This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          lu+bw0c4Dyfq8w5tVSh/Ut/Rbtdp+iaWuZCAEJC7AdE=
Subject key identifier:   66:B0:46:67:D1:E0:A8:A9:25:3F:4D:8C:C7:CD:DF:D9:F9:FD:CB:49
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       027F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          027C
Signing time:             Sun 28 Dec 2025 04:19:22 +0000
Manifest this update:     Sun 28 Dec 2025 04:19:21 +0000
Manifest next update:     Tue 30 Dec 2025 04:19:21 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: BHR/e5GhAfFLhtVAPfUt9W6bDxT93/R6uY4SdrTbgVU=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: Dec 28 04:19:21 2025 GMT
            Not After : Dec 30 04:19:21 2025 GMT
        Subject: CN=6950afca-7041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:f6:b9:c2:4d:e8:a1:ca:7c:79:f4:92:10:
                    6e:3b:10:5c:e2:4e:44:ef:74:91:00:ba:36:e4:6d:
                    34:4d:94:b3:ea:5f:32:6b:8c:48:a7:ac:9d:4c:c0:
                    c8:c1:47:b0:16:e2:f5:b3:bb:a8:4e:06:64:44:a3:
                    1c:03:42:13:a0:22:37:de:95:ae:cf:d4:c1:5b:6f:
                    52:4b:fd:57:3e:17:c5:0f:2e:c5:4c:56:1c:59:cd:
                    2f:48:93:96:0b:f8:e0:2b:aa:0d:b1:6a:20:a7:45:
                    75:73:1f:0b:a7:3d:8a:13:8a:cb:25:24:7e:0a:73:
                    27:8d:cb:7c:10:1d:3e:c1:2a:24:d4:13:22:0d:89:
                    cc:46:4f:e7:6d:fb:1b:00:4f:67:10:e1:f7:f9:50:
                    5a:28:45:a0:61:08:4c:74:77:7b:6e:81:82:b7:9e:
                    28:f9:47:bc:33:7e:63:08:09:26:85:a0:84:f9:31:
                    0e:55:64:04:7b:73:57:27:d2:9f:13:44:d7:66:be:
                    48:8d:0f:75:df:8c:6a:e0:28:d4:61:72:f0:db:55:
                    d1:c0:36:52:f7:bd:74:c7:93:ee:98:57:70:e7:f5:
                    84:d2:89:d4:8b:a7:fa:fc:76:37:97:22:47:0d:a0:
                    cb:c4:93:3f:bc:c3:55:7f:86:a6:8c:37:3e:2b:95:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:46:67:D1:E0:A8:A9:25:3F:4D:8C:C7:CD:DF:D9:F9:FD:CB:49
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:4b:42:66:82:9b:63:93:d2:f2:7f:39:98:8b:22:e1:f0:
         16:b2:93:36:8c:d7:30:5c:0b:7f:ab:ce:8e:69:ca:50:ed:ea:
         4d:16:c4:3b:52:13:6c:b0:6d:bf:a5:3a:94:31:50:a7:26:66:
         18:25:01:2a:eb:de:ff:01:d9:b1:d2:6e:c0:64:e3:12:2e:c4:
         98:09:96:1d:8e:02:01:c0:99:93:63:88:22:5f:b4:e4:24:eb:
         a1:0e:a8:b7:02:f1:86:da:a5:45:4d:ef:e0:d7:85:d5:94:e1:
         40:93:3d:1a:c1:bb:0e:37:01:57:bd:5f:0e:20:01:d4:ff:a7:
         d2:e6:ac:25:ab:32:e0:77:97:b4:22:9b:5c:f7:9c:8e:e9:a6:
         fe:9c:72:6b:35:40:20:9a:0d:b4:2a:7d:e2:c5:17:8f:a2:4f:
         51:a7:3e:0c:2c:20:cf:89:6e:07:cb:ec:e5:7a:2f:b5:9b:b9:
         15:8e:7f:1d:f9:64:78:aa:b2:95:6b:20:a8:17:10:d3:50:31:
         4f:5d:6b:fa:f5:c9:7f:37:3d:38:1e:b5:74:65:bb:a5:7a:7d:
         e6:60:4b:a6:97:48:0c:b4:33:66:ae:bf:19:71:8f:48:bc:03:
         68:03:73:60:b3:a4:79:fd:e1:02:98:60:5d:63:24:b9:95:eb:
         a5:53:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:40:07 2025 by rpki-client