This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
File:                     xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft (raw, json)
Hash identifier:          hV8cigKFugJGSGSUWATBSaLO78wFKMPnAGRID+u+Q+k=
Subject key identifier:   C0:95:2D:54:B8:4A:7D:32:FE:E6:36:A7:B2:A9:67:9D:2C:42:2D:8A
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Certificate issuer:       /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial:       041E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
Manifest number:          040F
Signing time:             Tue 30 Dec 2025 03:26:10 +0000
Manifest this update:     Tue 30 Dec 2025 03:26:09 +0000
Manifest next update:     Thu 01 Jan 2026 03:26:09 +0000
Files and hashes:         1: xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl (hash: vzh/S2zvgeQmc28lus7+sPam1bR6zVwMgJkBd7x5JvY=)
                          2: 916580AACA5A11EEBC5AFA9D775412E6.roa (hash: ztp7/02g9RTHkUR+QiE90a3d75LjUNCsuA1EVWoHlVU=)
                          3: 9291A14C941E11EEBBAE4A1ED25BE465.roa (hash: hoQ0WHzltGfNVqWYNvwkPi5gw4CWcPqSrUNOVflBYxw=)
                          4: 05E09FE07B3C11EFA2CFEB45762E951A.roa (hash: cVeBq/iu4EVAtdwg8HApbjb07OUiv7eyhugdvSJdFOo=)
                          5: AE10BD027B3D11EFA19A5950762E951A.roa (hash: pBZPZsU0a4Hyx7jC1O2ChKZlKrJuIUtFfo6uMv2dY6Q=)
                          6: 151F2E827B3B11EF80BDC540762E951A.roa (hash: +sFHoHgCQHoGDtM7InUTilsDdnQATx775LFAedkvfBU=)
                          7: 71B9ADBAF48311ED8AC17D2C4AD9E6FC.roa (hash: H2R++FRMLxMiqVXy8BRmuUKzD8njGoupil4sDGEQyh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363EA80AF, serialNumber=C67C6231120941235581D5942565ABF7419DCECC
        Validity
            Not Before: Dec 30 03:26:09 2025 GMT
            Not After : Jan  1 03:26:09 2026 GMT
        Subject: CN=69534652-4694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:79:35:55:e6:1b:99:ce:5f:38:6b:be:47:
                    05:d0:06:5d:c8:b0:1a:98:5c:42:2b:9c:a2:c2:03:
                    c9:7f:46:c8:41:ed:94:64:7e:41:f1:8f:96:88:70:
                    d1:b3:d8:6c:8e:37:da:2f:22:f3:13:6e:34:93:79:
                    44:66:b4:54:23:05:71:9d:bb:1a:5a:04:97:64:85:
                    a3:9e:1e:31:a1:16:a0:0b:96:ad:d4:fe:fc:5b:74:
                    f6:1b:de:75:6c:dd:34:8c:6c:ec:70:06:4e:4e:83:
                    e5:99:18:ae:80:da:dc:e9:85:5b:27:f5:de:dd:ee:
                    88:c6:f9:85:0d:56:c9:92:ee:bc:e3:13:57:13:34:
                    09:6b:f1:50:cb:46:22:65:fe:c3:31:0d:df:87:ca:
                    e4:36:dd:cc:c1:05:6b:50:87:08:29:02:07:a3:80:
                    25:60:06:c1:f7:6a:6e:d7:12:45:a0:d3:f2:b7:e8:
                    7d:b3:99:8b:52:be:05:c0:c5:41:eb:80:ee:5c:b7:
                    65:0a:d0:6f:dd:11:b6:74:86:f6:34:1d:b5:5f:51:
                    bc:b9:4e:34:c2:ca:82:7c:c2:12:1d:34:83:2b:73:
                    0c:6a:5c:b1:3d:2f:51:0f:74:af:21:38:19:2f:e4:
                    36:6c:f2:4b:7c:aa:47:f4:88:97:87:e8:03:18:a8:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:95:2D:54:B8:4A:7D:32:FE:E6:36:A7:B2:A9:67:9D:2C:42:2D:8A
            X509v3 Authority Key Identifier:
                keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f4:26:06:84:31:eb:09:b3:34:28:a9:61:68:6c:59:7b:1b:
         55:55:33:9c:d4:b2:ac:7a:51:2b:ae:a1:f4:ae:76:15:78:83:
         a6:be:62:8f:e7:7a:18:56:ff:05:91:0a:39:4a:ab:07:bf:f5:
         17:4f:3b:40:8b:8d:a5:39:ab:fe:30:14:93:92:1f:78:be:f4:
         de:43:ba:24:e2:64:12:b2:5e:a1:2f:f3:fa:3f:7b:b9:f3:e7:
         a6:10:40:7f:9c:b6:e9:1f:03:cc:92:f1:8a:9a:7f:59:40:c4:
         14:53:84:df:6a:b8:7b:08:09:79:d1:35:ad:b1:68:83:30:49:
         df:29:15:56:59:a1:da:bb:c4:4c:71:de:93:46:9c:08:42:db:
         74:6f:16:b9:f0:22:11:86:17:40:6e:51:1b:96:df:f9:07:d1:
         83:64:c0:b5:bb:6e:4b:7c:51:eb:cc:99:fa:37:98:ad:a2:ac:
         68:01:1f:8f:dc:2f:da:b8:0b:29:95:e8:c1:25:bb:05:97:1a:
         b7:48:1f:02:66:b3:9f:0d:15:fa:fb:ed:28:75:e7:e0:3e:b8:
         84:ad:60:92:2a:e3:b3:37:5f:a0:87:a5:5b:17:99:65:9a:28:
         8a:2b:52:c1:ae:38:d1:39:0d:1a:60:bc:f5:0c:c3:25:bd:67:
         d4:d2:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:25:39 2025 by rpki-client