This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          LMiXDKucr4qkwWZ6Vf8nydZgWJ8QuMe/XoDGLZWBPZQ=
Subject key identifier:   26:55:DF:34:B1:6D:09:84:7B:28:73:85:84:C3:C2:1D:21:8F:BA:B9
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       0339
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          0337
Signing time:             Sun 14 Dec 2025 03:47:26 +0000
Manifest this update:     Sun 14 Dec 2025 03:47:26 +0000
Manifest next update:     Tue 16 Dec 2025 03:47:26 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: 9PUHQlbU4ytfyPaKbcgaQzfdtSZvUCZVYWhUNf7HJNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Dec 2025 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Dec 14 03:47:26 2025 GMT
            Not After : Dec 16 03:47:26 2025 GMT
        Subject: CN=693e334e-7c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:5b:7c:5a:c1:52:3a:85:ba:6d:df:09:80:
                    17:d3:e7:51:40:3b:b7:8f:a2:c6:61:10:ac:22:6e:
                    fc:d7:ba:f7:15:32:20:85:4b:2c:73:cd:08:6f:c0:
                    42:5a:3e:d0:c2:39:7c:ae:e0:5a:1b:65:c0:f6:7d:
                    a2:ee:6e:af:c8:fd:a5:25:56:5e:1c:b4:87:56:df:
                    8e:3c:ac:b1:e1:a7:d6:aa:7b:b5:58:2c:03:28:66:
                    e2:89:6b:5c:80:4c:73:83:cd:08:56:b8:c4:62:be:
                    bd:28:2d:86:74:9f:5a:44:6c:79:1e:1b:9e:07:57:
                    c5:77:35:0b:4b:d7:f0:09:26:52:c1:38:4f:72:d2:
                    d6:37:fa:ee:9b:1b:16:34:ff:2b:29:09:06:5f:3a:
                    59:14:0a:6c:45:8b:ef:b8:a3:5a:ee:07:c5:0d:d6:
                    f7:ed:d1:12:dc:12:cb:ec:ff:5e:61:90:10:24:41:
                    87:1f:2a:4f:8b:4f:5a:31:69:04:c9:94:d1:83:c7:
                    21:95:e2:7a:af:43:7f:05:75:dd:cf:1d:8c:2d:6f:
                    9f:13:44:3f:47:d6:1f:7f:8a:ae:e6:c2:d8:f8:4b:
                    41:f3:6c:23:f1:ea:7a:fc:98:d1:7d:d3:dc:d3:ff:
                    10:05:ab:55:47:97:ab:6c:70:c4:23:e6:17:47:ac:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:DF:34:B1:6D:09:84:7B:28:73:85:84:C3:C2:1D:21:8F:BA:B9
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:66:e7:ef:78:69:48:3f:fc:78:f8:1d:1f:40:7c:9b:49:0e:
         f4:b2:ce:22:2a:00:7b:f1:3f:d7:30:3f:77:9b:48:70:f2:77:
         cb:e5:ee:8d:0b:53:16:f7:77:26:a0:2f:4a:9c:17:1d:d3:7d:
         5f:f9:90:75:1f:21:ca:93:d2:25:5d:02:b1:09:c8:86:e4:7d:
         d5:82:b3:6a:b2:f3:a3:33:aa:a3:42:a0:4c:2d:78:5f:0a:b0:
         53:c5:88:88:b4:68:1b:5e:58:c9:8d:f4:42:07:00:5e:1c:79:
         9a:c8:2c:13:ff:0e:2f:65:35:f1:ea:46:3e:92:d6:42:90:d4:
         ef:3c:b1:55:c5:e6:d7:dc:a6:30:de:e9:d9:1e:82:52:96:93:
         b4:7d:d2:74:d0:c9:56:7b:1b:0c:c0:e9:d4:04:9c:54:31:f7:
         f9:52:42:b7:4d:80:87:85:de:0a:c2:98:3d:28:dc:08:d2:79:
         f5:86:50:ec:fa:95:d3:4a:62:57:95:90:d0:81:29:aa:42:1b:
         1c:bb:f2:dc:12:99:e8:0a:96:a7:7f:f6:50:58:04:09:49:4b:
         89:c3:03:14:b3:73:25:80:78:2f:98:24:07:46:68:2b:fb:ce:
         42:45:52:69:c9:61:fb:dd:67:81:39:15:62:de:ad:0e:47:b5:
         a4:d4:e7:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE5NkRBRjExMC8GA1UEBRMoODAzMDc3N0M3NEQxQUYxMjg5ODEwRTQ0RjVGRUND
OUNGMDk3M0EwRTAeFw0yNTEyMTQwMzQ3MjZaFw0yNTEyMTYwMzQ3MjZaMBgxFjAU
BgNVBAMTDTY5M2UzMzRlLTdjOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC05Vt8WsFSOoW6bd8JgBfT51FAO7ePosZhEKwibvzXuvcVMiCFSyxzzQhv
wEJaPtDCOXyu4FobZcD2faLubq/I/aUlVl4ctIdW3448rLHhp9aqe7VYLAMoZuKJ
a1yATHODzQhWuMRivr0oLYZ0n1pEbHkeG54HV8V3NQtL1/AJJlLBOE9y0tY3+u6b
GxY0/yspCQZfOlkUCmxFi++4o1ruB8UN1vft0RLcEsvs/15hkBAkQYcfKk+LT1ox
aQTJlNGDxyGV4nqvQ38Fdd3PHYwtb58TRD9H1h9/iq7mwtj4S0HzbCPx6nr8mNF9
09zT/xAFq1VHl6tscMQj5hdHrKrnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJlXf
NLFtCYR7KHOFhMPCHSGPurkwHwYDVR0jBBgwFoAUgDB3fHTRrxKJgQ5E9f7MnPCX
Og4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBOTZELzc5MEEwNDJDNjZDRDExRUU5NTNFRDE3MDRBRDlFNkZDL2dEQjNm
SFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dEQjNmSFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REE5NkQvNzkwQTA0MkM2NkNEMTFFRTk1M0VEMTcwNEFE
OUU2RkMvZ0RCM2ZIVFJyeEtKZ1E1RTlmN01uUENYT2c0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSZufveGlIP/x4+B0fQHybSQ70ss4i
KgB78T/XMD93m0hw8nfL5e6NC1MW93cmoC9KnBcd031f+ZB1HyHKk9IlXQKxCciG
5H3VgrNqsvOjM6qjQqBMLXhfCrBTxYiItGgbXljJjfRCBwBeHHmayCwT/w4vZTXx
6kY+ktZCkNTvPLFVxebX3KYw3unZHoJSlpO0fdJ00MlWexsMwOnUBJxUMff5UkK3
TYCHhd4Kwpg9KNwI0nn1hlDs+pXTSmJXlZDQgSmqQhscu/LcEpnoCpanf/ZQWAQJ
SUuJwwMUs3MlgHgvmCQHRmgr+85CRVJpyWH73WeBORVi3q0OR7Wk1Odz
-----END CERTIFICATE-----
Generated at Sun Dec 14 07:48:08 2025 by rpki-client