This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
File:                     8qncFw2PMqBEwa8QUgRdbU4kIus.mft (raw, json)
Hash identifier:          vJkj9D3d6Zy6PZn6KPEW71XGfn4uzqLj1yksxtjsQ5Q=
Subject key identifier:   56:C4:8E:9A:D6:44:43:BD:EC:20:2E:50:A6:6F:60:47:3A:0E:5C:3A
Authority key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Certificate issuer:       /CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Certificate serial:       021C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
Manifest number:          0217
Signing time:             Sat 20 Dec 2025 04:24:44 +0000
Manifest this update:     Sat 20 Dec 2025 04:24:43 +0000
Manifest next update:     Mon 22 Dec 2025 04:24:43 +0000
Files and hashes:         1: 8qncFw2PMqBEwa8QUgRdbU4kIus.crl (hash: xeiJ5Ezl8TQSVau9hPt44vC3WowhoCAuIsW9aUS1ZoM=)
                          2: FC4A2F76AE5411F0845735D4DAE4EC9C.roa (hash: SMRY+pIlsouKJZTIiIZKkMn4t/uSvGmP4BPbjx27UP0=)
                          3: 6943C2245A1C11EF8AD3AB9F762E951A.roa (hash: 4I82hmzIVlcUSpjIKbPk3aHDkUVJd1jgQcDFX1IaaAM=)
                          4: E0539FCE5A1211EF8F707262762E951A.roa (hash: bcfZ/95PQQlS2eDlkdUzWliC6UA2tyCBDeR/FA3hgqE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                          rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65RI, serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
        Validity
            Not Before: Dec 20 04:24:43 2025 GMT
            Not After : Dec 22 04:24:43 2025 GMT
        Subject: CN=6946250b-6d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:ab:c0:78:a1:ee:7c:76:45:9a:7e:50:59:
                    17:bb:15:13:d8:34:80:76:a5:9b:49:82:e2:a9:7e:
                    5d:eb:f4:93:19:cd:a4:28:88:59:28:05:32:1e:4f:
                    d8:2f:eb:e6:88:bf:84:46:a7:43:e9:09:71:7e:4d:
                    4d:ed:cb:e0:e7:ee:ac:78:df:33:e0:4c:e5:f1:f4:
                    bd:32:1f:ed:b6:1c:05:56:29:cd:45:6b:b0:9b:6d:
                    4a:37:e0:8d:41:d6:d2:75:5b:d0:f2:df:69:83:2f:
                    95:a5:2c:9a:7f:94:9c:6a:c2:b9:de:80:13:40:4f:
                    d0:c5:bb:05:fc:22:73:e9:e1:93:aa:fa:3e:25:de:
                    2c:c9:f4:70:82:bb:47:1d:29:a0:63:65:4a:87:30:
                    17:41:8a:c9:f0:fd:cc:9a:ae:e1:37:d2:fd:9f:e5:
                    21:62:de:40:68:ad:44:b2:a5:8c:db:da:c3:a3:22:
                    48:8b:3a:87:05:e0:be:05:54:23:02:36:40:93:b0:
                    84:9e:94:51:64:d1:dc:0b:69:28:6d:40:90:38:26:
                    08:31:1e:07:e7:44:93:1a:71:dc:41:0c:92:72:fa:
                    cd:49:49:b8:00:e1:1e:96:86:42:a8:d2:54:79:90:
                    b3:ac:20:28:d3:46:f1:e2:8e:54:68:6e:4e:4b:2f:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C4:8E:9A:D6:44:43:BD:EC:20:2E:50:A6:6F:60:47:3A:0E:5C:3A
            X509v3 Authority Key Identifier:
                keyid:F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:56:45:f2:53:52:41:38:5f:9f:76:21:ea:6b:6d:5e:98:6a:
         b4:72:1e:a6:7e:0b:f3:18:b1:21:5b:8b:ae:62:2a:f7:8f:8e:
         a2:13:a9:29:bd:0b:d0:97:6d:88:cf:d1:0e:37:b4:07:f8:e9:
         0d:52:a8:21:ee:3f:44:33:51:da:f7:95:77:52:9b:b4:f6:52:
         fe:72:e0:13:c2:71:ef:a4:a3:8a:95:12:c5:c8:56:8e:95:cc:
         23:8d:55:1e:51:6f:a4:a3:81:c8:c0:15:59:1d:79:eb:cb:c6:
         e1:6f:db:f4:de:f3:ed:95:61:e0:0d:63:c3:bd:60:3a:bc:b0:
         e9:70:bf:16:9a:d3:a9:a6:7c:fe:08:af:95:4a:a3:91:5f:20:
         5f:25:76:88:a1:bb:7d:50:cc:02:6b:fb:c1:1d:82:ba:87:b5:
         ff:d8:f4:80:4f:9f:3f:1e:e3:57:47:31:86:e4:14:08:e5:01:
         b0:23:48:19:60:56:e9:ae:35:8c:e6:4c:00:15:60:42:77:e6:
         31:78:5d:70:de:ac:12:5c:bd:0b:30:2d:22:e2:ed:54:9f:db:
         09:ac:b8:99:30:1b:8c:82:55:1b:97:d4:ed:7c:ea:52:11:8a:
         04:7e:37:cc:f6:9d:20:a8:9e:b1:c8:fb:33:14:7b:2c:f6:44:
         13:11:3e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:48:03 2025 by rpki-client