This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File:                     iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier:          3luOHdK3o1xOPe8eNGThARACErEkL81yu6LtuBhPL40=
Subject key identifier:   CD:E3:68:B1:90:41:AA:82:11:36:A7:AD:F5:90:F7:23:B6:DC:E6:74
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       0F06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number:          0EFA
Signing time:             Fri 05 Dec 2025 00:58:19 +0000
Manifest this update:     Fri 05 Dec 2025 00:58:18 +0000
Manifest next update:     Sun 07 Dec 2025 00:58:18 +0000
Files and hashes:         1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: Q+fYgdf+hj6gxDAboxOhivvvCgWeBE3iAlmqnw9GICo=)
                          2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
                          3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
                          4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
                          5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
                          6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
                          7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 00:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3846 (0xf06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: Dec  5 00:58:18 2025 GMT
            Not After : Dec  7 00:58:18 2025 GMT
        Subject: CN=69322e2b-123b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:ec:c9:39:31:87:d7:9a:b4:50:e8:ce:91:
                    88:ee:fc:41:06:69:3e:e4:d0:e9:62:eb:28:0b:e1:
                    28:69:3c:c4:5a:84:8d:48:cb:ab:c4:3c:b4:84:c4:
                    6b:6e:51:36:d7:bc:3a:21:05:fd:88:9e:04:50:a1:
                    aa:28:b6:b2:2a:c9:ab:62:7a:e0:6f:10:f0:f7:aa:
                    e3:0d:69:de:9f:d1:9a:ff:73:17:d0:5a:a1:3b:8e:
                    8d:1b:67:eb:23:d5:15:70:e7:6d:41:39:9b:28:a8:
                    be:f6:75:fb:4b:ac:d7:b6:60:b0:4a:8a:74:3a:6f:
                    e5:c5:52:67:b3:f2:17:46:be:58:9e:5f:c0:c4:ef:
                    d4:9f:01:66:d5:e8:a9:66:87:4c:a7:51:ca:8f:5d:
                    0c:dd:ca:f1:db:d3:58:a2:87:94:fc:12:48:2c:87:
                    36:af:ac:5f:f4:20:50:dd:31:28:5e:9d:d6:c0:1c:
                    8c:84:83:8e:21:53:73:94:69:54:fd:cb:96:11:d9:
                    d2:e5:f3:be:f3:4c:b0:33:e1:27:7d:1e:eb:3f:75:
                    03:bf:9a:b7:2a:4c:37:ce:b1:cf:2a:7f:b0:e3:fe:
                    be:e5:2c:0f:44:9f:30:8c:c9:1d:76:0b:c8:c0:99:
                    43:fa:82:e5:38:35:ff:b9:cb:44:78:ad:d5:8d:aa:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:68:B1:90:41:AA:82:11:36:A7:AD:F5:90:F7:23:B6:DC:E6:74
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:08:56:08:eb:15:e2:ba:8f:4b:e3:9e:c9:b3:69:a2:ae:
         ef:b8:27:08:7f:62:f7:11:06:3d:a7:2f:5c:26:c9:7d:09:e0:
         00:f7:9d:70:31:53:13:c5:fe:e5:5c:d4:a3:81:32:d1:b4:20:
         00:44:00:75:29:29:d9:a9:dd:d1:73:91:f7:3c:2e:df:b5:29:
         61:e8:c5:6e:32:d0:6e:15:dd:29:fb:f2:34:41:5a:03:f2:72:
         aa:12:15:2c:fb:15:1c:ed:10:0c:69:8f:e0:10:ac:14:ce:66:
         98:a2:e2:54:4d:d2:63:e3:9f:b3:0c:29:aa:f6:b8:74:4c:4d:
         9c:3b:f4:4a:e2:33:2d:68:a1:bd:2a:ba:be:bd:6d:9a:be:bb:
         e2:77:70:b1:ff:19:c5:60:20:cf:5b:cf:f0:b3:80:e4:77:e0:
         8f:de:50:02:1c:28:e7:4e:6e:67:e4:87:c2:15:0d:94:98:82:
         b7:cf:9c:a8:07:41:4d:b9:45:7b:3e:bf:12:8f:d9:9f:e9:b3:
         56:ab:6a:c9:e9:b9:12:bb:e3:c9:78:ae:5d:1c:5b:90:38:ac:
         10:d5:e7:64:45:56:61:e7:de:f2:c9:28:f4:e3:ef:cd:0e:07:
         6b:38:77:2c:6a:71:20:6b:f8:5d:f0:f4:51:2f:1c:e8:50:bb:
         a9:3a:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:26:36 2025 by rpki-client