This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          DAnwI9nNw1mMeA6wTh82L/584lc6XfkAi67yguv++K8=
Subject key identifier:   B6:90:E0:78:14:03:AF:DE:DA:54:5D:5D:19:72:D9:F2:CD:C9:C6:F9
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       0245
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          0243
Signing time:             Sat 27 Dec 2025 04:19:44 +0000
Manifest this update:     Sat 27 Dec 2025 04:19:43 +0000
Manifest next update:     Mon 29 Dec 2025 04:19:43 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: BMTUqX2ZOxozWL1sdQBb9q0hgCV3JtnU/yp7q2oGQuA=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
                          3: D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa (hash: 1WlQj4309rmMEuDFbG4TCzXscQ6wxxa2/yO0H6jLRvo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Dec 27 04:19:43 2025 GMT
            Not After : Dec 29 04:19:43 2025 GMT
        Subject: CN=694f5e60-e1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:41:c8:eb:9c:24:09:e5:3b:b6:2b:14:28:
                    3b:d1:20:29:fb:ff:59:01:1a:bf:e8:7e:19:c8:bf:
                    53:bb:be:a4:31:60:6a:d1:d1:7a:2e:2d:c8:eb:d6:
                    7d:8c:77:a7:e2:f7:d3:7f:cc:45:29:40:1c:45:49:
                    ff:03:e1:ee:ce:a9:d3:bb:2a:31:3b:13:b6:52:49:
                    b6:19:ca:7c:49:b1:58:18:6c:19:af:9f:90:8a:81:
                    43:ed:f6:22:dd:41:61:a0:81:ae:b1:54:08:19:da:
                    b7:be:3a:e0:67:06:e0:dd:f2:15:7b:d2:84:ab:49:
                    da:ec:35:5c:d1:f1:41:fd:83:25:02:a5:da:d5:f0:
                    d1:ac:43:c6:68:5d:c0:45:a9:a3:f0:00:23:af:1f:
                    4c:8c:80:ca:2c:3f:3a:d1:3d:23:64:13:94:76:18:
                    df:2f:b3:04:9f:1e:bd:45:97:25:5d:be:67:31:cd:
                    ef:99:a6:f4:e3:48:69:08:f6:63:0e:e6:a5:ea:6e:
                    42:3c:2c:c1:b3:56:c4:ad:e0:44:25:5b:3f:60:ce:
                    96:be:61:7b:9b:e7:46:c4:1d:cf:7d:a7:77:93:bc:
                    6b:c9:74:0c:f7:4b:00:4b:45:ed:b3:64:a6:fa:b4:
                    fe:f3:23:7d:ea:71:e1:9c:5a:70:a9:f8:da:eb:dd:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:90:E0:78:14:03:AF:DE:DA:54:5D:5D:19:72:D9:F2:CD:C9:C6:F9
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:91:8b:a9:49:2f:b7:c9:0c:c6:5f:1a:e2:68:37:d2:8b:9e:
         10:7a:fb:eb:eb:e2:fc:a5:e8:05:e9:85:2a:d9:f6:86:b7:54:
         6c:a7:c2:a4:8d:8b:f6:6f:2e:1b:9d:1d:50:18:b0:b0:f3:49:
         aa:08:ad:3c:0a:41:2f:e2:5b:ca:fc:ef:97:b1:d6:86:63:5f:
         2d:c2:ff:b7:c8:4c:8f:93:68:2d:92:97:23:30:c2:96:cf:e3:
         09:09:5b:6f:8d:cc:71:c8:f5:b3:ac:16:f4:a9:ea:b5:73:d6:
         54:0e:83:35:2d:6d:4a:20:b8:03:78:34:2d:3e:a6:e9:cc:5e:
         75:ef:34:23:16:96:00:9f:f4:a4:e3:f7:79:af:f2:08:9e:9a:
         54:2d:ec:85:89:a6:dc:af:d6:13:4a:18:67:d8:a0:37:73:b4:
         0f:68:36:cd:b6:f5:b7:44:82:bb:54:69:47:c1:f4:72:97:cf:
         e2:9f:c7:d7:8e:8a:c8:a9:83:27:22:e5:e7:6a:c1:d6:d2:72:
         ca:cf:dc:3a:3f:a7:cf:44:bd:a8:77:ef:9d:b9:f5:f8:d6:60:
         97:d9:b2:26:af:50:3a:07:3d:b7:45:6f:44:b2:6f:c3:ce:9e:
         88:97:7a:48:24:c8:b6:b9:d0:5c:3a:08:16:00:8f:a3:3e:8f:
         e6:9f:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:47:28 2025 by rpki-client