This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
File:                     2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft (raw, json)
Hash identifier:          Uu/vuLR5DrHhI9tyx4IHXegy/+V5CLaGN3KRBit/aB0=
Subject key identifier:   4F:14:76:25:75:D7:A5:DD:FB:22:2A:6E:52:F2:3C:00:20:C5:C6:E9
Authority key identifier: D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7
Certificate issuer:       /CN=F3695E06AF/serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
Certificate serial:       06B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
Manifest number:          06B0
Signing time:             Mon 15 Dec 2025 02:14:03 +0000
Manifest this update:     Mon 15 Dec 2025 02:14:03 +0000
Manifest next update:     Wed 17 Dec 2025 02:14:03 +0000
Files and hashes:         1: 2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl (hash: itrD3rRb9jVFHqYe5Ih4ql2f0udhrrCFjPVeiQ6GM98=)
                          2: 6B702572C5B611EB874E825FF8AEA228.roa (hash: TuOEHMyp7ZkGMu80eO/vkZfJHkaFNIwGb2ogLtbprVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 17 Dec 2025 02:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695E06AF, serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
        Validity
            Not Before: Dec 15 02:14:03 2025 GMT
            Not After : Dec 17 02:14:03 2025 GMT
        Subject: CN=693f6eeb-3fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:c2:7f:5b:04:f4:43:77:15:fa:01:60:07:
                    03:23:68:d2:5b:33:54:10:c8:18:ca:18:7b:73:43:
                    03:d5:6d:e1:ce:70:43:a7:34:fe:f8:45:a0:9f:a4:
                    e4:10:69:63:9e:b7:17:98:dc:b8:c9:a0:32:d7:43:
                    f9:83:c9:4c:4e:86:8f:e7:4d:59:ce:a6:bf:1c:8f:
                    a4:bf:24:7a:3c:c6:d7:cc:47:9f:27:28:05:01:ab:
                    a1:fd:59:f7:c5:8d:1a:48:c9:f3:a2:0e:e4:ee:e5:
                    20:29:68:b5:19:1a:6e:58:4e:70:f3:0c:7c:a8:f8:
                    74:83:c0:a2:40:51:94:3a:df:91:b8:0e:4e:5e:a0:
                    7a:81:af:a2:d7:57:92:45:e5:d1:1f:49:dc:2b:4b:
                    2b:79:e3:bb:79:e2:e8:55:d8:b5:8a:48:af:03:8d:
                    09:e8:fa:61:93:1f:a5:3f:49:3f:2b:66:be:3c:aa:
                    b3:b1:78:7b:b4:26:24:56:72:da:5a:c3:cf:e5:a8:
                    89:35:c8:72:f1:6d:5e:dd:d5:bd:a4:82:60:41:4a:
                    68:14:0d:de:cf:ff:b4:7f:ea:0a:88:b6:00:0c:75:
                    2a:5d:d9:2a:28:d9:c2:5e:24:97:9c:b8:f2:74:69:
                    a6:8e:e1:4d:59:0f:bf:57:81:9a:c2:eb:2d:ec:a4:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:14:76:25:75:D7:A5:DD:FB:22:2A:6E:52:F2:3C:00:20:C5:C6:E9
            X509v3 Authority Key Identifier:
                keyid:D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:99:9f:19:19:96:fe:c9:af:33:1d:a0:2c:d3:db:2f:e7:17:
         8a:de:47:fe:65:c3:1e:3f:38:bc:b6:c1:30:4b:9e:ce:81:f5:
         fe:70:52:40:28:3b:a7:9a:20:05:80:31:d2:98:a8:37:39:3d:
         ea:de:f4:77:1f:6a:a4:6d:e3:f6:18:57:ed:bf:31:fa:46:ef:
         95:9b:11:b7:8b:92:0c:c0:7a:23:b9:ab:57:3d:13:61:b5:76:
         c4:86:91:f2:08:e8:b5:ce:8d:b0:f3:8c:01:ba:6d:77:04:ff:
         08:73:3e:da:a3:55:eb:f8:3c:00:84:29:0e:7c:37:67:42:53:
         6a:b6:4d:06:a0:42:e3:20:61:03:66:de:b8:8b:f8:fd:fb:f3:
         35:cc:9b:6b:b5:18:0b:e7:01:30:bf:5f:fa:44:3d:61:d8:b4:
         7e:d8:84:93:3a:42:76:1c:4a:62:55:d2:f8:86:bd:c1:0d:3e:
         9f:ef:c5:86:21:18:37:d8:1d:1c:ce:ad:63:a5:cd:bb:0b:cd:
         2e:c8:5b:4e:b8:e2:75:41:aa:5f:3e:06:39:94:68:6c:36:36:
         19:72:93:7c:38:b6:25:ab:56:ce:22:88:52:fe:47:f2:ff:8b:
         77:90:1d:19:2d:94:3a:a4:b9:5f:81:92:18:33:f8:96:78:ec:
         3e:99:62:c2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVFMDZBRjExMC8GA1UEBRMoRDk2RjkxRjUwMkFFQjVDMjA4OTFFMTdGMTBGRjVF
OEM5Rjg2NzNBNzAeFw0yNTEyMTUwMjE0MDNaFw0yNTEyMTcwMjE0MDNaMBgxFjAU
BgNVBAMTDTY5M2Y2ZWViLTNmYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLNsJ/WwT0Q3cV+gFgBwMjaNJbM1QQyBjKGHtzQwPVbeHOcEOnNP74RaCf
pOQQaWOetxeY3LjJoDLXQ/mDyUxOho/nTVnOpr8cj6S/JHo8xtfMR58nKAUBq6H9
WffFjRpIyfOiDuTu5SApaLUZGm5YTnDzDHyo+HSDwKJAUZQ635G4Dk5eoHqBr6LX
V5JF5dEfSdwrSyt547t54uhV2LWKSK8DjQno+mGTH6U/ST8rZr48qrOxeHu0JiRW
ctpaw8/lqIk1yHLxbV7d1b2kgmBBSmgUDd7P/7R/6gqItgAMdSpd2Soo2cJeJJec
uPJ0aaaO4U1ZD79XgZrC6y3spCMrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTxR2
JXXXpd37IipuUvI8ACDFxukwHwYDVR0jBBgwFoAU2W+R9QKutcIIkeF/EP9ejJ+G
c6cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1RTA2L0NBRDE5NzNBQzQ5NDExRUI5RDcxMjI1MUY4QUVBMjI4LzJXLVI5
UUt1dGNJSWtlRl9FUDllakotR2M2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJXLVI5UUt1dGNJSWtlRl9FUDllakotR2M2Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTVFMDYvQ0FEMTk3M0FDNDk0MTFFQjlENzEyMjUxRjhB
RUEyMjgvMlctUjlRS3V0Y0lJa2VGX0VQOWVqSi1HYzZjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAomZ8ZGZb+ya8zHaAs09sv5xeK3kf+
ZcMePzi8tsEwS57OgfX+cFJAKDunmiAFgDHSmKg3OT3q3vR3H2qkbeP2GFftvzH6
Ru+VmxG3i5IMwHojuatXPRNhtXbEhpHyCOi1zo2w84wBum13BP8Icz7ao1Xr+DwA
hCkOfDdnQlNqtk0GoELjIGEDZt64i/j9+/M1zJtrtRgL5wEwv1/6RD1h2LR+2IST
OkJ2HEpiVdL4hr3BDT6f78WGIRg32B0czq1jpc27C80uyFtOuOJ1QapfPgY5lGhs
NjYZcpN8OLYlq1bOIohS/kfy/4t3kB0ZLZQ6pLlfgZIYM/iWeOw+mWLC
-----END CERTIFICATE-----
Generated at Mon Dec 15 16:51:13 2025 by rpki-client