This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          F6NZ0cUSx16Q7p2FILDiHryvAv448IqAF9kQantqbUs=
Subject key identifier:   D1:86:1C:EE:B2:F4:30:1F:C2:81:8B:CA:01:F3:9E:0C:B1:D5:D7:22
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       0379
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          0378
Signing time:             Mon 22 Dec 2025 03:42:26 +0000
Manifest this update:     Mon 22 Dec 2025 03:42:25 +0000
Manifest next update:     Wed 24 Dec 2025 03:42:25 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: +92xDvBn1di/LhCW/ICqtnI+KR1BcA0xZWFiZsuDXHM=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Dec 22 03:42:25 2025 GMT
            Not After : Dec 24 03:42:25 2025 GMT
        Subject: CN=6948be22-3ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:fd:bc:b8:b0:3e:2a:77:52:16:49:d8:bd:
                    0f:64:20:0e:71:dc:7e:65:89:7b:9a:6f:29:aa:24:
                    84:9f:a9:13:00:7c:0e:da:a4:4b:a1:32:17:48:98:
                    2b:da:10:62:f7:cf:38:d7:47:3f:cc:45:e4:01:a6:
                    11:a5:07:b5:d5:b4:17:1d:0f:29:e6:2f:ae:48:e7:
                    61:b4:8f:db:cb:81:2b:e1:43:af:fa:7d:73:58:b8:
                    69:ce:c0:f2:50:d7:a9:0a:6d:82:20:32:85:39:0b:
                    30:5d:b5:c0:2b:02:a7:01:0c:c3:3a:35:a8:5e:47:
                    45:c4:63:91:fa:02:93:cc:77:c5:13:ea:81:af:ab:
                    6f:83:ed:3e:88:0e:53:29:ed:68:f7:68:67:5a:bd:
                    28:75:e1:81:d0:ac:5c:f5:77:66:db:6e:43:ac:99:
                    dc:01:be:6a:19:7a:f2:2e:52:d1:55:75:6b:ee:58:
                    33:f5:af:be:61:7f:33:bb:e5:12:5b:06:6c:1a:a1:
                    ae:ec:a5:0e:ea:a0:ae:5c:48:c6:83:3a:65:b4:b8:
                    a1:de:aa:d1:42:a9:80:de:11:98:5b:b3:16:fe:a0:
                    87:c1:8e:9a:da:a9:af:45:76:8e:4a:e7:cf:cf:26:
                    26:83:8d:6b:1c:3b:df:75:10:af:3e:7b:09:4c:6c:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:1C:EE:B2:F4:30:1F:C2:81:8B:CA:01:F3:9E:0C:B1:D5:D7:22
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f2:25:dd:3c:bd:75:cd:3f:bd:a8:5e:97:a0:b5:13:c9:59:
         6d:d5:39:7a:c9:06:8d:6b:0e:16:5f:5f:26:b2:36:72:24:a8:
         2e:95:92:4d:d8:82:b5:b1:59:4f:01:5a:9f:40:8e:54:b6:44:
         0d:bf:5d:ed:8a:5f:a2:fa:9b:54:58:5f:31:54:d3:83:7b:c0:
         32:de:5d:dc:c7:c9:30:07:ee:78:1a:e0:85:80:e5:b8:a6:8e:
         0f:63:ae:dd:e3:66:82:c2:39:fc:a1:83:74:3c:b4:ae:f3:f7:
         bd:6a:3a:47:59:4c:9d:9a:c4:36:3a:ec:d0:ad:0f:1d:8a:ac:
         54:1c:42:70:21:66:94:d9:83:9b:0a:5d:04:ce:1b:61:63:21:
         2c:32:c0:ac:b6:9d:6b:0b:e5:83:97:a9:51:19:9e:60:9c:7d:
         41:a1:ba:32:a4:5d:f8:c8:6b:dd:8e:c6:c5:88:cc:56:92:e6:
         16:c3:10:95:d7:3c:17:2f:d1:92:0f:dd:b5:81:93:b4:c1:cf:
         dc:bf:db:1b:be:20:9d:e3:9e:83:93:51:18:32:f8:e3:2a:ac:
         22:67:05:a0:0e:a5:98:31:a6:78:ca:38:0b:2f:43:7d:bd:02:
         f8:e6:85:9c:33:97:3d:9c:b2:16:6a:5e:d7:bf:a5:0e:8b:22:
         ac:ef:6a:27
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNTEyMjIwMzQyMjVaFw0yNTEyMjQwMzQyMjVaMBgxFjAU
BgNVBAMTDTY5NDhiZTIyLTNiYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRqf28uLA+KndSFknYvQ9kIA5x3H5liXuabymqJISfqRMAfA7apEuhMhdI
mCvaEGL3zzjXRz/MReQBphGlB7XVtBcdDynmL65I52G0j9vLgSvhQ6/6fXNYuGnO
wPJQ16kKbYIgMoU5CzBdtcArAqcBDMM6NaheR0XEY5H6ApPMd8UT6oGvq2+D7T6I
DlMp7Wj3aGdavSh14YHQrFz1d2bbbkOsmdwBvmoZevIuUtFVdWvuWDP1r75hfzO7
5RJbBmwaoa7spQ7qoK5cSMaDOmW0uKHeqtFCqYDeEZhbsxb+oIfBjpraqa9Fdo5K
58/PJiaDjWscO991EK8+ewlMbDNVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU0YYc
7rL0MB/CgYvKAfOeDLHV1yIwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf8iXdPL11zT+9qF6XoLUTyVlt1Tl6yQaN
aw4WX18msjZyJKgulZJN2IK1sVlPAVqfQI5UtkQNv13til+i+ptUWF8xVNODe8Ay
3l3cx8kwB+54GuCFgOW4po4PY67d42aCwjn8oYN0PLSu8/e9ajpHWUydmsQ2OuzQ
rQ8diqxUHEJwIWaU2YObCl0EzhthYyEsMsCstp1rC+WDl6lRGZ5gnH1BoboypF34
yGvdjsbFiMxWkuYWwxCV1zwXL9GSD921gZO0wc/cv9sbviCd456Dk1EYMvjjKqwi
ZwWgDqWYMaZ4yjgLL0N9vQL45oWcM5c9nLIWal7Xv6UOiyKs72on
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:32:09 2025 by rpki-client