This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          YBmIDaL8ovD5XgsrxHDLpQ+6dZhOPTluxhvvZEk8zC0=
Subject key identifier:   FA:71:4D:50:25:2C:28:0C:6D:E0:D9:63:9D:0B:D9:F5:57:CB:64:A8
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0D7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0D7C
Signing time:             Mon 22 Dec 2025 01:05:27 +0000
Manifest this update:     Mon 22 Dec 2025 01:05:26 +0000
Manifest next update:     Wed 24 Dec 2025 01:05:26 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: O7fM3QQCgrb9397dDUGtYEFGTEASR7NayrBKj/8+jPA=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3454 (0xd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Dec 22 01:05:26 2025 GMT
            Not After : Dec 24 01:05:26 2025 GMT
        Subject: CN=69489957-2e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:d5:29:03:fc:eb:40:0d:cc:fe:3f:43:30:
                    2b:56:76:e0:75:73:8f:58:a3:8b:48:b7:34:de:88:
                    3a:df:af:54:4e:65:64:04:1e:eb:31:99:16:5b:3b:
                    d1:9b:bf:45:87:52:46:0b:7b:d7:dd:ff:0e:af:a4:
                    09:83:af:3e:0e:05:99:5b:97:d0:e2:62:e0:ac:de:
                    3a:81:4a:67:35:f4:a6:d8:11:34:77:67:15:5f:51:
                    6c:53:8b:12:50:14:f7:3f:f5:12:ef:d2:31:68:99:
                    90:e7:5e:22:b1:41:a8:6b:32:42:7e:b7:ad:cd:b3:
                    89:fd:96:56:25:65:99:31:29:67:0f:2f:f2:51:86:
                    ac:95:cb:52:c4:c2:67:0b:d6:26:e5:c6:db:f8:42:
                    8d:e7:f2:05:0a:e5:2d:19:d0:97:a3:27:fe:21:31:
                    65:dd:e7:e7:d1:55:20:0e:97:d6:56:f7:c4:eb:ff:
                    6f:0c:a3:09:c8:e7:b6:d6:72:27:5e:7d:fa:f9:ed:
                    23:a7:18:ea:f3:ed:50:2c:40:1b:5a:7a:7c:ab:5a:
                    05:aa:dc:18:98:65:57:77:79:48:7b:fd:0e:ec:d8:
                    7d:97:8a:32:52:e4:92:de:76:e7:6d:90:61:35:d4:
                    f3:7e:fc:62:fd:40:ee:8d:f4:3d:4e:f9:11:38:7f:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:71:4D:50:25:2C:28:0C:6D:E0:D9:63:9D:0B:D9:F5:57:CB:64:A8
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:77:b8:d9:bf:2b:d4:6d:ef:92:50:be:e2:5e:50:c4:4d:
         21:30:5e:5c:f1:e1:cf:af:2f:2f:15:20:dd:c1:55:46:02:72:
         f4:a0:9c:71:06:52:54:c4:a0:3c:ac:88:93:98:b9:b4:51:b3:
         7e:0e:12:a9:8b:31:f4:b4:0d:ba:a6:6e:f7:25:d9:cb:af:49:
         df:07:f1:4a:8e:d7:95:84:58:7b:df:93:46:d6:f6:65:c3:4d:
         9a:18:ef:52:58:b8:fc:2c:e7:85:0d:5a:ab:72:60:06:1f:82:
         58:e6:99:70:22:d7:e7:c8:dc:f5:8e:b8:eb:ed:03:9d:26:bf:
         ca:79:18:ba:09:89:6a:49:02:66:28:76:5d:1c:2d:54:16:6d:
         61:48:07:dd:32:2a:c3:62:cd:29:23:54:1d:4b:13:44:87:d8:
         7b:18:1d:9c:ce:3b:d0:16:6c:f0:da:3d:ae:b9:13:d3:72:1f:
         90:04:9a:64:3b:4e:c7:10:30:f5:d8:2f:2c:5b:6a:12:20:2f:
         5d:4f:b6:ed:6e:70:ff:da:d1:4a:ca:e9:ee:0a:42:58:45:7b:
         57:79:73:a1:28:a9:7e:59:1f:d9:03:b4:96:9a:57:98:c1:63:
         59:97:1d:44:ce:94:d5:a3:e0:7d:c5:86:fa:f5:35:de:69:f6:
         d3:67:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:04:26 2025 by rpki-client