c:af:f1:c0:16:ed:be:d1:2c:30:b5:ef:17:ce:a0:
                    53:66:af:27:7a:bd:3e:6a:f5:c8:0f:f4:ee:ba:14:
                    e7:8f:3e:92:93:c5:db:9f:7c:a2:49:5b:1f:2d:24:
                    31:c1:a2:5f:bb:ae:cb:50:3f:a2:c0:b8:d1:9b:40:
                    bf:80:ec:db:2c:bc:a1:84:70:0a:23:67:29:4d:1d:
                    15:c0:93:7d:a6:c1:30:9a:ed:a1:cb:f1:83:b3:9e:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:74:40:BF:43:87:91:65:B8:0D:40:93:66:0D:AB:B5:4C:B8:6D
            X509v3 Authority Key Identifier:
                keyid:EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:20:5e:a6:8f:a8:10:d4:93:45:3b:c6:0e:e7:90:b4:11:ca:
         45:c0:36:66:a4:b9:ca:9f:00:97:b5:7e:aa:23:d6:70:f6:43:
         64:5d:ac:da:f6:67:63:30:34:fe:bf:13:61:1d:11:93:56:62:
         b2:d8:23:3e:04:4b:d1:de:e2:82:ac:92:34:8a:a8:b2:49:9a:
         da:1a:29:10:5e:c2:b6:f3:fe:4b:c2:e0:04:13:3c:2c:ce:2d:
         7f:13:33:26:59:5c:2a:66:ac:1c:8a:e8:60:0a:4d:bd:db:5b:
         99:f0:62:c5:4a:ad:0b:11:84:98:f3:6b:a1:07:3e:6e:c1:22:
         b8:ab:64:08:52:43:e6:3e:72:b3:e5:27:b3:2f:15:fa:33:c6:
         20:de:6a:ca:e9:e2:06:00:87:5c:cb:98:91:b6:e4:68:67:7f:
         c4:86:36:01:c7:e8:ce:ce:ed:1a:4c:41:e9:11:4d:6b:19:24:
         6b:55:26:ca:ca:5d:31:3f:00:92:bb:32:95:bf:96:c4:b6:36:
         97:d9:ac:ff:e1:d6:85:3c:c7:d5:97:07:c1:51:06:dc:9d:c8:
         8d:ea:d5:8b:82:93:53:46:f1:b1:f3:6e:88:94:12:c4:b9:8f:
         5d:e0:e6:6d:6c:cb:8d:87:f6:71:ad:48:38:71:f9:a2:35:a0:
         0f:b7:46:87
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUMzQTFSSTExMC8GA1UEBRMoRUNCQUNCNzE5QUJBNUQzMkJEOTkwRUYzNjg1QjVB
QTM2QjA4Q0EwNDAeFw0yNTEyMTEwMTE1NDdaFw0yNTEyMTMwMTE1NDdaMBgxFjAU
BgNVBAMTDTY5M2ExYjQ0LTFjZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2ekL7pXiyQUVOBHGCeKSm7YVGUsN1kkrdyl4/z7cs11tQ90U1GRpewV63
fdAHZW8fhnbVsFFSwbOsaNlNm5rDCKmCE3EK9s8MuvX2H6Qs/EkTCFP7pUJzpbpU
udX6acAiMXBOik+IJMeK5V05fT3JpsjP4xbm8B1Cc5b9sNwWszMU+HlJue44MmQX
EqwhJwycZb/J8j7cc4Fq4LJ46vHx/aTZNByv8cAW7b7RLDC17xfOoFNmryd6vT5q
9cgP9O66FOePPpKTxduffKJJWx8tJDHBol+7rstQP6LAuNGbQL+A7NssvKGEcAoj
ZylNHRXAk32mwTCa7aHL8YOznptdAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBmV0
QL9Dh5FluA1Ak2YNq7VMuG0wHwYDVR0jBBgwFoAU7LrLcZq6XTK9mQ7zaFtao2sI
ygQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFDM0ExLzQ3REY2RDY2RTBEMDExRThBNTQ2MjExQ0Y4QUVBMjI4LzdMckxj
WnE2WFRLOW1RN3phRnRhbzJzSXlnUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzdMckxjWnE2WFRLOW1RN3phRnRhbzJzSXlnUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MUMzQTEvNDdERjZENjZFMEQwMTFFOEE1NDYyMTFDRjhBRUEy
MjgvN0xyTGNacTZYVEs5bVE3emFGdGFvMnNJeWdRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTIF6mj6gQ1JNFO8YO55C0EcpFwDZmpLnK
nwCXtX6qI9Zw9kNkXaza9mdjMDT+vxNhHRGTVmKy2CM+BEvR3uKCrJI0iqiySZra
GikQXsK28/5LwuAEEzwszi1/EzMmWVwqZqwciuhgCk2921uZ8GLFSq0LEYSY82uh
Bz5uwSK4q2QIUkPmPnKz5SezLxX6M8Yg3mrK6eIGAIdcy5iRtuRoZ3/EhjYBx+jO
zu0aTEHpEU1rGSRrVSbKyl0xPwCSuzKVv5bEtjaX2az/4daFPMfVlwfBUQbcnciN
6tWLgpNTRvGx826IlBLEuY9d4OZtbMuNh/ZxrUg4cfmiNaAPt0aH
-----END CERTIFICATE-----
Generated at Thu Dec 11 20:08:15 2025 by rpki-client