This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
File:                     xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft (raw, json)
Hash identifier:          /Gx5KkptP08Q57q90DTiRO6DXGWanMFROhlEpljrKZ0=
Subject key identifier:   8D:5A:4E:3E:3B:18:A6:D6:D4:FF:AD:1A:FB:88:82:78:68:FE:0C:EB
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Certificate issuer:       /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial:       0404
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
Manifest number:          03F5
Signing time:             Thu 04 Dec 2025 03:26:19 +0000
Manifest this update:     Thu 04 Dec 2025 03:26:18 +0000
Manifest next update:     Sat 06 Dec 2025 03:26:18 +0000
Files and hashes:         1: xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl (hash: Km/O9T9SRlPO4553wU8vWiYQzpCdV4/WQDEnk5WJp2k=)
                          2: 916580AACA5A11EEBC5AFA9D775412E6.roa (hash: ztp7/02g9RTHkUR+QiE90a3d75LjUNCsuA1EVWoHlVU=)
                          3: 9291A14C941E11EEBBAE4A1ED25BE465.roa (hash: hoQ0WHzltGfNVqWYNvwkPi5gw4CWcPqSrUNOVflBYxw=)
                          4: 05E09FE07B3C11EFA2CFEB45762E951A.roa (hash: cVeBq/iu4EVAtdwg8HApbjb07OUiv7eyhugdvSJdFOo=)
                          5: AE10BD027B3D11EFA19A5950762E951A.roa (hash: pBZPZsU0a4Hyx7jC1O2ChKZlKrJuIUtFfo6uMv2dY6Q=)
                          6: 151F2E827B3B11EF80BDC540762E951A.roa (hash: +sFHoHgCQHoGDtM7InUTilsDdnQATx775LFAedkvfBU=)
                          7: 71B9ADBAF48311ED8AC17D2C4AD9E6FC.roa (hash: H2R++FRMLxMiqVXy8BRmuUKzD8njGoupil4sDGEQyh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363EA80AF, serialNumber=C67C6231120941235581D5942565ABF7419DCECC
        Validity
            Not Before: Dec  4 03:26:18 2025 GMT
            Not After : Dec  6 03:26:18 2025 GMT
        Subject: CN=6930ff5b-8ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:0c:44:94:c0:ef:4a:5b:90:d6:6c:f0:aa:
                    68:aa:00:d3:db:76:ba:16:df:43:56:6c:42:5c:a4:
                    45:e3:67:8a:de:13:df:9b:ad:f4:59:ce:80:2b:46:
                    1d:a3:ff:46:cc:75:a2:75:b1:c8:2d:6d:ed:a8:ba:
                    a5:75:63:8c:01:a0:27:56:e6:64:6f:17:c6:98:03:
                    fa:e6:82:9f:20:10:2a:84:30:47:47:29:cb:d9:5c:
                    4c:9f:37:59:12:24:f3:97:11:86:cc:85:ed:4d:ad:
                    77:f0:e4:0d:98:9b:17:0c:f1:21:8e:c2:a5:7f:ab:
                    16:25:9e:b3:26:f9:dc:ee:db:83:4d:21:98:42:da:
                    08:78:dd:ad:7f:6b:1c:a7:ca:aa:89:51:d7:5e:c4:
                    e9:42:1b:15:83:1c:18:60:35:87:49:d4:65:11:06:
                    90:97:a3:c5:77:f6:74:0b:61:e2:60:44:64:45:e6:
                    58:f8:6c:b1:65:70:e3:68:a8:3b:c9:71:a4:58:21:
                    78:46:aa:c1:29:b9:6e:93:9b:f9:e9:45:60:22:85:
                    24:cd:d5:e2:a9:0b:a8:6d:f5:e1:f5:a9:a5:d8:c0:
                    50:7c:07:21:91:84:fc:65:8d:db:35:b9:bd:cc:76:
                    be:42:a4:ed:1c:7d:8b:00:be:ff:4e:22:1e:49:33:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:4E:3E:3B:18:A6:D6:D4:FF:AD:1A:FB:88:82:78:68:FE:0C:EB
            X509v3 Authority Key Identifier:
                keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:01:9b:10:d8:0b:c3:a5:03:92:9c:d5:bc:c8:cd:88:14:8a:
         35:b2:0e:80:a3:f8:93:95:f4:c6:61:67:d3:cd:53:fe:38:bf:
         f5:f7:00:dc:54:f1:57:31:5c:7d:57:68:05:1d:ac:29:18:01:
         7d:35:74:54:b5:f1:33:76:dc:eb:74:f1:a3:cb:c5:0f:46:ab:
         a8:67:56:6e:9a:3c:d7:35:1c:9e:b1:13:27:06:9f:cb:aa:01:
         a9:61:d2:1a:c0:79:a5:65:63:02:8a:06:f4:12:bd:59:4b:7b:
         fc:35:0b:15:18:91:5b:c7:82:1e:22:07:a7:d9:9d:6a:d5:21:
         46:fd:4c:08:21:40:43:82:29:15:00:08:01:12:0d:23:ad:96:
         f6:b4:59:82:cc:47:d9:2d:b5:fe:1f:9f:1a:e9:15:fa:2a:6b:
         54:2b:f5:13:65:fd:bd:5a:ba:f4:de:0b:10:c6:74:74:91:b8:
         4d:64:0e:b1:db:c9:78:dc:3c:0d:b1:00:6b:0f:3e:74:f0:26:
         94:db:be:e5:b8:46:71:06:fb:d4:4e:7c:4a:c2:84:71:c4:4e:
         c0:5e:12:4f:5d:88:45:96:f3:b8:21:78:f6:62:70:9b:5b:39:
         4d:68:db:b8:91:58:43:d2:c9:ae:fb:6b:fd:29:bf:9d:06:8e:
         ec:cf:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:27:51 2025 by rpki-client