This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          vx9QYNrEdh2tndE/iPR8lgVz8ZessLbNzFV14wYI+Jc=
Subject key identifier:   1F:8B:6E:C1:02:6E:25:27:5C:DD:64:BF:BD:25:29:06:54:EA:59:B4
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       AA
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          AA
Signing time:             Sun 21 Dec 2025 05:02:00 +0000
Manifest this update:     Sun 21 Dec 2025 05:01:59 +0000
Manifest next update:     Tue 23 Dec 2025 05:01:59 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: X7jlXx9H380Nco2Adf+STigAcu8mXt9SFkZRxl2zO2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Dec 21 05:01:59 2025 GMT
            Not After : Dec 23 05:01:59 2025 GMT
        Subject: CN=69477f48-3db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:2e:d8:ab:7b:8b:65:7c:be:20:41:7d:b7:
                    2b:5e:4e:b7:32:b9:94:f3:d6:75:d1:e6:b7:3a:7f:
                    85:16:c5:ad:d0:96:c5:93:7d:3f:f6:72:de:0f:6c:
                    de:22:b1:cb:0f:9d:49:a4:e2:b1:28:1f:d4:81:09:
                    c8:90:99:0f:df:66:7f:d4:92:73:c8:be:95:08:ce:
                    0d:d1:b9:9d:85:f4:dd:6c:7b:49:02:24:d5:f4:81:
                    5c:7d:30:f3:fb:a9:23:a7:08:b2:95:37:e5:45:4f:
                    cc:15:67:c0:19:cb:d7:03:d1:3f:89:79:77:cd:24:
                    d9:ba:38:07:d0:5c:e6:9d:f4:2d:c3:44:da:10:60:
                    0e:e4:c8:d8:ee:44:e4:99:35:12:36:07:16:79:10:
                    23:b3:0b:2d:c5:de:51:eb:4b:a4:ea:d4:4d:a4:1a:
                    b8:ee:84:1e:c3:bb:ab:a5:e9:2d:6a:ee:e3:31:b6:
                    67:b7:9c:06:f3:42:a6:c1:24:8e:e9:9f:30:e2:67:
                    04:58:b2:3b:0c:52:1c:2b:62:7a:b7:c2:76:89:f3:
                    37:63:15:cb:46:11:76:20:29:31:aa:d9:0c:d3:6e:
                    55:a7:a7:d9:39:4f:d2:a2:9e:8b:ea:5a:31:cf:26:
                    f1:5d:a1:6f:8b:74:93:a9:a7:c7:1e:7f:ab:43:60:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:6E:C1:02:6E:25:27:5C:DD:64:BF:BD:25:29:06:54:EA:59:B4
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:e1:78:f5:af:88:a6:33:a2:a1:28:9a:8c:a3:da:60:36:
         14:a2:51:03:41:de:12:67:0e:ff:43:da:c0:22:d8:9e:73:60:
         ca:2e:05:c4:c3:b2:a5:70:ac:42:dd:09:f6:68:66:13:f3:51:
         ed:6a:5d:ea:fa:32:d2:19:23:35:e9:32:ce:26:66:54:4a:36:
         23:36:4f:79:f6:a1:37:20:25:b0:2a:7b:fa:ce:c8:d1:17:40:
         75:c1:df:ae:fc:a9:47:45:1e:88:8e:e4:08:f3:0d:45:03:80:
         66:7c:e3:01:b7:16:89:8f:80:92:e9:fd:52:a3:8d:dd:4d:04:
         29:7a:3e:f6:c0:51:34:9d:45:b1:e4:a5:2c:a5:08:4c:6e:d5:
         68:b5:b8:5d:b1:8c:14:16:3c:70:63:59:cd:13:9d:02:ae:b7:
         9e:0f:f7:13:0f:55:50:13:80:28:7c:db:1d:d2:78:a6:b9:d6:
         aa:16:a0:10:1c:d3:5e:f7:00:71:60:d7:9f:b6:8c:77:a0:19:
         01:ef:95:df:96:5f:7c:45:23:8e:49:de:96:0f:2f:f2:9f:d5:
         f3:54:ee:4f:71:2c:0c:c1:e9:d8:85:3e:48:49:84:b2:ca:0d:
         2b:dd:57:bc:da:df:8b:3c:8b:66:24:c5:59:1a:5a:f0:03:40:
         d8:de:0b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:20:45 2025 by rpki-client