This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
File:                     E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft (raw, json)
Hash identifier:          IxzmzL2OW6uQA23tCdmMxQ7WEXknAGtRB3weDaTBBKA=
Subject key identifier:   1E:8D:30:E2:54:D2:FB:67:8E:2C:7F:86:5A:3B:4B:73:A2:76:90:4F
Authority key identifier: 13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
Certificate issuer:       /CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Certificate serial:       02E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
Manifest number:          02DD
Signing time:             Tue 23 Dec 2025 03:59:17 +0000
Manifest this update:     Tue 23 Dec 2025 03:59:16 +0000
Manifest next update:     Thu 25 Dec 2025 03:59:16 +0000
Files and hashes:         1: E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl (hash: 5bB5n2RBxmP6eFzVAp9X+Bk0g4js9yGldCZgoZMFcIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 03:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663C93AF, serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
        Validity
            Not Before: Dec 23 03:59:16 2025 GMT
            Not After : Dec 25 03:59:16 2025 GMT
        Subject: CN=694a1395-de9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:54:7c:c2:80:d0:96:d3:d5:31:8a:bb:14:
                    d9:49:04:37:77:bc:34:77:d4:a5:be:17:27:8b:e2:
                    00:c6:9c:fd:ba:75:68:15:43:aa:ed:f9:e5:ea:7f:
                    a3:bf:71:d8:f5:d4:1c:7c:e5:de:19:00:04:50:7c:
                    36:dd:0f:c9:24:83:b5:31:93:7b:b0:af:b5:37:17:
                    59:0c:26:ff:f5:39:6a:d2:47:7e:a0:4c:a4:40:9a:
                    9f:43:6a:f5:76:e6:29:2c:ff:ef:43:ad:81:40:b7:
                    ee:7b:a6:8b:52:bd:fa:6e:58:61:54:e4:f0:a0:1a:
                    23:1c:68:2f:0b:99:16:4b:6b:cd:73:54:27:0d:cf:
                    eb:10:52:f4:65:d8:93:05:f4:04:41:19:6f:77:b6:
                    33:c5:17:f7:77:2f:67:fa:0b:0f:3a:ff:c6:df:3c:
                    ee:c0:59:d6:0a:8d:4a:53:9c:ef:cb:34:09:f9:52:
                    ba:7a:22:13:c8:43:6e:0c:bd:ed:93:2c:b3:08:7e:
                    a9:7f:0b:6a:84:2e:db:cc:bf:24:3b:4c:51:33:d0:
                    f2:c0:b1:b2:8e:f3:9b:9d:9a:fc:1d:8b:31:5a:84:
                    52:2e:ba:94:df:f5:50:1a:cd:10:11:55:97:0f:63:
                    99:c5:4e:86:2d:29:91:dd:b1:01:25:23:cf:1f:dd:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8D:30:E2:54:D2:FB:67:8E:2C:7F:86:5A:3B:4B:73:A2:76:90:4F
            X509v3 Authority Key Identifier:
                keyid:13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:31:67:fe:d3:4f:38:01:b8:19:00:b5:32:a4:ae:c4:a5:e2:
         6f:89:cf:02:e9:fe:5e:a8:93:e7:c8:ba:7f:e9:9d:27:ee:ff:
         7c:22:11:d4:63:03:a8:8e:c9:7a:78:9f:a7:66:c7:b8:6a:b2:
         9c:b8:21:af:f6:17:fb:5f:ef:d5:25:4c:96:d1:37:1d:e8:66:
         cc:7b:6f:28:65:58:bf:b9:07:a7:9e:3c:ab:bc:ac:fc:35:15:
         64:e0:a1:5e:1f:ce:2b:48:3c:12:7c:85:f4:01:da:76:40:88:
         7b:c4:3a:48:d4:7b:f5:07:b8:ab:aa:16:fa:f3:b2:b2:bf:be:
         00:e5:17:b5:e0:3e:31:ca:63:58:a9:80:5d:51:e2:bc:9d:f7:
         1e:a4:57:da:b3:09:fd:3a:e0:04:6f:8f:07:70:22:e7:90:a4:
         b2:50:78:59:fd:e6:09:5e:58:9b:42:86:ba:79:78:6d:5e:f9:
         15:5d:36:a2:9a:11:38:84:86:d1:08:1d:3e:58:53:d3:91:76:
         07:ae:9b:c4:87:33:dd:13:22:b2:28:cb:02:cb:9c:42:71:75:
         51:f2:fe:6a:01:3a:d3:83:43:72:9f:fa:a8:3b:8e:ca:23:dc:
         ba:7b:62:1d:59:c6:de:29:4b:e0:46:41:3a:c8:3f:97:9c:0e:
         01:f7:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:17:55 2025 by rpki-client