This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier:          bvTbADBQVfm5zvtsQ+Fh/xxY0B1flsy4WBlyefkTTh0=
Subject key identifier:   3E:61:66:30:5A:BB:CF:7F:2C:D7:BB:7B:1A:FD:8C:1C:1D:8B:D5:4B
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       095A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number:          094D
Signing time:             Sun 21 Dec 2025 01:34:06 +0000
Manifest this update:     Sun 21 Dec 2025 01:34:06 +0000
Manifest next update:     Tue 23 Dec 2025 01:34:06 +0000
Files and hashes:         1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: lYyhD1ODbBfpaca2EAh3sAA9ua/qVUptx4nbuAUCjNQ=)
                          2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
                          3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
                          4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
                          5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
                          6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
                          7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
                          8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
                          9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
                          10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394 (0x95a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Validity
            Not Before: Dec 21 01:34:06 2025 GMT
            Not After : Dec 23 01:34:06 2025 GMT
        Subject: CN=69474e8e-319f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:a0:4c:c7:8e:95:08:19:27:b1:08:a0:09:
                    03:76:1d:96:01:d0:69:75:78:2b:d0:ce:0e:86:85:
                    26:d5:69:59:a7:5a:5f:91:ce:73:53:b8:ce:e7:ca:
                    bf:8b:05:d3:5f:83:bb:c9:58:4c:b2:f3:7c:ba:d9:
                    11:81:01:d1:5b:52:26:13:56:00:bf:46:10:4d:27:
                    dc:a7:9c:cd:cd:d6:db:9e:31:98:c3:7d:e8:89:b1:
                    12:01:9d:3c:73:0f:55:65:4e:53:d2:4d:8a:8b:a5:
                    5f:be:d7:75:4a:2c:44:7b:db:56:0d:0e:7c:75:6b:
                    e8:a5:f1:b0:d8:1c:34:45:ed:24:41:9f:52:9e:7b:
                    6b:0e:d0:80:09:bf:a7:8c:15:f3:51:b9:79:75:eb:
                    cf:7b:0d:20:de:7a:db:3c:2b:77:02:ed:72:98:3d:
                    2d:b9:d1:aa:48:79:d5:ab:99:99:8b:ac:97:16:cc:
                    b5:18:58:58:12:0e:d4:44:00:18:75:8d:19:b2:78:
                    51:ec:40:53:35:e4:2e:73:c1:79:01:06:c9:95:2a:
                    84:00:cc:7e:95:8a:08:57:cd:01:3f:39:d7:e7:bd:
                    3e:dc:b4:8c:4e:3a:5c:a5:e6:07:55:71:ad:15:98:
                    04:dd:83:a6:d0:32:49:b1:d8:fc:fe:d0:82:95:83:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:61:66:30:5A:BB:CF:7F:2C:D7:BB:7B:1A:FD:8C:1C:1D:8B:D5:4B
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c2:7a:48:44:bc:84:c2:42:34:75:cc:35:19:fd:33:6f:f1:
         94:12:aa:c5:3e:9f:c6:9c:0e:bc:f8:6c:06:ee:bc:49:29:4a:
         36:91:b4:78:b9:5e:3b:bf:ba:56:13:0b:d4:71:e7:51:88:1c:
         ab:72:bc:01:ea:ba:f3:32:de:98:fa:76:a2:e7:0f:c2:72:52:
         65:2c:19:73:d6:39:05:d7:fa:2b:a8:e9:50:0a:5b:0a:28:84:
         0c:82:ef:22:8c:47:87:e4:ae:98:1a:38:1e:d1:20:ba:31:98:
         de:58:fc:51:1c:18:16:8b:82:75:23:22:88:be:f9:19:94:e9:
         97:95:34:01:82:18:c1:92:e3:c1:21:1c:22:ae:59:de:e8:7f:
         ec:77:3d:1c:f5:40:d3:26:91:c1:8d:b5:e9:49:b1:bb:38:cf:
         f3:20:8e:b8:6d:1f:0d:56:d5:f5:af:bd:d5:b1:78:cc:1c:b2:
         b9:7f:d3:04:db:a5:11:2a:30:7f:5d:57:b3:c6:9a:c8:0c:ed:
         8e:ab:2f:71:be:c3:29:34:73:2d:59:35:4f:57:82:7d:88:4d:
         e1:8f:8d:70:67:85:b3:b0:7b:70:0d:08:60:d8:1a:f2:5a:87:
         13:6a:be:7a:94:43:bf:07:52:b0:a9:39:c5:65:26:29:fb:35:
         22:20:37:0e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCVowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBUjExMC8GA1UEBRMoODZFQUVDNDI5NERGQkE3MDQ1QTg4NjQyRTlERkM0
NTUxQjM0QzI1NTAeFw0yNTEyMjEwMTM0MDZaFw0yNTEyMjMwMTM0MDZaMBgxFjAU
BgNVBAMTDTY5NDc0ZThlLTMxOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC03KBMx46VCBknsQigCQN2HZYB0Gl1eCvQzg6GhSbVaVmnWl+RznNTuM7n
yr+LBdNfg7vJWEyy83y62RGBAdFbUiYTVgC/RhBNJ9ynnM3N1tueMZjDfeiJsRIB
nTxzD1VlTlPSTYqLpV++13VKLER721YNDnx1a+il8bDYHDRF7SRBn1Kee2sO0IAJ
v6eMFfNRuXl16897DSDeets8K3cC7XKYPS250apIedWrmZmLrJcWzLUYWFgSDtRE
ABh1jRmyeFHsQFM15C5zwXkBBsmVKoQAzH6VighXzQE/OdfnvT7ctIxOOlyl5gdV
ca0VmATdg6bQMkmx2Pz+0IKVg/xJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPmFm
MFq7z38s17t7Gv2MHB2L1UswHwYDVR0jBBgwFoAUhursQpTfunBFqIZC6d/EVRs0
wlUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0I1RjQyNTQwQ0IyRjExRTlBNjI5MjkyN0Y4QUVBMjI4L2h1cnNR
cFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2h1cnNRcFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODU4OEUvQjVGNDI1NDBDQjJGMTFFOUE2MjkyOTI3RjhBRUEy
MjgvaHVyc1FwVGZ1bkJGcUlaQzZkX0VWUnMwd2xVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbwnpIRLyEwkI0dcw1Gf0zb/GUEqrFPp/G
nA68+GwG7rxJKUo2kbR4uV47v7pWEwvUcedRiByrcrwB6rrzMt6Y+nai5w/CclJl
LBlz1jkF1/orqOlQClsKKIQMgu8ijEeH5K6YGjge0SC6MZjeWPxRHBgWi4J1IyKI
vvkZlOmXlTQBghjBkuPBIRwirlne6H/sdz0c9UDTJpHBjbXpSbG7OM/zII64bR8N
VtX1r73VsXjMHLK5f9ME26URKjB/XVezxprIDO2Oqy9xvsMpNHMtWTVPV4J9iE3h
j41wZ4WzsHtwDQhg2BryWocTar56lEO/B1KwqTnFZSYp+zUiIDcO
-----END CERTIFICATE-----
Generated at Sun Dec 21 11:26:11 2025 by rpki-client