This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File:                     HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier:          EkJFYWy9QU6qu2i1N4ZAwjkMVM6tyNsiByxRwhA3Tk0=
Subject key identifier:   78:51:A0:88:E9:FD:0C:9E:E1:3C:05:92:B3:4B:8F:E4:7D:B2:2B:55
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer:       /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial:       0379
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number:          0376
Signing time:             Sun 07 Dec 2025 03:38:17 +0000
Manifest this update:     Sun 07 Dec 2025 03:38:16 +0000
Manifest next update:     Tue 09 Dec 2025 03:38:16 +0000
Files and hashes:         1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: VvYnhAwFr3SSOSgl9wXc5xq14pE+Xw3wO7TI4n3erFY=)
                          2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
                          3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 03:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
        Validity
            Not Before: Dec  7 03:38:16 2025 GMT
            Not After : Dec  9 03:38:16 2025 GMT
        Subject: CN=6934f6a9-da63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:7b:95:79:25:03:ef:79:4a:82:5d:29:99:
                    30:21:da:d9:7f:29:e5:61:fa:56:77:5e:5f:81:34:
                    8a:64:f5:56:57:ed:df:7d:fa:56:0c:1a:ec:ab:df:
                    57:77:36:b1:08:e9:ba:5c:8d:86:3f:36:c1:e7:62:
                    d9:d2:22:14:58:1f:43:78:e9:19:a5:f0:47:ac:6d:
                    8b:eb:db:de:46:63:53:92:6c:26:5e:de:47:37:72:
                    52:91:29:de:8e:4a:69:9f:00:fd:b5:5d:e0:a2:94:
                    98:b8:e9:9f:ae:64:2f:79:47:9d:0a:e4:a9:35:9c:
                    82:0b:24:80:84:f2:14:c7:82:49:53:85:eb:42:18:
                    b1:6a:83:1a:7a:da:ba:97:30:f2:80:4d:08:fa:dc:
                    79:d9:91:c9:8e:e3:63:6e:da:e8:87:e4:81:6c:be:
                    62:ad:2e:f4:6b:d0:ec:7a:2b:75:2c:dd:10:d0:09:
                    a1:01:21:aa:55:a8:f0:7a:cf:91:f4:ac:3f:b5:c4:
                    bb:f9:f4:9a:10:ac:eb:69:98:19:92:08:fb:07:16:
                    ec:39:76:ec:95:7a:22:c9:47:94:eb:d1:b3:e3:ed:
                    ba:2e:a5:e5:32:26:b3:4a:f2:14:37:e7:26:40:5c:
                    87:6c:77:0c:7e:5c:4d:29:eb:c9:e7:6e:bd:66:12:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:51:A0:88:E9:FD:0C:9E:E1:3C:05:92:B3:4B:8F:E4:7D:B2:2B:55
            X509v3 Authority Key Identifier:
                keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e4:3a:32:59:50:76:bc:d4:ba:f6:33:71:58:65:1a:59:db:
         8a:76:fb:d7:14:c2:8f:8b:c1:29:de:c5:66:b3:c6:e7:1d:bf:
         94:ac:00:20:f0:bc:75:59:02:79:b8:f3:e9:fe:d6:f1:d3:e2:
         18:a4:f9:90:25:42:e5:e9:f6:a8:72:15:dd:45:85:dd:db:2d:
         9b:38:9c:c2:a0:42:49:a6:29:bd:e0:c1:de:3c:20:3a:ef:95:
         c0:f2:04:bb:53:c4:da:35:c2:45:f0:17:31:eb:4e:1b:ba:bc:
         8e:bc:b3:0b:e0:3f:f3:f5:93:2e:c7:d8:fc:52:2c:f4:57:84:
         e3:2c:61:28:e0:51:3d:3e:c0:40:9b:ba:8b:36:79:0a:07:bb:
         59:ef:e3:7f:50:fd:3d:1e:cd:b6:22:6c:2e:02:73:f9:f0:ef:
         5e:4d:9e:58:5f:11:75:d0:00:3a:b3:4c:d6:a9:ee:47:c5:8f:
         9a:67:81:ea:b9:4c:92:b7:06:04:53:62:e0:45:59:27:cc:d1:
         e1:43:f2:f7:1d:9b:a8:04:81:b6:b2:ab:57:30:c8:0a:e6:55:
         c6:f3:81:e8:6f:dc:30:d5:0a:d8:91:75:d1:a1:04:3d:0b:2c:
         17:fb:24:9b:42:ab:4b:18:b7:de:d1:bc:22:9d:ed:0e:39:13:
         95:ed:e1:37
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjE0M0ZBRjExMC8GA1UEBRMoMUU4OTRFQzBCMjg2QTZFREQ5MzExN0Q3QTNCRENE
OEY1NzcxMDE5RDAeFw0yNTEyMDcwMzM4MTZaFw0yNTEyMDkwMzM4MTZaMBgxFjAU
BgNVBAMTDTY5MzRmNmE5LWRhNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA1XuVeSUD73lKgl0pmTAh2tl/KeVh+lZ3Xl+BNIpk9VZX7d99+lYMGuyr
31d3NrEI6bpcjYY/NsHnYtnSIhRYH0N46Rml8EesbYvr295GY1OSbCZe3kc3clKR
Kd6OSmmfAP21XeCilJi46Z+uZC95R50K5Kk1nIILJICE8hTHgklThetCGLFqgxp6
2rqXMPKATQj63HnZkcmO42Nu2uiH5IFsvmKtLvRr0Ox6K3Us3RDQCaEBIapVqPB6
z5H0rD+1xLv59JoQrOtpmBmSCPsHFuw5duyVeiLJR5Tr0bPj7boupeUyJrNK8hQ3
5yZAXIdsdwx+XE0p68nnbr1mEoKDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeFGg
iOn9DJ7hPAWSs0uP5H2yK1UwHwYDVR0jBBgwFoAUHolOwLKGpu3ZMRfXo73Nj1dx
AZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxNDNGLzU0QkJENzQ0MzE0NDExRUVBRDQ5MzEzRTRBRDlFNkZDL0hvbE93
TEtHcHUzWk1SZlhvNzNOajFkeEFaMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hvbE93TEtHcHUzWk1SZlhvNzNOajFkeEFaMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjE0M0YvNTRCQkQ3NDQzMTQ0MTFFRUFENDkzMTNFNEFE
OUU2RkMvSG9sT3dMS0dwdTNaTVJmWG83M05qMWR4QVowLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW5DoyWVB2vNS69jNxWGUaWduKdvvX
FMKPi8Ep3sVms8bnHb+UrAAg8Lx1WQJ5uPPp/tbx0+IYpPmQJULl6faochXdRYXd
2y2bOJzCoEJJpim94MHePCA675XA8gS7U8TaNcJF8Bcx604buryOvLML4D/z9ZMu
x9j8Uiz0V4TjLGEo4FE9PsBAm7qLNnkKB7tZ7+N/UP09Hs22ImwuAnP58O9eTZ5Y
XxF10AA6s0zWqe5HxY+aZ4HquUyStwYEU2LgRVknzNHhQ/L3HZuoBIG2sqtXMMgK
5lXG84Hob9ww1QrYkXXRoQQ9CywX+ySbQqtLGLfe0bwine0OOROV7eE3
-----END CERTIFICATE-----
Generated at Mon Dec 8 04:01:17 2025 by rpki-client