This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
File:                     7XZlKQ0TEj69LBHPCH2D_1DLck8.mft (raw, json)
Hash identifier:          vUy7t+zLeDdp16sgINhoHMFcIC57nuH1kGpZsCRc08I=
Subject key identifier:   BA:1C:4C:E2:1A:27:3C:12:29:DE:CD:13:D0:D4:DA:5D:DB:E2:74:A8
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Certificate issuer:       /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial:       03CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
Manifest number:          03C9
Signing time:             Tue 30 Dec 2025 03:30:05 +0000
Manifest this update:     Tue 30 Dec 2025 03:30:05 +0000
Manifest next update:     Thu 01 Jan 2026 03:30:05 +0000
Files and hashes:         1: 7XZlKQ0TEj69LBHPCH2D_1DLck8.crl (hash: sKvEJPuGR+U8oiyXFQRLsu9WS5TUXj/5gY/iDJdIhuc=)
                          2: 4B8EEDB40A2F11EEA86653594AD9E6FC.roa (hash: XtlDMiWVbKF1PyU7Dxovz8F8BLVHU9h4HjWuTp4MLtA=)
                          3: D7EB6984752A11EEB254CC514AD9E6FC.roa (hash: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=)
                          4: 8E2AFAC4048E11EEA671536C4AD9E6FC.roa (hash: 6Jqn2aGmjDcmImvw5mjB/z8k1HYXJolq+lf84m8vfCY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C329AF, serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
        Validity
            Not Before: Dec 30 03:30:05 2025 GMT
            Not After : Jan  1 03:30:05 2026 GMT
        Subject: CN=6953473d-9a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:ba:a4:13:79:63:bc:18:3a:06:a9:c4:86:
                    e7:bf:93:c4:ad:ab:48:a7:e2:95:b3:ea:d7:66:42:
                    65:b0:06:00:02:17:66:f5:34:25:0f:3c:30:c7:7e:
                    bb:29:54:b1:cf:44:49:e1:2f:23:3d:c5:54:89:b5:
                    9a:24:fe:9f:40:91:26:88:c5:00:ab:e1:c1:29:89:
                    03:23:58:68:a1:52:a7:7f:80:e7:19:58:a5:f1:6c:
                    09:0c:63:f9:9f:b3:12:d7:34:84:e3:e0:31:61:d8:
                    ce:29:df:b3:e5:88:41:e0:29:db:15:cb:be:3f:b5:
                    22:b0:42:71:1d:41:0c:79:45:e8:e5:5e:7a:4d:3a:
                    c5:ae:26:6b:d2:2f:2c:07:b9:ce:4b:84:0a:ea:a1:
                    c2:31:2d:70:58:f7:8d:e9:07:2c:99:c6:2b:0d:83:
                    4a:47:49:63:dc:e6:66:12:ce:6d:d6:56:22:34:76:
                    58:2f:8f:c5:ae:a3:d1:fc:ae:68:9f:76:2b:85:ae:
                    36:c5:06:b9:c5:cc:fb:cd:77:6e:ca:ac:93:4c:5e:
                    95:54:24:50:e8:38:63:2e:0e:44:51:66:82:8c:a0:
                    1f:e8:c7:36:ea:0a:04:20:c0:79:24:65:65:43:95:
                    7b:fe:6e:4c:be:6d:31:38:89:a0:11:ae:0f:bd:9d:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:4C:E2:1A:27:3C:12:29:DE:CD:13:D0:D4:DA:5D:DB:E2:74:A8
            X509v3 Authority Key Identifier:
                keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f0:96:a4:1c:fa:0a:72:d7:8b:19:d7:36:7f:fc:fd:c1:2b:
         57:1a:b9:4c:08:12:4b:16:b4:d0:fb:6f:aa:d7:eb:9e:30:55:
         27:9c:bf:18:3d:b9:32:6a:74:81:6e:00:d0:6b:6c:47:cd:61:
         fa:69:10:c6:81:86:69:6b:5d:93:27:b8:98:bc:63:38:9e:3e:
         ea:23:96:91:72:ba:4a:5c:3c:eb:63:6d:8d:cd:77:fc:c4:43:
         d3:8d:a5:52:e0:08:91:1c:dd:ef:f3:e6:61:7d:66:9e:b3:df:
         01:cc:36:a9:58:50:0d:13:05:b3:1a:3b:9a:91:58:e1:30:77:
         ae:f7:9a:64:96:63:d4:74:de:c6:9a:4e:46:f8:db:8d:cb:a3:
         92:f6:7b:13:1d:5e:be:b5:53:76:0b:e2:e5:5b:42:4f:c8:23:
         a4:4a:49:22:1d:f4:4b:f8:1b:f9:0e:9d:04:93:f0:1f:30:25:
         29:0b:6e:86:1c:a2:b8:58:c9:6d:b4:5f:db:d7:d1:48:8b:d2:
         53:ef:df:f8:dc:33:e4:ee:28:25:a8:36:07:65:a4:9c:20:47:
         79:19:74:90:47:80:8d:99:95:b8:13:11:9a:03:1b:e4:5d:48:
         6b:4e:9e:11:b3:6a:12:4d:3f:1d:e9:3c:2f:9e:2c:fb:3c:dc:
         cc:d4:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:15:08 2025 by rpki-client