This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
File:                     NwiffHLw58V4LX8rO9aPXYzsU5Y.mft (raw, json)
Hash identifier:          4dFwukyas2Z64LBHvI2qB2ggDaVPlcysW/lSq73neZY=
Subject key identifier:   C1:6B:34:12:80:FD:BA:3D:80:B1:02:7F:31:C7:9C:4E:CF:A1:E2:1F
Authority key identifier: 37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
Certificate issuer:       /CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Certificate serial:       0A19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
Manifest number:          0A14
Signing time:             Sun 21 Dec 2025 01:16:15 +0000
Manifest this update:     Sun 21 Dec 2025 01:16:14 +0000
Manifest next update:     Tue 23 Dec 2025 01:16:14 +0000
Files and hashes:         1: NwiffHLw58V4LX8rO9aPXYzsU5Y.crl (hash: 1WCbqp1kj0PNPg/DC7IO3b/cV8vcAG44JqZ6AQ/zzY4=)
                          2: 2452626C789C11EA9D48381FF8AEA228.roa (hash: /wUzpd2kuZQOUTL91oaudRKtKLX8YfadU+XPL/wLyTw=)
                          3: A6CF9D8AAA1C11EEB9ABF954775412E6.roa (hash: 84w5dXq+cic3Xi8F7+1KmbYwvKGSm/iIJ1eYJxxPsPc=)
                          4: B82EFE34291811E9AC8B8967F8AEA228.roa (hash: 89svLPpHyqTVOFkRRCgSCkC0+wCh7pGNmY8TlC/Ke6c=)
                          5: 2DBFF77A291911E99585E167F8AEA228.roa (hash: 95TWNnQxaCwaMS0/NMpFWBMaUEPrE1AodSEzF5Hy8Yk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 01:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585 (0xa19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAF, serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
        Validity
            Not Before: Dec 21 01:16:14 2025 GMT
            Not After : Dec 23 01:16:14 2025 GMT
        Subject: CN=69474a5e-8448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:da:52:55:21:76:ed:03:03:9e:2f:ef:73:
                    9b:80:17:58:6c:b0:40:71:a8:3a:7f:20:f7:c7:31:
                    36:06:6d:f3:87:0b:3c:79:a2:24:de:e5:da:0d:da:
                    ea:6a:6d:e0:c8:0c:49:62:7c:e0:7b:a5:9e:7c:32:
                    bc:75:0c:5c:f1:e5:49:d7:5a:46:22:d6:9b:3b:eb:
                    6a:35:d7:34:81:d1:21:7a:c2:92:01:27:46:71:cb:
                    9f:d5:84:22:3b:fb:e0:5b:56:74:60:79:0f:9f:a8:
                    ee:a7:ce:4b:1b:08:f2:d2:8b:22:b8:ef:d2:eb:ff:
                    f8:17:76:80:55:24:24:04:8e:ec:7c:b3:cf:46:1e:
                    a5:4f:a4:e1:1e:6f:23:ce:c2:26:ce:19:12:93:3b:
                    6d:a4:4f:aa:54:68:fd:03:78:ac:04:2f:b0:73:d6:
                    e6:22:7f:75:c0:dd:c4:5c:3d:fb:93:8b:a3:a1:7a:
                    b6:35:a7:bc:ba:c7:e9:61:2a:54:ab:f2:6d:50:c7:
                    0f:89:79:cf:29:4f:d8:4b:9b:1a:c7:7c:d1:8b:3e:
                    6c:e3:d7:a7:75:ba:89:d2:22:e0:60:8c:54:d0:85:
                    7c:0d:4e:ff:68:ec:b5:73:4e:e7:79:b3:87:18:7a:
                    59:b1:ea:88:36:06:8c:3d:31:0a:4d:12:1d:d8:36:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6B:34:12:80:FD:BA:3D:80:B1:02:7F:31:C7:9C:4E:CF:A1:E2:1F
            X509v3 Authority Key Identifier:
                keyid:37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:f0:9b:16:99:b3:15:76:eb:2d:51:46:19:6e:ec:62:6f:
         8d:17:a4:13:ef:bb:62:ed:24:1f:ac:58:39:dc:b9:25:e6:2e:
         73:d3:a2:77:8f:c4:47:99:dd:55:66:c0:37:a3:b9:23:60:4b:
         d2:d1:c6:de:77:64:d3:3b:65:c3:e0:a6:0a:19:52:6c:29:0f:
         48:57:e2:61:72:75:46:07:cb:9b:bd:44:4a:da:85:ec:ef:3b:
         cc:88:d3:c3:de:c1:11:d8:e9:ca:69:c0:d6:40:87:0c:64:d5:
         9d:01:32:90:d8:64:ae:f8:62:a9:55:e9:fc:5f:ae:68:63:6b:
         da:6b:18:9a:ad:e9:d0:76:cd:c0:22:d7:3e:62:de:2f:0a:49:
         40:b2:6a:0d:d0:29:e3:ef:1e:59:12:09:15:5e:5e:34:a2:b7:
         8c:e3:e1:16:11:93:04:dd:d2:5e:e9:56:a8:d5:f5:51:2f:e6:
         13:67:a9:6a:9a:5b:13:03:1d:5f:8e:a3:9b:c7:7e:87:52:90:
         10:e4:60:bf:c6:6d:51:7c:eb:28:bd:c5:5d:4b:fe:31:1e:29:
         98:2b:6f:7c:69:42:49:7a:2f:ed:7a:b7:1f:a9:7a:cf:97:61:
         e4:cf:1e:96:48:3a:16:70:c0:a3:73:3d:34:ba:92:8c:a2:2a:
         3a:12:af:42
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICChkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEU2N0NBRjExMC8GA1UEBRMoMzcwODlGN0M3MkYwRTdDNTc4MkQ3RjJCM0JENjhG
NUQ4Q0VDNTM5NjAeFw0yNTEyMjEwMTE2MTRaFw0yNTEyMjMwMTE2MTRaMBgxFjAU
BgNVBAMTDTY5NDc0YTVlLTg0NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDH+NpSVSF27QMDni/vc5uAF1hssEBxqDp/IPfHMTYGbfOHCzx5oiTe5doN
2upqbeDIDElifOB7pZ58Mrx1DFzx5UnXWkYi1ps762o11zSB0SF6wpIBJ0Zxy5/V
hCI7++BbVnRgeQ+fqO6nzksbCPLSiyK479Lr//gXdoBVJCQEjux8s89GHqVPpOEe
byPOwibOGRKTO22kT6pUaP0DeKwEL7Bz1uYif3XA3cRcPfuTi6OherY1p7y6x+lh
KlSr8m1Qxw+Jec8pT9hLmxrHfNGLPmzj16d1uonSIuBgjFTQhXwNTv9o7LVzTud5
s4cYelmx6og2Bow9MQpNEh3YNm9pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwWs0
EoD9uj2AsQJ/McecTs+h4h8wHwYDVR0jBBgwFoAUNwiffHLw58V4LX8rO9aPXYzs
U5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRFNjdDLzcxREE1NDgwMjkxNjExRTlBMDc5Qzc2NUY4QUVBMjI4L053aWZm
SEx3NThWNExYOHJPOWFQWFl6c1U1WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL053aWZmSEx3NThWNExYOHJPOWFQWFl6c1U1WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEU2N0MvNzFEQTU0ODAyOTE2MTFFOUEwNzlDNzY1RjhB
RUEyMjgvTndpZmZITHc1OFY0TFg4ck85YVBYWXpzVTVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoo/CbFpmzFXbrLVFGGW7sYm+NF6QT
77ti7SQfrFg53Lkl5i5z06J3j8RHmd1VZsA3o7kjYEvS0cbed2TTO2XD4KYKGVJs
KQ9IV+JhcnVGB8ubvURK2oXs7zvMiNPD3sER2OnKacDWQIcMZNWdATKQ2GSu+GKp
Ven8X65oY2vaaxiarenQds3AItc+Yt4vCklAsmoN0Cnj7x5ZEgkVXl40oreM4+EW
EZME3dJe6Vao1fVRL+YTZ6lqmlsTAx1fjqObx36HUpAQ5GC/xm1RfOsovcVdS/4x
HimYK298aUJJei/tercfqXrPl2Hkzx6WSDoWcMCjcz00upKMoio6Eq9C
-----END CERTIFICATE-----
Generated at Sun Dec 21 14:40:34 2025 by rpki-client