This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          v66B6j+YPaCQNCue34TmbXGrb+eC0jIgtWKHxjDmKdQ=
Subject key identifier:   3A:09:48:3D:4C:85:66:76:11:8A:29:37:81:12:53:47:47:EB:15:05
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       085E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          07A7
Signing time:             Fri 19 Dec 2025 02:05:59 +0000
Manifest this update:     Fri 19 Dec 2025 02:05:59 +0000
Manifest next update:     Sun 21 Dec 2025 02:05:59 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: HOQR0x7NZc2BatCfLkdraLBJAElxYWo7PcaUdSSUQII=)
                          2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          3: 12C94488C51811F08BBBD07EDAE4EC9C.roa (hash: Ed+1OFgfHZH2NhogNwe+Ep6vqs3iKB/M39PATMnuc7Q=)
                          4: EEB5856C7F6B11F0B0B6DF82DAE4EC9C.roa (hash: UIG7Jif5IiOqj4KGvbim+sNDE4xOkewikzs6NTdR8Fc=)
                          5: C4940406C51711F0B575887EDAE4EC9C.roa (hash: 4RugfSiJesfYSypFZBITfNgFCsRewIA3FsvOJEUwpec=)
                          6: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          7: DB7E445AD29711F0BA95B2C1DAE4EC9C.roa (hash: AOayaQ7TNpsE579CyFNWKXcQ+p1sYv0UzMN5M/cSgtU=)
                          8: 5A8C7874784411F0BE639EBDDAE4EC9C.roa (hash: Tso2x+6Cusvv7XHczF8aF240Wh6DYRs6taSZ6HxpTbM=)
                          9: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          10: 6B82BA5ECAA511F0B693B6F6DAE4EC9C.roa (hash: eRPjNzk7objNE1v11WzECpPEBoih5yermDtgbDLzzFc=)
                          11: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=)
                          12: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
                          13: 951B9DB2781711F0AAD136A0DAE4EC9C.roa (hash: rxo13RQJNN4g4AsDSu+eErcokD2GEDR1Waq9IZ5O/Qw=)
                          14: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=)
                          15: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          16: 45A55D36CAA111F0947679DCDAE4EC9C.roa (hash: bvDOwK67raaMpIWj9tOPWUssEH7yvEJAZbdbZtOAIb4=)
                          17: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=)
                          18: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          19: 26E5D2CED29711F0816F8ABDDAE4EC9C.roa (hash: p9K0/BCdXbtMp+QUshwKF7oPKooV4hJqw0gzrsNRzkc=)
                          20: 3DAFAFC4CAA511F0A2A6EAF4DAE4EC9C.roa (hash: kAPKP/Rduu5hSzMeNT30qX6NS0hr2+6j4G8A2O2KEPc=)
                          21: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
                          22: 6A43A0C8C14E11F096DC248FDAE4EC9C.roa (hash: sqRGI3qv4ncoLvEEm2EaksIQyKcekb2edaC2J3zEusw=)
                          23: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          24: C4C79D24C51811F0A5C49883DAE4EC9C.roa (hash: KCCS1wiJ7BCupVKu192KCc2CuDKvx9eQwvCuUo7ffPc=)
                          25: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          26: DD089252CAA511F091CFD578DAE4EC9C.roa (hash: k2t6OOsTPUKt++Qd1quDDVVGZdcS1XDNr3r7A+ETwao=)
                          27: DAE3E714CAA111F090DDE7DEDAE4EC9C.roa (hash: 71W4NjZmEAk1BgwJ+6iFJimjp7lIKbeasjYlT0HGAjI=)
                          28: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          29: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          30: A4FDA7BCCAA511F09FB35E78DAE4EC9C.roa (hash: G+KBluTILA9pHwJYAifopSz9PWnW1V4pNJPsqqEy6WY=)
                          31: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          32: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=)
                          33: 8DC51D4ACAA111F090AC0FDDDAE4EC9C.roa (hash: h0TdxhBeyhR8xMoQQGq+sfKFbmZcGqmkMgxYMMBjGv4=)
                          34: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142 (0x85e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Dec 19 02:05:59 2025 GMT
            Not After : Dec 21 02:05:59 2025 GMT
        Subject: CN=6944b307-4116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:5f:39:6f:ed:7c:08:09:21:62:a8:05:04:
                    19:96:9b:b5:a0:10:5e:ed:73:93:f9:68:fe:0f:9e:
                    e9:5c:52:aa:cd:8c:ae:d1:38:da:0d:e4:1b:17:84:
                    09:ae:96:8e:4b:c1:ee:26:28:57:54:63:74:ef:ff:
                    8f:25:65:ac:be:bc:46:3d:bd:56:94:7d:d9:53:9f:
                    f3:8f:e2:ee:57:65:af:d4:fb:a8:6e:ed:26:9e:a7:
                    52:06:1a:96:26:06:fd:17:07:7f:2a:a5:77:87:f2:
                    06:7e:c6:e5:f2:95:8b:eb:93:b9:a6:71:17:75:c9:
                    24:64:09:48:e6:90:21:68:f5:c1:b3:04:f6:9d:95:
                    13:91:6d:7d:fd:4b:ca:9d:cf:47:3b:8a:b3:b4:36:
                    c9:29:fe:e2:2d:47:3e:64:ff:44:1e:80:cf:5d:89:
                    d0:c2:97:d2:56:44:bf:86:2f:d2:98:13:72:ac:70:
                    f6:92:bf:80:c0:7a:04:c8:41:75:c0:1f:f0:a2:cf:
                    c5:d6:69:8d:a7:e1:99:20:aa:bc:a4:9d:a6:9e:49:
                    ea:1e:92:8e:5f:6c:a2:67:84:64:98:9e:96:88:a8:
                    ac:20:bb:0f:09:f9:7e:6b:56:0f:17:88:ff:cb:ee:
                    17:f6:49:f3:2d:36:be:a2:d1:38:79:bc:e8:2c:18:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:09:48:3D:4C:85:66:76:11:8A:29:37:81:12:53:47:47:EB:15:05
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:9a:0d:3a:80:a2:a5:c6:cf:5c:ca:0f:4c:27:55:a1:9c:
         5f:4c:06:20:de:fd:b2:58:89:6d:cc:cb:80:36:1b:a2:0a:b6:
         0d:a6:44:26:5a:3f:12:2d:07:6d:e3:db:75:2a:e6:7e:2f:d7:
         6f:b0:2c:80:9b:b6:56:81:a2:9e:63:81:63:de:2d:0d:15:15:
         7f:d4:b8:eb:ca:85:0f:c1:10:92:ce:ef:7e:65:2d:e2:85:88:
         6e:7a:86:f1:a8:7d:cc:e1:cb:a2:3b:71:9f:41:78:06:f0:56:
         7f:2f:83:55:e9:ad:82:4b:f1:53:e5:e1:7f:55:7f:5e:48:5c:
         3f:81:b0:34:29:56:cb:41:e8:78:b2:7b:7b:60:93:0c:68:a2:
         aa:2e:3e:5f:17:a8:06:4c:45:e4:63:2a:ab:cc:5a:0b:d1:95:
         4b:0f:17:7d:82:94:1c:5e:73:26:43:1c:69:23:31:91:69:6a:
         a3:46:73:85:bc:e2:fc:49:27:db:8c:ac:eb:db:7e:4b:03:c0:
         0e:19:be:a8:6f:ad:be:6c:0e:24:de:3b:d7:eb:8f:e1:b4:ad:
         64:8a:89:95:f1:fa:6b:29:a1:f8:84:b2:3c:96:bb:26:1d:bf:
         18:fa:28:a7:00:c5:b2:5a:92:72:d9:4c:7f:16:6e:a0:8d:74:
         32:b6:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:15:26 2025 by rpki-client