This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          TJtdcmxTQJHKtYZFuJ6cZjuMlxLHVnAWvfwklxkE+Tc=
Subject key identifier:   97:22:41:92:19:62:19:06:58:D2:3F:B3:F7:C4:4A:F7:CA:5C:DB:71
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       06C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          06BE
Signing time:             Sun 21 Dec 2025 02:09:41 +0000
Manifest this update:     Sun 21 Dec 2025 02:09:41 +0000
Manifest next update:     Tue 23 Dec 2025 02:09:41 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: 7vezAIf47sYgpN+6yjBCYSx4ii2HVAlIfzdkVJyOPjk=)
                          2: 1D79094AD6B211EFB2D3FF42762E951A.roa (hash: DubCazr+DZeeKepCVu6sjSupYBoZCqIo6H/IBZvf+PU=)
                          3: FB1FEEF4D6B111EF8099CF40762E951A.roa (hash: +7phxm5TzkZRyeFGhR37ALd4AEcaf9TKaQBnWBb/gF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 02:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Dec 21 02:09:41 2025 GMT
            Not After : Dec 23 02:09:41 2025 GMT
        Subject: CN=694756e5-c2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:1d:94:28:e4:60:39:97:19:4a:e7:47:db:
                    10:55:78:2c:9e:f1:9a:86:03:36:50:22:42:61:f1:
                    9e:d2:32:be:d3:7b:2f:ef:7d:93:ed:86:fd:76:d7:
                    c3:b2:e6:38:6d:79:0c:2a:95:db:11:b6:f6:50:f2:
                    fb:26:72:fc:16:d8:be:92:78:32:fa:f7:7d:d8:16:
                    8c:77:48:bd:00:4c:d0:0c:6d:76:6e:67:fa:80:94:
                    b8:1e:b4:16:58:31:cf:49:83:75:69:2c:14:25:1e:
                    15:49:8d:51:02:a4:c9:8d:19:db:00:16:aa:f1:95:
                    7d:77:61:d8:c8:c9:13:bd:de:1e:ac:e3:96:76:b6:
                    45:8e:87:d9:56:8b:6b:c5:c5:5d:dd:be:dd:4d:c3:
                    8b:bc:bd:dc:d0:fa:5c:9f:34:73:91:2e:8d:28:23:
                    0c:52:0f:ef:d7:de:89:ed:3e:b8:ff:e9:3d:0f:02:
                    08:40:01:be:04:bb:59:b3:2d:fd:8f:fb:dc:67:90:
                    e9:a1:59:c8:94:cd:cf:f9:27:1f:6c:e4:1e:dd:1a:
                    58:10:de:3f:cd:29:45:c7:c5:88:77:13:c0:e5:22:
                    8f:5d:95:91:39:1f:21:27:bf:cc:63:e8:53:2d:fd:
                    b7:95:48:76:b8:c9:f3:e2:51:e2:b2:5c:c0:c7:53:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:22:41:92:19:62:19:06:58:D2:3F:B3:F7:C4:4A:F7:CA:5C:DB:71
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:01:d1:38:bb:30:f0:f8:c9:28:72:98:70:cb:82:d0:0c:
         8a:62:74:b6:23:b6:5f:0d:59:53:6f:79:63:8d:e6:c4:32:ed:
         6e:75:4e:06:29:f9:d6:ba:fe:de:c9:5c:c8:e8:de:f0:da:0a:
         68:da:b2:ab:62:6a:1f:56:47:c5:09:bd:6b:91:8e:56:14:b4:
         51:d1:a0:22:02:59:33:16:30:3f:09:d4:74:00:dd:9b:a1:e1:
         f5:37:26:19:e6:16:36:da:bf:e8:96:f5:7c:ea:b3:58:93:d0:
         61:6e:78:70:9b:ea:53:51:60:4d:51:40:22:0b:58:10:4b:c9:
         4c:a0:47:cd:14:05:d8:74:63:9f:e3:1e:c8:cc:ca:f0:1c:13:
         5a:b7:01:df:38:bd:92:b4:ff:29:b2:a4:6c:6e:5b:a6:50:90:
         3f:92:2f:1b:c0:ee:4e:85:f3:f0:db:7b:a5:bf:b0:77:8f:7f:
         33:58:fa:8d:86:08:4b:b7:c2:8d:f2:44:51:18:00:01:28:66:
         95:d4:d6:30:bd:08:f7:f9:ac:d9:5e:ff:72:a6:7d:7c:6a:3a:
         a2:ee:82:df:37:e4:cc:1d:33:96:55:85:da:cd:30:1c:5d:8c:
         bb:89:be:f2:82:1e:4b:0b:6c:eb:e6:c4:3d:35:9b:82:18:80:
         d8:9f:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:01:51 2025 by rpki-client