This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
File:                     7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft (raw, json)
Hash identifier:          tMl10SUVm9o+UB/BYwQb3dfsrgcBN8ftcNNksVv+QR8=
Subject key identifier:   0E:D6:F2:CA:CC:F8:CD:0C:DD:FF:7D:1A:B8:09:AF:6B:3C:DA:3B:12
Authority key identifier: EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
Certificate issuer:       /CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Certificate serial:       0A72
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
Manifest number:          0A6F
Signing time:             Sun 21 Dec 2025 01:15:38 +0000
Manifest this update:     Sun 21 Dec 2025 01:15:37 +0000
Manifest next update:     Tue 23 Dec 2025 01:15:37 +0000
Files and hashes:         1: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl (hash: jABaQ/V7Gw1Ah+mTGunxnsTuqC4jIBLvgXlxNe4BHMQ=)
                          2: E0D747A87C2811ED97EC03DEF1222468.roa (hash: KuxC2oW0LJganBPkuHcCbqhMMXwVkPZeWM7/glv9ahM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 01:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674 (0xa72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1RI, serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
        Validity
            Not Before: Dec 21 01:15:37 2025 GMT
            Not After : Dec 23 01:15:37 2025 GMT
        Subject: CN=69474a3a-d595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:77:75:43:c7:55:1b:cb:ac:63:1c:0b:4b:
                    09:36:f5:b7:65:df:28:17:74:94:e7:6f:08:c7:3c:
                    00:8c:f2:0d:61:2e:a9:de:c7:cd:fb:9e:6b:c5:43:
                    8e:b1:1f:03:a3:18:09:10:a8:33:c7:55:02:60:a3:
                    2f:82:c8:47:e5:27:d6:2d:48:5e:a4:5c:bd:f7:77:
                    3a:ec:e1:84:ed:bf:48:9d:b8:66:3c:3a:b2:ec:79:
                    bf:73:b5:33:20:fb:2f:90:94:97:05:ac:5e:fd:6d:
                    6c:41:86:11:76:23:5b:5f:03:d2:66:df:af:ae:d8:
                    cf:c9:ed:e8:0f:8b:cc:36:fc:f6:c0:62:ef:33:a5:
                    1e:b0:fc:73:11:2c:33:f3:20:f2:15:c5:81:c7:1e:
                    83:06:8c:14:4f:91:da:15:40:53:6d:c5:21:5c:fd:
                    08:c2:2d:88:71:56:7d:18:78:2b:7f:99:b7:02:ea:
                    07:82:87:a5:0f:f1:f1:c5:af:f0:cb:24:c5:f5:68:
                    15:97:ef:4a:f7:f1:6f:59:d6:50:1e:d9:67:62:2c:
                    d3:44:39:aa:e5:25:97:d4:9b:bd:60:31:12:15:06:
                    38:58:8b:95:0a:ba:70:02:96:2e:48:59:f0:5a:5b:
                    73:ca:44:cd:4f:22:5f:f1:49:e0:39:75:5f:74:74:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D6:F2:CA:CC:F8:CD:0C:DD:FF:7D:1A:B8:09:AF:6B:3C:DA:3B:12
            X509v3 Authority Key Identifier:
                keyid:EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:28:90:95:e7:92:b1:a0:51:03:90:f6:2d:15:b1:63:c7:71:
         88:47:c6:96:2c:39:e5:52:6c:21:80:e1:8a:5e:95:b7:19:65:
         9a:51:2b:e6:0a:d7:a2:1d:1a:71:15:9a:e4:ca:61:77:5c:a2:
         00:2f:0d:f3:47:36:0b:9b:20:c6:57:4f:a4:35:41:c5:37:fc:
         05:3a:72:67:b8:d8:23:18:f9:10:88:c3:f8:a0:a5:3e:14:22:
         22:df:36:e8:40:de:b6:4d:10:44:9d:ae:1b:ca:de:15:4d:71:
         e6:1b:a5:7c:cc:c8:34:6a:a8:dd:8a:53:c3:ab:1b:2d:bd:bd:
         6c:38:37:74:eb:4f:05:97:3d:e9:7f:b5:4e:d9:f7:cd:bf:49:
         7d:32:80:bd:11:73:30:f8:09:e1:7d:c2:fb:81:51:4d:50:b2:
         ef:ce:b5:2e:a7:c0:1b:13:e4:db:8e:35:b8:85:27:e0:08:ce:
         26:72:18:f3:de:f3:d8:60:58:3f:e9:4c:17:6b:f2:e4:5f:be:
         7d:1d:a5:ab:aa:97:08:3d:e1:3b:1f:b1:00:40:9c:6e:7e:4f:
         82:a7:f4:48:33:1a:d5:d5:a9:2e:88:7f:c4:00:9d:a2:5d:2a:
         01:92:aa:04:9d:b0:75:15:14:51:6c:ce:b9:b5:5f:f3:20:05:
         ed:e9:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:39:02 2025 by rpki-client