This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
File:                     DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json)
Hash identifier:          Xc4ZD00poLCYFN3L8s5VKQF75TlyQbNznq045ChBM+o=
Subject key identifier:   FC:AC:84:37:24:A8:89:EC:8B:36:DE:D9:84:FE:56:F2:9E:05:0D:1A
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Certificate issuer:       /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial:       04F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
Manifest number:          04ED
Signing time:             Fri 05 Dec 2025 02:56:26 +0000
Manifest this update:     Fri 05 Dec 2025 02:56:25 +0000
Manifest next update:     Sun 07 Dec 2025 02:56:25 +0000
Files and hashes:         1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: lR5vgH9FH/MmeeAyKhLlswu0YUZigHuWDkhejxIuzOo=)
                          2: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (hash: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=)
                          3: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=)
                          4: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 02:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
        Validity
            Not Before: Dec  5 02:56:25 2025 GMT
            Not After : Dec  7 02:56:25 2025 GMT
        Subject: CN=693249da-26cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:9f:6d:d7:ac:a7:26:80:3f:cb:cc:dc:79:
                    8e:42:e7:0b:67:bc:c1:9f:49:c5:fb:a7:52:cb:39:
                    42:d8:66:7e:dc:09:12:a3:c8:0d:4b:29:67:8d:ba:
                    5c:d0:60:f4:e5:6d:ef:f2:6c:90:91:5a:cf:0a:99:
                    3f:f5:78:29:4b:1a:0b:95:97:8e:d6:b8:3b:6c:a5:
                    4d:c2:6b:e5:02:35:c3:af:1f:e1:19:d7:15:ef:58:
                    42:3c:42:4b:47:22:e3:04:38:37:b7:27:63:91:93:
                    2b:5e:92:dd:5d:6b:af:f9:cd:2b:29:f8:c4:58:ab:
                    d1:c1:05:e6:66:40:70:09:fc:9a:aa:42:27:55:24:
                    b4:fe:69:bb:1b:5f:07:4f:a8:4f:8d:b9:f2:5d:df:
                    8e:98:99:2c:fa:4c:13:20:5a:db:15:cd:a6:d6:70:
                    24:6b:e2:fb:de:bc:fa:4d:66:ae:dc:46:cd:6b:4f:
                    f5:62:e8:d3:70:c6:e5:1d:4d:19:1e:0e:4f:04:90:
                    4e:e5:f7:2a:58:b7:93:f5:d4:76:40:3f:fb:38:70:
                    9f:43:ec:95:32:1e:fd:0c:ad:8b:0e:65:6f:4f:24:
                    1a:4b:ea:74:4f:fd:06:27:bd:ea:5d:a8:f3:f2:99:
                    d4:78:e4:fe:84:ce:a2:38:24:fe:a8:15:fa:26:f8:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AC:84:37:24:A8:89:EC:8B:36:DE:D9:84:FE:56:F2:9E:05:0D:1A
            X509v3 Authority Key Identifier:
                keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:c6:43:9c:5f:bf:3b:cf:4f:7f:a2:7d:66:94:6f:79:6c:5b:
         36:13:4b:9c:95:c2:11:76:4e:74:c8:06:51:30:a8:8d:0b:17:
         61:c9:42:7e:f9:c4:e0:d9:a2:84:85:8f:8f:a7:8c:8b:e2:64:
         d6:f2:88:de:20:32:a8:7f:7a:f3:b2:82:c3:bb:07:31:15:1d:
         38:db:97:90:80:e4:cc:c7:2b:00:62:e6:49:e9:81:03:59:39:
         5f:75:01:e7:25:c3:df:83:71:28:9a:88:21:f8:cc:a2:0c:19:
         d4:6e:d6:1b:08:a5:e4:6f:72:98:40:e4:21:d2:6c:1e:bc:f0:
         73:9e:52:0e:ea:c1:0c:8a:ac:9e:aa:2c:ba:c6:9d:80:d0:6c:
         07:4f:84:57:5e:7c:4a:be:e7:3b:2e:3f:58:b9:5e:63:46:9d:
         45:4a:10:a5:1f:26:3c:24:78:41:bb:36:83:4f:7a:7a:9b:70:
         0e:01:69:2c:fd:45:82:73:a3:55:ea:f7:ec:29:28:00:88:6a:
         bb:ce:ad:79:8e:8e:a6:ff:d4:5e:e9:09:31:d7:ef:0c:8d:00:
         e0:f7:40:30:6f:7b:25:e5:3e:a3:ea:2f:ee:0f:e2:d9:e4:36:
         a7:71:0a:54:7d:1f:94:97:4f:3e:8b:1c:60:7a:0f:1c:32:4d:
         99:ed:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:00:02 2025 by rpki-client