This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
File:                     RtQFVYABqLApuWqxNAbWmh3XQEU.mft (raw, json)
Hash identifier:          OUmr/mcGGWuHBmYBTp57tcr5v3/idUTmztEs+pE6yHU=
Subject key identifier:   FA:E6:31:61:0C:FF:9F:01:AF:63:97:42:70:43:7A:28:E4:BE:D3:8E
Authority key identifier: 46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45
Certificate issuer:       /CN=F3619C8CAF/serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
Certificate serial:       0207
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
Manifest number:          0201
Signing time:             Wed 24 Dec 2025 04:35:06 +0000
Manifest this update:     Wed 24 Dec 2025 04:35:05 +0000
Manifest next update:     Fri 26 Dec 2025 04:35:05 +0000
Files and hashes:         1: RtQFVYABqLApuWqxNAbWmh3XQEU.crl (hash: TwNoh0tCZQS7XVfn/++CK5Oke1ls+jh1T0esEo5xurk=)
                          2: 1B05F788A4FA11F0885D037BDAE4EC9C.roa (hash: GjkulRsKKJbZVrp77ugYgp/kqLitaMudIz+NNcc4dbE=)
                          3: F71D77E2AA8611EF98B0D05E762E951A.roa (hash: Ihj2mACjaGHf96/o4yy3js68n256Vu9f7Bim7nWvWLM=)
                          4: 3EAC507A5FFE11EFA5993885762E951A.roa (hash: 4mY/TWC9DuCZsuGXVqoat7c6bUR73636kXTYSKoNoxk=)
                          5: DE5116B4609011EF8D12C1B3762E951A.roa (hash: 9S7+mdx2DKBgrgKmUfkV+mK4JJ+yxtDU858vKwTfcjs=)
                          6: 647FC9285FFC11EFBB5ADB78762E951A.roa (hash: H2q1fmOzE7jtNl9AE16ng8aqC1lbAw9rIP10pKwdV+Y=)
                          7: 522D5DA65FEA11EFAF87018A762E951A.roa (hash: UJHI6TLE0pysd9O5tp5SxgrLxypzmdtkRQHX43GWISE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 04:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAF, serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
        Validity
            Not Before: Dec 24 04:35:05 2025 GMT
            Not After : Dec 26 04:35:05 2025 GMT
        Subject: CN=694b6d7a-3c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:7b:1f:0f:fa:2c:44:84:aa:6f:7f:8d:51:
                    8d:c8:f6:2b:a9:3e:b7:b5:0a:0f:25:55:fa:5b:9b:
                    f2:73:9a:65:bd:0d:52:1a:4b:0b:48:40:81:0a:5b:
                    52:36:bc:04:41:4c:2a:5e:1a:67:9a:78:9c:69:b4:
                    de:6b:b9:83:0a:8b:11:5c:72:84:94:4e:b9:fd:fc:
                    20:df:5f:34:54:79:59:42:55:cf:07:5c:af:99:25:
                    1a:80:10:33:6a:25:9f:33:6a:84:51:ab:d2:1e:85:
                    a3:aa:4d:10:01:28:cd:63:3b:37:6f:de:6d:db:41:
                    99:e2:60:f0:2e:ac:ef:ec:c4:39:5b:c2:2f:0a:88:
                    82:88:29:4a:18:90:db:33:20:79:32:cc:a7:32:8e:
                    94:f4:18:72:be:39:7c:69:a5:9b:cb:98:65:3f:f7:
                    66:d7:fc:d8:30:49:da:56:04:4b:28:90:dd:9e:10:
                    de:59:ce:36:8f:e3:4a:8f:5a:a0:6a:b4:14:f4:61:
                    12:e9:54:16:5d:12:97:55:af:59:d2:86:51:c9:6d:
                    55:ca:a6:a2:ea:c8:49:34:f5:19:8c:ed:1b:b2:01:
                    4a:de:ba:e6:f0:7c:14:a0:df:41:f2:62:16:87:c8:
                    99:0d:a1:22:59:a9:1e:b6:5a:95:ca:6f:b7:fe:00:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:31:61:0C:FF:9F:01:AF:63:97:42:70:43:7A:28:E4:BE:D3:8E
            X509v3 Authority Key Identifier:
                keyid:46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:d8:b4:33:46:d3:1f:df:ac:f4:ef:60:5c:d5:dd:a7:da:
         9d:d2:6e:bf:de:c5:6c:32:52:bc:5c:69:35:ed:2f:db:20:5e:
         ed:34:49:d6:a1:15:80:dc:9b:27:c0:48:6d:33:50:09:ed:98:
         7e:5e:83:74:9a:2e:a4:61:23:ec:02:c3:7b:66:4a:6f:3d:76:
         50:3a:dd:ce:51:56:2b:2a:c9:6a:35:73:06:54:7f:fe:b0:c6:
         ae:b8:2c:d4:e8:76:26:f6:3c:91:84:d9:c0:8d:5c:f3:1c:71:
         65:c9:10:a4:1b:13:91:ee:c9:6b:f9:a4:2b:ee:a2:d9:9f:39:
         ab:e0:f0:b5:fd:ae:f7:12:77:89:bd:8d:ed:e1:10:50:31:ce:
         23:ac:67:68:62:12:d7:72:33:dd:d0:7f:2b:ad:61:a9:c3:44:
         e0:68:35:f0:2a:a1:59:e2:d3:64:61:67:97:51:29:68:85:60:
         9e:c8:9b:fd:3f:94:01:b2:88:bc:03:9d:8c:ce:ad:a0:ef:07:
         ac:95:2a:61:72:c4:85:23:2c:42:e8:2e:08:ba:a1:f0:7d:16:
         59:d4:4c:f0:73:13:92:50:8a:75:80:7e:2f:1b:0b:c0:86:8d:
         2f:99:fc:1a:f2:63:83:7e:7d:93:57:2d:1a:b1:11:64:39:96:
         b2:8f:c0:d6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlDOENBRjExMC8GA1UEBRMoNDZENDA1NTU4MDAxQThCMDI5Qjk2QUIxMzQwNkQ2
OUExREQ3NDA0NTAeFw0yNTEyMjQwNDM1MDVaFw0yNTEyMjYwNDM1MDVaMBgxFjAU
BgNVBAMTDTY5NGI2ZDdhLTNjOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEynsfD/osRISqb3+NUY3I9iupPre1Cg8lVfpbm/JzmmW9DVIaSwtIQIEK
W1I2vARBTCpeGmeaeJxptN5ruYMKixFccoSUTrn9/CDfXzRUeVlCVc8HXK+ZJRqA
EDNqJZ8zaoRRq9IehaOqTRABKM1jOzdv3m3bQZniYPAurO/sxDlbwi8KiIKIKUoY
kNszIHkyzKcyjpT0GHK+OXxppZvLmGU/92bX/NgwSdpWBEsokN2eEN5ZzjaP40qP
WqBqtBT0YRLpVBZdEpdVr1nShlHJbVXKpqLqyEk09RmM7RuyAUreuubwfBSg30Hy
YhaHyJkNoSJZqR62WpXKb7f+ADXjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+uYx
YQz/nwGvY5dCcEN6KOS+044wHwYDVR0jBBgwFoAURtQFVYABqLApuWqxNAbWmh3X
QEUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QzhDL0MzRTEwQUZDNUZEQTExRUY4RUU1OUFBOTc2MkU5NTFBL1J0UUZW
WUFCcUxBcHVXcXhOQWJXbWgzWFFFVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1J0UUZWWUFCcUxBcHVXcXhOQWJXbWgzWFFFVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTlDOEMvQzNFMTBBRkM1RkRBMTFFRjhFRTU5QUE5NzYy
RTk1MUEvUnRRRlZZQUJxTEFwdVdxeE5BYldtaDNYUUVVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtNti0M0bTH9+s9O9gXNXdp9qd0m6/
3sVsMlK8XGk17S/bIF7tNEnWoRWA3JsnwEhtM1AJ7Zh+XoN0mi6kYSPsAsN7Zkpv
PXZQOt3OUVYrKslqNXMGVH/+sMauuCzU6HYm9jyRhNnAjVzzHHFlyRCkGxOR7slr
+aQr7qLZnzmr4PC1/a73EneJvY3t4RBQMc4jrGdoYhLXcjPd0H8rrWGpw0TgaDXw
KqFZ4tNkYWeXUSlohWCeyJv9P5QBsoi8A52Mzq2g7weslSphcsSFIyxC6C4IuqHw
fRZZ1EzwcxOSUIp1gH4vGwvAho0vmfwa8mODfn2TVy0asRFkOZayj8DW
-----END CERTIFICATE-----
Generated at Wed Dec 24 13:38:49 2025 by rpki-client