This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          99GduHDSc9p8S5jg3aZ3pONn6ID18rgrKQH5+vS914U=
Subject key identifier:   65:98:21:A6:AA:71:A8:C4:CE:D0:63:DB:03:71:06:00:85:1B:9D:75
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0DBB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0DB7
Signing time:             Mon 29 Dec 2025 01:02:59 +0000
Manifest this update:     Mon 29 Dec 2025 01:02:58 +0000
Manifest next update:     Wed 31 Dec 2025 01:02:58 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: /GRsz0eioPhtYY9oc3/IGbZBAtzFCop8T0eG8uV4T9M=)
                          2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
                          3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3515 (0xdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Dec 29 01:02:58 2025 GMT
            Not After : Dec 31 01:02:58 2025 GMT
        Subject: CN=6951d343-beef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:54:85:f9:ef:47:52:83:f9:6b:35:2e:a1:
                    ae:cd:1b:38:46:5a:53:56:c5:fa:85:d8:da:e4:4b:
                    7c:8b:f1:8b:7e:cd:27:d8:d6:06:f6:88:6e:29:d1:
                    d3:8a:ce:eb:b4:79:c0:47:6f:38:6c:b1:fa:55:d9:
                    5f:a8:5e:b8:7b:17:07:2b:b1:38:4c:a2:09:24:68:
                    83:f0:52:6f:00:bb:f7:91:c9:6e:69:92:b2:f1:91:
                    1c:d9:b2:c6:cd:8e:19:c8:88:ac:bd:c2:7c:e2:c0:
                    63:fe:77:0f:ac:c8:c7:70:26:9c:5b:3b:ec:0e:eb:
                    6a:31:06:34:7a:a3:80:32:99:43:e3:3d:38:ec:11:
                    7c:b5:62:b1:7f:d9:a5:b4:20:8e:a0:6a:a3:5a:c0:
                    c8:5c:09:62:63:07:95:77:b5:a0:d7:e9:d2:61:12:
                    3c:39:00:69:bb:ff:4f:ea:e5:a8:69:c8:6f:23:41:
                    1f:33:73:78:08:92:99:56:9d:66:0d:08:5f:aa:bf:
                    46:d4:2e:e0:70:41:51:fc:62:8d:4a:14:ce:01:9a:
                    c9:c4:7e:ff:9e:ca:54:ac:95:77:d3:0a:a3:88:97:
                    7a:13:aa:1e:cd:07:cb:d5:bc:16:4a:92:a9:1d:7e:
                    82:60:bc:7f:c9:d8:2a:84:2d:01:75:f4:4f:25:95:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:21:A6:AA:71:A8:C4:CE:D0:63:DB:03:71:06:00:85:1B:9D:75
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:62:78:ed:1e:da:16:cc:be:b0:bd:d8:ee:3d:9a:f0:b7:
         96:cd:8c:10:89:fa:55:af:01:65:2d:48:10:30:a0:67:45:ac:
         9a:99:54:6e:e6:5f:3b:96:a3:98:78:4b:a4:77:b4:e7:f2:f4:
         d0:da:a7:aa:1c:24:fe:5e:bd:c7:aa:16:09:ab:22:2a:82:19:
         90:97:1d:01:54:43:90:5b:89:00:1b:5d:11:27:5b:af:5d:b5:
         33:43:9f:d9:00:cb:7b:27:7b:50:1c:9e:c3:e3:0e:09:6f:70:
         4b:95:cf:03:90:17:98:d9:40:c4:a3:04:d9:7f:a9:a1:0d:70:
         cc:31:35:32:bc:84:6f:a3:1f:11:83:d8:0b:8e:c5:56:76:cf:
         33:84:04:8b:85:d3:99:62:21:c0:bd:ba:dc:6b:54:17:8e:29:
         6f:b5:6d:81:ed:93:00:35:66:4c:7c:b2:c5:bb:68:18:4a:cf:
         ad:9e:78:07:44:02:de:ab:89:80:93:94:50:55:09:e3:ab:e5:
         1f:6d:ff:29:5e:3a:24:19:6f:c4:fe:5d:aa:37:12:dc:64:48:
         89:0f:1a:2b:55:8a:e0:17:4f:97:68:48:8b:43:25:03:4e:a9:
         f7:a5:25:17:fb:7f:3c:2f:b0:b9:b9:4c:52:0f:81:df:13:ab:
         0f:c3:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:57:31 2025 by rpki-client