This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          YgBSf+5U5+8h/uKDPBABPGsmywb0l97qSCMhIxJoz/M=
Subject key identifier:   DC:78:AD:D0:CD:91:A0:E4:2F:06:AB:F9:1B:C8:14:84:69:C4:56:75
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       0987
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          0986
Signing time:             Sun 21 Dec 2025 01:30:01 +0000
Manifest this update:     Sun 21 Dec 2025 01:30:01 +0000
Manifest next update:     Tue 23 Dec 2025 01:30:01 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: tmDl+Ay/Q2iHb49bvYSA33YTH8xrmNQrvVjomahekfY=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439 (0x987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Dec 21 01:30:01 2025 GMT
            Not After : Dec 23 01:30:01 2025 GMT
        Subject: CN=69474d99-870d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:0e:56:6b:0c:f6:5d:81:c6:d8:fa:ae:b0:
                    0b:06:66:7a:44:7b:7c:1a:cc:1d:35:a1:4a:a6:e5:
                    0e:9c:ed:04:90:af:4c:45:25:8f:11:6a:ad:a3:cb:
                    67:0b:48:39:a9:79:10:60:a8:cf:45:f2:eb:c9:bc:
                    5a:9d:5d:fc:2e:fd:1b:38:f6:ac:56:ef:24:84:45:
                    cc:81:c6:66:52:df:e7:71:7d:48:40:0f:b7:b4:2a:
                    04:20:92:dc:05:33:2a:d4:93:56:c5:74:c2:b7:7b:
                    1e:8f:d9:4e:eb:ef:a0:ef:46:98:a2:0f:46:b2:fd:
                    5c:84:c4:e0:41:98:5b:e6:bd:9c:06:85:c9:75:02:
                    f0:ff:fc:1c:79:0b:f9:72:c8:c7:0a:34:b2:68:f6:
                    94:56:d1:68:95:af:55:8a:f8:40:ab:f2:e9:3d:23:
                    32:7a:4a:1f:0c:f0:54:47:a8:79:95:22:c4:58:b5:
                    44:55:be:4d:d5:c8:b6:a0:85:ae:2f:4a:a4:19:e7:
                    14:e6:51:de:ec:95:9b:b6:8c:fd:be:52:20:5a:85:
                    92:fe:f1:7c:65:16:7c:67:a8:bf:12:67:b3:0d:a5:
                    ec:b8:57:9f:d0:06:27:23:59:2d:37:bd:82:48:61:
                    ae:eb:75:72:78:43:cc:15:7c:3c:1b:b2:de:eb:ac:
                    a8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:78:AD:D0:CD:91:A0:E4:2F:06:AB:F9:1B:C8:14:84:69:C4:56:75
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:57:dd:59:44:89:d9:c6:cb:ee:fc:77:7a:69:53:c5:59:
         33:54:1b:57:fc:63:16:73:17:21:80:9a:94:51:3c:f7:47:24:
         a1:51:5c:00:92:27:ee:25:66:ba:3f:50:95:21:c0:65:0d:c4:
         cd:99:10:7b:be:4c:41:40:ad:cf:8a:43:e1:bd:33:59:41:55:
         7a:38:5d:c6:45:12:be:61:80:04:ef:01:16:7c:6d:90:98:77:
         5d:33:bd:1c:3f:3e:64:a2:86:3c:7e:43:79:35:34:ce:84:f0:
         23:61:02:4e:16:e4:1f:23:cd:70:d6:95:8e:24:aa:af:d7:4e:
         15:ae:45:a9:ae:2c:7b:c8:e3:ac:90:d0:84:69:a2:d3:49:08:
         26:93:4b:91:98:09:12:48:21:a4:20:61:73:c0:18:03:ee:f7:
         d3:dd:31:d8:62:1a:e9:82:89:55:f7:e6:80:93:b5:24:9e:8a:
         c9:2f:1f:40:0a:74:47:bf:88:8e:09:62:03:6d:66:67:3b:e7:
         39:ad:2b:91:19:9d:78:67:46:12:e0:6e:06:36:ed:46:28:91:
         53:6f:3e:00:b3:dc:3d:44:6e:c2:7d:ab:cc:16:4f:ab:f1:19:
         4a:8a:5c:65:62:35:3e:d8:fb:fd:fb:78:8f:b6:85:5c:56:fd:
         4b:13:ab:68
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBUjExMC8GA1UEBRMoNUREMTlDNjdGMTNFNjNEN0FEQTFBRUFDOEI3N0FD
QzA2M0U5RTUxNDAeFw0yNTEyMjEwMTMwMDFaFw0yNTEyMjMwMTMwMDFaMBgxFjAU
BgNVBAMTDTY5NDc0ZDk5LTg3MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoBQ5Wawz2XYHG2PqusAsGZnpEe3wazB01oUqm5Q6c7QSQr0xFJY8Raq2j
y2cLSDmpeRBgqM9F8uvJvFqdXfwu/Rs49qxW7ySERcyBxmZS3+dxfUhAD7e0KgQg
ktwFMyrUk1bFdMK3ex6P2U7r76DvRpiiD0ay/VyExOBBmFvmvZwGhcl1AvD//Bx5
C/lyyMcKNLJo9pRW0WiVr1WK+ECr8uk9IzJ6Sh8M8FRHqHmVIsRYtURVvk3VyLag
ha4vSqQZ5xTmUd7slZu2jP2+UiBahZL+8XxlFnxnqL8SZ7MNpey4V5/QBicjWS03
vYJIYa7rdXJ4Q8wVfDwbst7rrKilAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU3Hit
0M2RoOQvBqv5G8gUhGnEVnUwHwYDVR0jBBgwFoAUXdGcZ/E+Y9etoa6si3eswGPp
5RQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0U4NDcwM0JDOTFFRDExRTlCMDlFNzQ3REY4QUVBMjI4L1hkR2Na
X0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hkR2NaX0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzk1QzQvRTg0NzAzQkM5MUVEMTFFOUIwOUU3NDdERjhBRUEy
MjgvWGRHY1pfRS1ZOWV0b2E2c2kzZXN3R1BwNVJRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAto1fdWUSJ2cbL7vx3emlTxVkzVBtX/GMW
cxchgJqUUTz3RyShUVwAkifuJWa6P1CVIcBlDcTNmRB7vkxBQK3PikPhvTNZQVV6
OF3GRRK+YYAE7wEWfG2QmHddM70cPz5kooY8fkN5NTTOhPAjYQJOFuQfI81w1pWO
JKqv104VrkWprix7yOOskNCEaaLTSQgmk0uRmAkSSCGkIGFzwBgD7vfT3THYYhrp
golV9+aAk7UknorJLx9ACnRHv4iOCWIDbWZnO+c5rSuRGZ14Z0YS4G4GNu1GKJFT
bz4As9w9RG7CfavMFk+r8RlKilxlYjU+2Pv9+3iPtoVcVv1LE6to
-----END CERTIFICATE-----
Generated at Sun Dec 21 21:15:22 2025 by rpki-client