This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
File:                     VnyvmRgrnidPuabWkIh4qwHDQoE.mft (raw, json)
Hash identifier:          7HMFExrltolzUEj6xmLe3m9MKzRZvusMJ5VXyzmwCkk=
Subject key identifier:   7E:FB:6C:09:66:3B:95:65:C8:17:93:92:9D:D9:D2:DA:5A:8E:D8:F3
Authority key identifier: 56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81
Certificate issuer:       /CN=F367EEA2AR/serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
Certificate serial:       038A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
Manifest number:          0387
Signing time:             Fri 19 Dec 2025 03:38:47 +0000
Manifest this update:     Fri 19 Dec 2025 03:38:46 +0000
Manifest next update:     Sun 21 Dec 2025 03:38:46 +0000
Files and hashes:         1: VnyvmRgrnidPuabWkIh4qwHDQoE.crl (hash: N8dNf0oNYRalWdoTeVuW7rGL0I9Z3Dd/FHXiy6SoKQ4=)
                          2: 3FB5FE122F6711EE90A2841B4AD9E6FC.roa (hash: WJqH0lra+XjbqtJEVmP0k9XRwahFYNZjcO/TJSOHaQA=)
                          3: C069B486B24311EEB2664F99775412E6.roa (hash: NeIq4SLTxB0EhIQzCliNvAbug3avKsYrABorphJD/7A=)
                          4: E71E5D4C2EB411EEA206B6794AD9E6FC.roa (hash: hbtcT6eA8KL9XUcRwzBfgyp8AVJuRXtNG7MjkLclPW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                          rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AR, serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
        Validity
            Not Before: Dec 19 03:38:46 2025 GMT
            Not After : Dec 21 03:38:46 2025 GMT
        Subject: CN=6944c8c7-3926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:06:6c:3b:d3:30:49:d4:a6:c9:28:fb:b5:
                    50:20:9c:d4:84:fc:81:af:2d:53:8f:7e:90:60:24:
                    a8:4e:3b:50:f1:9d:48:59:4c:b4:dc:47:0d:f7:f5:
                    97:03:c6:4c:e5:5b:86:45:0a:b9:60:46:14:c8:08:
                    d5:77:35:d1:b0:11:cd:30:85:08:35:90:1f:14:96:
                    4e:88:2c:4b:58:39:3d:56:6d:2b:81:e8:ac:eb:19:
                    53:9f:62:9b:b4:3a:a9:df:22:17:85:af:d4:e1:55:
                    d6:4d:3f:dd:f1:97:18:ef:9b:9c:11:d7:6d:38:2a:
                    08:09:bc:d7:70:e1:5d:e0:5c:fe:4b:b8:c9:5b:b7:
                    1c:7c:2c:02:c1:67:9f:33:95:10:ba:a3:3b:ee:52:
                    74:43:84:55:c6:e7:86:23:59:84:3b:6b:52:1c:f4:
                    34:7b:fb:84:0e:01:82:2c:4e:c4:04:4e:a6:db:52:
                    34:f5:89:bb:8b:46:9e:32:a1:bc:db:6b:34:b0:4b:
                    d5:25:e7:26:a9:83:56:0c:83:27:c3:c5:63:bb:cb:
                    4d:2e:8c:09:e5:a9:61:b1:4e:60:08:ff:a8:e0:10:
                    7b:cf:be:27:4c:ab:a0:4d:e7:4f:ff:84:fd:36:f2:
                    11:21:2c:84:ca:c5:c7:e6:e6:ca:f1:cc:0e:fd:37:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FB:6C:09:66:3B:95:65:C8:17:93:92:9D:D9:D2:DA:5A:8E:D8:F3
            X509v3 Authority Key Identifier:
                keyid:56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:7e:50:11:31:73:d1:28:1c:77:9b:dd:f5:b8:43:55:0a:
         a3:a9:92:b8:62:51:ba:51:9d:f6:e8:a0:f7:c1:2f:da:dc:2d:
         13:9d:ae:1f:63:b3:71:86:ee:81:3d:9f:1c:c6:21:57:a7:54:
         6a:25:d8:d8:66:70:b8:d7:b4:81:4e:cf:03:24:b0:8f:19:4e:
         f6:2c:ea:b6:b4:70:db:ca:15:85:f8:09:d3:44:86:02:5e:ae:
         e9:e6:93:1b:57:77:4b:9e:19:92:2d:cd:3e:92:84:5f:70:b8:
         f9:a7:a9:19:01:15:e6:15:b1:32:c7:67:40:98:9b:69:ed:0f:
         8c:eb:84:fb:2d:bc:b0:c2:a6:a7:00:2a:ef:45:22:59:a8:b0:
         0e:27:b2:47:58:16:f6:e4:e4:c6:1a:93:a8:e8:9c:d9:66:d0:
         91:6e:d9:0a:b4:10:ee:96:bf:cd:6e:dc:c5:db:02:39:50:f9:
         2c:24:ad:09:b9:ed:07:ad:2e:49:7d:70:18:1a:00:d8:59:c5:
         e5:4a:cb:91:27:ae:7c:76:db:76:86:73:c4:0b:87:98:e0:ca:
         86:72:8c:14:18:e0:50:db:12:39:df:18:4f:9f:8e:a3:bf:5f:
         da:08:e0:64:01:b6:ae:54:d4:a8:bd:d8:a2:f1:67:fa:15:b0:
         78:3a:34:a2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA4owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0VFQTJBUjExMC8GA1UEBRMoNTY3Q0FGOTkxODJCOUUyNzRGQjlBNkQ2OTA4ODc4
QUIwMUMzNDI4MTAeFw0yNTEyMTkwMzM4NDZaFw0yNTEyMjEwMzM4NDZaMBgxFjAU
BgNVBAMTDTY5NDRjOGM3LTM5MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDg9wZsO9MwSdSmySj7tVAgnNSE/IGvLVOPfpBgJKhOO1DxnUhZTLTcRw33
9ZcDxkzlW4ZFCrlgRhTICNV3NdGwEc0whQg1kB8Ulk6ILEtYOT1WbSuB6KzrGVOf
Ypu0OqnfIheFr9ThVdZNP93xlxjvm5wR1204KggJvNdw4V3gXP5LuMlbtxx8LALB
Z58zlRC6ozvuUnRDhFXG54YjWYQ7a1Ic9DR7+4QOAYIsTsQETqbbUjT1ibuLRp4y
obzbazSwS9Ul5yapg1YMgyfDxWO7y00ujAnlqWGxTmAI/6jgEHvPvidMq6BN50//
hP028hEhLITKxcfm5srxzA79N9uvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUfvts
CWY7lWXIF5OSndnS2lqO2PMwHwYDVR0jBBgwFoAUVnyvmRgrnidPuabWkIh4qwHD
QoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdFRUEyL0E0NTlDOEEyMkVCNDExRUU4OUJBQzM3ODRBRDlFNkZDL1ZueXZt
UmdybmlkUHVhYldrSWg0cXdIRFFvRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1ZueXZtUmdybmlkUHVhYldrSWg0cXdIRFFvRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0VFQTIvQTQ1OUM4QTIyRUI0MTFFRTg5QkFDMzc4NEFEOUU2
RkMvVm55dm1SZ3JuaWRQdWFiV2tJaDRxd0hEUW9FLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBz35QETFz0Sgcd5vd9bhDVQqjqZK4YlG6
UZ326KD3wS/a3C0Tna4fY7Nxhu6BPZ8cxiFXp1RqJdjYZnC417SBTs8DJLCPGU72
LOq2tHDbyhWF+AnTRIYCXq7p5pMbV3dLnhmSLc0+koRfcLj5p6kZARXmFbEyx2dA
mJtp7Q+M64T7LbywwqanACrvRSJZqLAOJ7JHWBb25OTGGpOo6JzZZtCRbtkKtBDu
lr/NbtzF2wI5UPksJK0Jue0HrS5JfXAYGgDYWcXlSsuRJ658dtt2hnPEC4eY4MqG
cowUGOBQ2xI53xhPn46jv1/aCOBkAbauVNSovdii8Wf6FbB4OjSi
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:50:58 2025 by rpki-client