This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          27CNTzwWEZgbynnkGgXnSJSayKTJN4Bd2NzQ5xPaYo4=
Subject key identifier:   50:51:B0:55:C0:D7:72:12:8B:3E:83:15:A2:5B:48:9E:2B:E2:EF:2E
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       06E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          06E3
Signing time:             Thu 04 Dec 2025 02:06:05 +0000
Manifest this update:     Thu 04 Dec 2025 02:06:05 +0000
Manifest next update:     Sat 06 Dec 2025 02:06:05 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: fZ+USlInZaBwq/J1WvwSJUpWpIpivKOoLKq9+gV3Fcw=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
                          4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Dec  4 02:06:05 2025 GMT
            Not After : Dec  6 02:06:05 2025 GMT
        Subject: CN=6930ec8d-a5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:70:1c:dc:a6:e4:b6:c8:cf:b9:40:cd:50:
                    76:b2:54:5c:c2:0d:98:ae:98:88:81:68:62:9d:fe:
                    b2:8f:74:e5:0f:34:22:d9:d6:6b:18:5a:a5:2f:e2:
                    c7:ca:8b:05:e3:65:4e:7c:de:bc:63:66:8f:1f:21:
                    ad:9f:82:8a:e6:4f:d2:f7:be:61:ad:f0:5d:43:33:
                    1a:00:86:e2:00:bb:4b:fe:27:d0:f5:d4:82:ee:bb:
                    26:c9:42:a3:ec:56:5f:22:45:77:63:5c:1d:22:f7:
                    1e:38:91:7f:d5:34:0c:c4:e2:d8:c4:23:71:ac:58:
                    bc:3b:01:20:2c:3a:5c:38:4d:d5:35:3c:8d:ba:e0:
                    4c:6d:65:6e:ff:d8:07:6b:7d:7c:6f:2c:78:11:5b:
                    f9:d3:92:04:19:60:72:b4:45:e1:35:01:cc:ab:6f:
                    a2:cc:18:82:dd:63:b4:9e:da:a5:54:a4:6f:40:88:
                    fd:f8:f2:50:6e:49:e2:13:b2:a1:82:d0:39:90:7d:
                    3e:ca:4c:e1:e6:95:8a:96:e2:ab:e9:08:b6:be:a4:
                    4e:10:e0:11:22:33:b5:20:e6:43:ad:e3:e2:67:69:
                    40:f8:12:4d:97:26:c3:a9:df:1c:6b:a3:f2:ab:81:
                    f7:2d:04:e1:7f:4f:a3:1f:7e:a6:5b:3e:ca:ef:00:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:B0:55:C0:D7:72:12:8B:3E:83:15:A2:5B:48:9E:2B:E2:EF:2E
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:89:a1:30:5a:38:3b:37:16:e1:a3:c8:0b:61:b0:52:16:
         42:1b:59:4c:56:27:9b:cf:a1:d2:d2:2c:41:f1:ae:50:1e:4d:
         5d:a8:43:e1:43:3b:b3:90:bb:28:94:b2:23:40:b3:53:fb:f7:
         ee:6c:35:9b:ab:1e:f5:1e:97:5d:a2:23:61:a7:91:25:e4:d5:
         f3:20:91:94:ea:f6:6b:53:c9:33:c6:d2:b6:c0:15:98:36:2d:
         a9:cf:39:96:75:f7:59:a9:e7:73:d7:c4:f8:2a:52:c6:36:4e:
         75:a8:09:2e:7c:ed:f8:d5:fb:c1:8a:e8:56:8f:c0:b5:59:15:
         2f:b2:17:85:f6:53:82:5a:f4:4a:49:a9:b9:b8:04:0d:5a:47:
         39:3c:48:a3:d3:ab:27:2f:c7:1e:99:6b:93:32:20:96:7f:76:
         1b:b6:ae:91:01:42:7b:da:f3:d7:5f:f1:16:2d:6c:bb:b9:1f:
         73:d0:1f:33:fc:55:35:b4:7a:4f:c6:cd:f8:8a:bc:af:ed:d9:
         4f:1a:5f:68:5a:f4:d3:c4:1e:48:52:5e:db:3f:8d:95:32:a7:
         34:bd:1c:fb:87:33:9a:c4:ca:8c:6e:07:71:21:3b:75:9f:a4:
         48:34:46:d4:5e:68:28:82:83:a8:bd:b5:bc:3e:b4:2c:ed:ed:
         27:ea:dd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:27:22 2025 by rpki-client