This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
File:                     CNLFTntRy8c0NN0AYFFFEi8ay2c.mft (raw, json)
Hash identifier:          7IdiGClUZ8JAIoCloGmvRMf0vHrS3LPJ0pWBhHKLOAg=
Subject key identifier:   DE:5A:1F:2F:FF:1E:C4:05:F7:1C:66:53:18:42:B0:10:A5:33:4A:37
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Certificate issuer:       /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial:       0A0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
Manifest number:          0A0D
Signing time:             Sat 27 Dec 2025 01:17:08 +0000
Manifest this update:     Sat 27 Dec 2025 01:17:07 +0000
Manifest next update:     Mon 29 Dec 2025 01:17:07 +0000
Files and hashes:         1: CNLFTntRy8c0NN0AYFFFEi8ay2c.crl (hash: R4CNmgLAVjnFUqppI3oVcie/H6ln8Du8cP6H1Nq9j+w=)
                          2: 6F1DB8E692A611EEAD363E72D25BE465.roa (hash: U9BUtJsAMRe8LhMXpRX7x5DD1wtXY7iOI00OaJrVYBU=)
                          3: B785A0A892A611EEAC80BD72D25BE465.roa (hash: 0EcQiKXcB6upVmjNjOVseGG+e+e/Qe8GkvIuWAlYYX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
        Validity
            Not Before: Dec 27 01:17:07 2025 GMT
            Not After : Dec 29 01:17:07 2025 GMT
        Subject: CN=694f3393-b436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fe:1a:cf:8c:db:bd:ff:1b:9a:14:30:88:45:
                    7b:13:61:f9:05:4f:33:f6:55:3b:41:d3:fa:25:28:
                    c8:d5:a4:39:87:29:d2:02:35:6e:4c:9d:c9:da:ed:
                    cf:51:75:c7:bb:bf:8e:80:e8:0e:3e:b0:d2:40:e4:
                    39:2d:06:cb:c5:e4:c6:c9:3b:47:93:e1:7d:a6:76:
                    ee:5f:e8:f1:8b:21:76:15:27:19:b2:b5:24:e8:8e:
                    ee:3d:c6:46:b9:ff:ec:46:38:67:c3:22:ee:86:c4:
                    cd:31:24:64:87:a5:ee:17:b7:01:3f:89:2b:87:79:
                    f6:0d:6c:52:de:9b:7b:c0:c9:b6:66:3b:cc:a9:aa:
                    11:60:85:3a:b5:84:d5:b4:56:7a:a3:d2:9f:cf:e3:
                    cf:5b:ca:df:06:ee:3d:e8:6d:7e:bd:fa:01:ce:d1:
                    c3:47:d2:da:c5:f6:1f:05:a4:6e:56:c3:b9:c8:c4:
                    39:f3:0f:e5:f0:d1:64:a5:23:33:3b:9c:64:f6:b7:
                    e2:5d:ee:8a:df:0d:d6:2a:07:3c:3d:9d:80:bb:14:
                    95:67:c7:eb:ae:31:8f:f4:0a:e9:70:1b:ee:f8:37:
                    2d:54:8f:4c:c2:7c:53:75:62:4e:f1:66:44:a7:11:
                    3b:d8:48:00:ca:4c:7a:c8:f1:5b:e2:4d:84:1d:cf:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5A:1F:2F:FF:1E:C4:05:F7:1C:66:53:18:42:B0:10:A5:33:4A:37
            X509v3 Authority Key Identifier:
                keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:82:d2:d5:63:93:d0:a6:49:47:79:b6:ed:7a:ad:c5:33:8d:
         48:1c:e1:a7:d4:46:b0:f4:2e:ee:c9:3b:ea:13:60:3d:6d:cc:
         f1:19:95:32:d8:5c:03:7f:6f:70:1d:f9:9e:e5:b8:09:31:4d:
         29:31:78:7b:58:d2:1c:47:5d:99:14:28:5c:2b:19:c7:d8:11:
         b7:ce:0a:4e:44:75:5c:2e:5b:f6:84:48:30:8b:d4:b5:c6:f7:
         56:c9:85:1a:ba:22:5b:1f:32:f6:73:e5:b5:38:4e:46:da:79:
         22:7c:b8:1b:2a:59:f4:dc:cd:99:f1:b4:17:e3:c9:39:e8:32:
         98:c0:89:53:d4:ae:9d:66:8b:e6:8a:20:7a:95:c7:04:aa:b0:
         28:c9:02:42:50:c7:57:5f:34:93:58:9b:7a:6b:b5:17:3e:48:
         06:ce:a1:b0:7e:33:d3:c5:c7:83:98:d6:e9:75:86:2f:bf:79:
         24:28:c2:e1:af:58:bd:50:43:f1:6d:0e:79:2d:d6:b4:e4:d9:
         77:dd:42:4c:27:76:cb:e4:37:22:71:20:73:7e:4f:48:3e:57:
         3e:a7:4f:52:42:a5:7b:39:79:19:03:c6:fd:88:4d:1f:53:45:
         13:b9:db:85:b3:03:ac:6f:2c:24:94:57:10:a4:32:92:6a:1e:
         3c:1a:e3:78
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjVBMTVBRjExMC8GA1UEBRMoMDhEMkM1NEU3QjUxQ0JDNzM0MzRERDAwNjA1MTQ1
MTIyRjFBQ0I2NzAeFw0yNTEyMjcwMTE3MDdaFw0yNTEyMjkwMTE3MDdaMBgxFjAU
BgNVBAMTDTY5NGYzMzkzLWI0MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0/hrPjNu9/xuaFDCIRXsTYfkFTzP2VTtB0/olKMjVpDmHKdICNW5Mncna
7c9Rdce7v46A6A4+sNJA5DktBsvF5MbJO0eT4X2mdu5f6PGLIXYVJxmytSToju49
xka5/+xGOGfDIu6GxM0xJGSHpe4XtwE/iSuHefYNbFLem3vAybZmO8ypqhFghTq1
hNW0Vnqj0p/P489byt8G7j3obX69+gHO0cNH0trF9h8FpG5Ww7nIxDnzD+Xw0WSl
IzM7nGT2t+Jd7orfDdYqBzw9nYC7FJVnx+uuMY/0CulwG+74Ny1Uj0zCfFN1Yk7x
ZkSnETvYSADKTHrI8VviTYQdz8/ZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3lof
L/8exAX3HGZTGEKwEKUzSjcwHwYDVR0jBBgwFoAUCNLFTntRy8c0NN0AYFFFEi8a
y2cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI1QTE1LzkyQzNDRTA4MkVDRDExRTk4MDIzMDMyMEY4QUVBMjI4L0NOTEZU
bnRSeThjME5OMEFZRkZGRWk4YXkyYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NOTEZUbnRSeThjME5OMEFZRkZGRWk4YXkyYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjVBMTUvOTJDM0NFMDgyRUNEMTFFOTgwMjMwMzIwRjhB
RUEyMjgvQ05MRlRudFJ5OGMwTk4wQVlGRkZFaThheTJjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIgtLVY5PQpklHebbteq3FM41IHOGn
1Eaw9C7uyTvqE2A9bczxGZUy2FwDf29wHfme5bgJMU0pMXh7WNIcR12ZFChcKxnH
2BG3zgpORHVcLlv2hEgwi9S1xvdWyYUauiJbHzL2c+W1OE5G2nkifLgbKln03M2Z
8bQX48k56DKYwIlT1K6dZovmiiB6lccEqrAoyQJCUMdXXzSTWJt6a7UXPkgGzqGw
fjPTxceDmNbpdYYvv3kkKMLhr1i9UEPxbQ55Lda05Nl33UJMJ3bL5DcicSBzfk9I
Plc+p09SQqV7OXkZA8b9iE0fU0UTuduFswOsbywklFcQpDKSah48GuN4
-----END CERTIFICATE-----
Generated at Sat Dec 27 04:04:19 2025 by rpki-client