This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          QI7FOFso8lDojyzcy1rI8YUf/Q+gwHB+Ln/8K4FTpWQ=
Subject key identifier:   82:C3:BD:5A:2D:C9:95:EE:21:FF:93:41:8C:6D:4B:7D:5B:52:08:46
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       044F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          044D
Signing time:             Thu 04 Dec 2025 03:10:26 +0000
Manifest this update:     Thu 04 Dec 2025 03:10:25 +0000
Manifest next update:     Sat 06 Dec 2025 03:10:25 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: H3+gTuaEWFJC9ZyT3Q6jhIhNgQdQna8Bl7QtduutzRs=)
                          2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: Dec  4 03:10:25 2025 GMT
            Not After : Dec  6 03:10:25 2025 GMT
        Subject: CN=6930fba2-50d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:3a:e6:0c:5a:fb:be:52:bf:69:70:6b:d2:
                    11:15:53:8c:18:2f:1d:09:88:67:72:3c:d1:08:a3:
                    f3:8e:fd:93:7f:51:3f:fd:ab:8a:19:86:af:36:a3:
                    cb:b0:ae:df:b9:f2:18:c6:95:d6:58:79:4e:7d:1f:
                    39:e6:95:04:b5:8b:d6:c6:70:92:73:cd:24:9e:06:
                    5e:4a:e7:c9:02:06:08:28:b6:2b:c2:74:c3:5e:6a:
                    5e:a7:c5:a9:4b:2c:31:11:dc:3d:05:74:07:7f:d6:
                    33:22:60:f4:f2:90:42:23:97:37:86:5e:78:83:89:
                    95:8c:be:c1:b3:26:0b:75:eb:d6:70:2b:9a:47:55:
                    d1:7d:56:7a:90:06:eb:4d:c0:68:44:5d:c7:16:57:
                    df:30:35:18:23:64:91:d2:2f:cc:7c:16:3e:03:ff:
                    60:48:20:9a:84:95:03:4b:d0:3f:c9:54:98:eb:11:
                    4a:23:d7:43:bf:6b:ef:7f:b7:6b:11:a0:da:a2:e7:
                    0c:af:88:35:8b:e3:d8:e7:47:7b:36:1a:31:0d:01:
                    51:19:48:85:33:76:3b:cb:12:3f:6a:a7:cd:7d:e9:
                    7c:10:cb:90:f1:29:11:3c:ef:11:9b:6a:58:dc:1b:
                    94:6b:c0:d2:34:ba:3c:bb:11:fc:58:1e:f0:15:37:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:BD:5A:2D:C9:95:EE:21:FF:93:41:8C:6D:4B:7D:5B:52:08:46
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:7f:c3:af:09:19:f0:95:4b:8f:84:d8:ed:d9:a9:77:d9:
         ef:16:74:9b:e0:7f:3d:f4:e9:68:22:39:d1:8e:42:09:b4:38:
         6f:79:d5:66:45:8a:80:f8:71:c6:c6:08:65:52:db:d5:74:6c:
         0e:bf:c2:f0:7c:3b:1b:ad:39:a5:e7:21:e6:2d:03:85:88:81:
         84:e3:a7:c1:ca:6b:20:b5:e8:4e:f8:4b:37:e9:2f:9d:cc:d4:
         0c:6d:69:25:d3:a7:38:2e:93:96:cc:c7:73:49:bc:bf:3b:80:
         cb:56:08:d8:08:93:d0:97:b9:2c:ee:81:d2:b6:43:23:0b:ea:
         e9:57:c3:07:3d:5e:33:03:c5:a6:9a:0d:3d:a0:dd:7a:94:66:
         43:58:49:1b:1c:e3:ef:cc:63:6a:b1:10:d3:dc:ad:82:bb:fa:
         ae:30:a4:40:8a:ef:0d:4d:33:60:1c:72:92:a3:bc:0a:5d:b0:
         56:cd:5a:bc:62:c7:76:52:32:99:9f:12:4f:0f:07:a6:68:7c:
         ae:92:54:38:00:34:20:c7:7b:1d:8e:94:15:47:35:2b:82:92:
         2e:f6:f8:ea:9b:c1:a9:df:d9:1e:2e:2f:7d:45:95:fd:65:90:
         87:48:ae:3c:30:34:7d:ea:d5:cb:b7:c1:54:29:c6:f6:e5:75:
         0c:2b:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:27:50 2025 by rpki-client