This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
File:                     qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft (raw, json)
Hash identifier:          CHmRUx1Yz6f7O50TGOaPA+e9fffrywgMXOaRKXUiiSY=
Subject key identifier:   10:C7:EB:C0:56:9A:70:6F:85:27:C8:7D:E8:70:9A:56:8F:AE:C2:1E
Authority key identifier: A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04
Certificate issuer:       /CN=F363CC24AR/serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
Certificate serial:       0496
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
Manifest number:          0494
Signing time:             Wed 31 Dec 2025 03:09:03 +0000
Manifest this update:     Wed 31 Dec 2025 03:09:02 +0000
Manifest next update:     Fri 02 Jan 2026 03:09:02 +0000
Files and hashes:         1: qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl (hash: aO0foKtXFxOLYbFASUjij+YLRhogkQk7V3dlK8coYtU=)
                          2: 6B64796E6CD311ED95BCF9ABF1222468.roa (hash: R0VYLqBJ/t82vL7Ea4zeQPUv4iI6TJe1dS2p2gDCFlU=)
                          3: 70D117F66CD611ED923FD0B3F1222468.roa (hash: txZAMVXkl2H2InuuPJiS6nC2O9wGE8oK3t6mwrxz9Xc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
                          rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AR, serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
        Validity
            Not Before: Dec 31 03:09:02 2025 GMT
            Not After : Jan  2 03:09:02 2026 GMT
        Subject: CN=695493cf-9d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:4a:fe:89:35:f5:e1:88:8d:82:c8:b6:a6:
                    d8:8c:fc:55:b1:7c:9d:75:51:ce:2e:03:c4:d7:ee:
                    8a:df:28:ca:3a:0f:d9:be:24:9d:24:c0:2e:9f:49:
                    bd:c8:b7:c9:15:15:80:3d:5a:08:27:a2:ce:00:2e:
                    92:38:21:09:1b:87:bc:65:34:d4:e3:98:08:2f:96:
                    e3:1f:b4:ce:e0:17:4c:65:ff:e7:77:83:b8:df:88:
                    f9:a8:9f:7b:ad:10:66:ed:71:5d:3d:86:6a:e5:3c:
                    5a:78:94:40:fa:16:55:6a:28:a1:23:3f:24:4d:10:
                    f8:c2:ac:81:6d:dc:f4:a1:72:70:b1:26:61:f3:c5:
                    7f:d9:1d:8f:a4:a7:e1:7b:2c:26:c2:8c:c9:19:03:
                    0c:34:d0:7d:34:fd:84:a7:59:69:1d:e1:be:e7:50:
                    10:d7:0c:4a:e8:54:2e:fe:b5:b6:64:5c:7a:d7:7b:
                    e6:0a:c0:a3:01:7e:71:38:58:09:9d:a3:1a:aa:59:
                    74:91:79:f6:bb:b2:b3:ca:df:0b:2a:19:9e:fc:9f:
                    b3:17:fe:d1:85:75:6e:63:68:d5:39:4c:e7:94:8b:
                    79:07:dc:b2:fb:01:43:ae:c6:59:0a:b7:97:cb:d7:
                    49:33:b0:6e:da:ef:06:7a:8c:de:af:84:74:63:2b:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C7:EB:C0:56:9A:70:6F:85:27:C8:7D:E8:70:9A:56:8F:AE:C2:1E
            X509v3 Authority Key Identifier:
                keyid:A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e1:bd:b9:36:b3:3b:ae:8d:fe:56:50:8e:38:f7:43:4f:29:
         46:b0:a8:4b:92:93:1c:2e:64:9d:13:5a:eb:9e:38:5d:c0:6a:
         a2:c0:a0:7f:0e:32:b7:75:c7:9f:4c:44:6a:74:b5:13:ac:44:
         6c:3a:35:6b:03:4b:0c:bc:00:05:89:3e:f6:8f:d8:09:bb:70:
         6d:11:40:03:0d:ec:76:79:7f:12:98:4d:25:5a:fc:d8:c1:db:
         ff:e0:45:41:e8:91:9c:c3:cd:f5:10:67:fb:2e:d9:0c:ed:35:
         e7:55:07:b4:8e:db:b3:3a:b4:61:15:fe:d5:bf:c6:7b:d0:69:
         d5:55:73:76:14:4b:94:25:2a:a6:73:9f:55:67:e0:ed:65:ea:
         e7:34:04:ee:06:1f:28:2c:4e:7b:a9:e8:9e:52:26:4b:ee:9f:
         32:4f:cc:6b:ea:e1:13:b6:6a:74:e9:40:03:d2:7c:87:03:26:
         35:9b:0b:af:c1:a3:b2:f1:c8:28:dd:bc:a7:7b:30:83:8d:2d:
         ac:2c:40:d1:98:e5:b8:7e:4b:cc:d6:b4:74:e9:9c:f0:e3:d2:
         1b:6b:17:4f:5e:41:21:b5:6d:75:36:5f:94:10:8a:b1:ee:6c:
         42:75:30:0b:67:cb:6e:94:51:0e:7e:f0:96:99:4d:0f:02:fd:
         86:c2:e6:0d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0NDMjRBUjExMC8GA1UEBRMoQTlDQjc2QUY2QkMyQjQ4NkQ1ODFBRjI5QTE5RTU5
NUQ5QzA0Q0QwNDAeFw0yNTEyMzEwMzA5MDJaFw0yNjAxMDIwMzA5MDJaMBgxFjAU
BgNVBAMTDTY5NTQ5M2NmLTlkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYnkr+iTX14YiNgsi2ptiM/FWxfJ11Uc4uA8TX7orfKMo6D9m+JJ0kwC6f
Sb3It8kVFYA9Wggnos4ALpI4IQkbh7xlNNTjmAgvluMftM7gF0xl/+d3g7jfiPmo
n3utEGbtcV09hmrlPFp4lED6FlVqKKEjPyRNEPjCrIFt3PShcnCxJmHzxX/ZHY+k
p+F7LCbCjMkZAww00H00/YSnWWkd4b7nUBDXDEroVC7+tbZkXHrXe+YKwKMBfnE4
WAmdoxqqWXSRefa7srPK3wsqGZ78n7MX/tGFdW5jaNU5TOeUi3kH3LL7AUOuxlkK
t5fL10kzsG7a7wZ6jN6vhHRjK5/LAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUEMfr
wFaacG+FJ8h96HCaVo+uwh4wHwYDVR0jBBgwFoAUqct2r2vCtIbVga8poZ5ZXZwE
zQQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNDQzI0LzA1NkJGM0UyNkNEMDExRUQ4RDY5QUNBMkYxMjIyNDY4L3FjdDJy
MnZDdEliVmdhOHBvWjVaWFp3RXpRUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3FjdDJyMnZDdEliVmdhOHBvWjVaWFp3RXpRUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0NDMjQvMDU2QkYzRTI2Q0QwMTFFRDhENjlBQ0EyRjEyMjI0
NjgvcWN0MnIydkN0SWJWZ2E4cG9aNVpYWndFelFRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs4b25NrM7ro3+VlCOOPdDTylGsKhLkpMc
LmSdE1rrnjhdwGqiwKB/DjK3dcefTERqdLUTrERsOjVrA0sMvAAFiT72j9gJu3Bt
EUADDex2eX8SmE0lWvzYwdv/4EVB6JGcw831EGf7LtkM7TXnVQe0jtuzOrRhFf7V
v8Z70GnVVXN2FEuUJSqmc59VZ+DtZernNATuBh8oLE57qeieUiZL7p8yT8xr6uET
tmp06UAD0nyHAyY1mwuvwaOy8cgo3bynezCDjS2sLEDRmOW4fkvM1rR06Zzw49Ib
axdPXkEhtW11Nl+UEIqx7mxCdTALZ8tulFEOfvCWmU0PAv2GwuYN
-----END CERTIFICATE-----
Generated at Wed Dec 31 09:03:58 2025 by rpki-client