This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File:                     HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier:          VfGEscLR3DouQbgEIPTdZFwlMW8TfHpeuuIrvewHD+0=
Subject key identifier:   1F:3E:2C:BC:BF:A3:69:AF:C5:79:DA:9F:B0:F6:45:EB:DD:56:3D:D8
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       06C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number:          0675
Signing time:             Thu 20 Nov 2025 02:29:15 +0000
Manifest this update:     Thu 20 Nov 2025 02:29:14 +0000
Manifest next update:     Sat 22 Nov 2025 02:29:14 +0000
Files and hashes:         1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: 4a9gNki+JlaAx7e9yxUG5B/xMM/dkBqWNRMm8NoVCEA=)
                          2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
                          3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
                          4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
                          5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
                          6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
                          7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
                          8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
                          9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
                          10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
                          11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
                          12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
                          13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
                          14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
                          15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
                          16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
                          17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
                          18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
                          19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
                          20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
                          21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
                          22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
                          23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
                          24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
                          25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
                          26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
                          27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
                          28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
                          29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
                          30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
                          31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
                          32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
                          33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
                          34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
                          35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 22 Nov 2025 02:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Nov 20 02:29:14 2025 GMT
            Not After : Nov 22 02:29:14 2025 GMT
        Subject: CN=691e7cfb-7a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:f8:bc:b1:28:d8:4a:78:d8:0c:32:ff:aa:
                    36:5e:94:dc:2d:df:db:ec:16:23:76:5d:29:af:c9:
                    24:9b:59:7f:8e:19:f1:ef:96:f8:37:d2:dc:af:c4:
                    0b:d1:b6:d5:83:c2:a8:7d:f7:34:dc:b0:e9:5c:b7:
                    87:42:ff:09:11:fd:a6:0c:26:eb:48:37:85:bf:35:
                    0e:94:d5:83:93:1c:f5:bb:48:5c:82:ac:d2:f4:b1:
                    c8:e7:42:d6:58:fa:df:d7:aa:59:0a:e0:6f:9a:87:
                    44:13:de:0d:7e:fe:bb:22:71:74:b6:14:56:fa:19:
                    cf:9c:33:7e:dd:60:62:5d:12:ee:3b:d8:ef:c5:d5:
                    e2:c9:5f:b3:50:c3:96:b4:b6:f8:3f:c2:39:4a:6c:
                    5e:d3:e7:8c:64:0a:9d:e4:a6:8b:5c:9c:e7:6b:4f:
                    65:4d:40:94:a7:11:12:02:d9:d6:b1:04:ae:22:87:
                    e1:13:f4:cc:a2:18:cb:df:12:48:2d:b0:0b:97:b5:
                    05:51:1e:70:e2:60:01:cb:c1:6d:40:a9:ce:75:85:
                    69:dc:c4:11:ff:86:d6:64:7b:70:18:9a:d0:0d:7a:
                    d8:28:c0:8e:7d:60:9b:cb:f9:55:b8:4b:4d:9d:46:
                    99:ea:ee:b6:12:42:9a:c4:f5:06:88:41:92:a7:c3:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3E:2C:BC:BF:A3:69:AF:C5:79:DA:9F:B0:F6:45:EB:DD:56:3D:D8
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e1:77:85:6b:25:bd:ea:01:a8:73:dc:a9:e5:55:11:fd:8a:
         df:14:03:2f:d0:6c:57:7b:32:0a:90:03:9b:82:49:0d:77:40:
         28:f7:4f:30:ca:56:aa:b3:ad:5a:42:95:2a:d9:b3:18:e9:ee:
         3e:6d:2f:f2:2a:d6:54:81:d3:7a:66:4c:b2:70:b3:35:77:2f:
         e1:09:82:f0:a0:f3:cd:32:61:2e:3d:aa:cc:7e:34:1f:e2:91:
         9a:68:fb:3a:c3:e6:82:4a:f1:69:d8:32:03:b6:fd:cf:42:87:
         20:60:94:8a:20:fd:2f:98:61:1c:75:42:52:75:3b:c3:e8:c7:
         42:5a:41:eb:10:f2:bd:bc:3b:81:9f:7d:50:81:93:88:6f:08:
         c5:c8:76:9f:36:bb:89:0b:02:86:2e:a1:9a:7c:57:5d:0a:c6:
         ef:e6:74:90:a5:ed:c9:17:bc:cc:f1:68:94:b2:be:19:eb:2e:
         81:6e:11:2b:6e:1b:52:0d:d8:dd:03:c9:d5:cf:ad:7f:fe:6c:
         b0:ad:85:d1:c5:0a:10:7c:12:94:59:40:9d:a3:c0:89:9e:11:
         27:0d:ac:ab:dd:6d:72:34:e7:38:f4:ab:c7:e7:42:4b:84:a0:
         c4:1a:f7:a4:c8:e9:af:49:4f:b1:ce:17:05:6c:f7:f8:b7:36:
         30:41:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 22:54:12 2025 by rpki-client