This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          iT3tIXebqENJQHnHiP5YRD/UjGZL2aTU6QE7KGTVej0=
Subject key identifier:   12:A8:81:8E:F8:6A:BB:D3:D6:C4:0B:0E:4D:21:9C:AC:0E:E0:9D:06
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       02B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          02B8
Signing time:             Thu 25 Dec 2025 04:05:19 +0000
Manifest this update:     Thu 25 Dec 2025 04:05:18 +0000
Manifest next update:     Sat 27 Dec 2025 04:05:18 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: 638sv6XfFxXHHO7dj++4CSZJ4GBM1hZK0v19GiDkeaQ=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: Dec 25 04:05:18 2025 GMT
            Not After : Dec 27 04:05:18 2025 GMT
        Subject: CN=694cb7ff-a8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:87:ae:97:01:6f:df:c8:82:04:58:49:27:
                    4b:94:5f:62:e7:46:a3:69:86:79:76:51:71:e7:37:
                    a4:e5:67:68:b5:f1:25:35:32:f7:38:1e:da:83:9e:
                    20:f7:2e:d2:e5:69:e3:cc:10:4f:d4:ea:c3:ed:c4:
                    6e:71:b3:51:b0:0b:bd:ee:b9:06:5e:df:31:86:49:
                    5a:31:0c:40:63:54:99:d3:22:83:47:23:9c:de:f1:
                    09:bf:64:cc:e0:18:be:33:a8:89:86:5a:22:34:6a:
                    f0:4a:10:b4:94:c1:8b:57:0c:d4:f7:f6:00:31:02:
                    1a:fa:a5:b5:e4:0d:51:e6:e4:c3:fb:9a:7f:d6:37:
                    80:0a:bc:ed:17:7e:7d:75:e4:22:d4:36:5a:90:66:
                    99:54:73:15:bb:65:73:a0:ef:94:7d:51:94:30:20:
                    1e:3a:1f:8b:65:3e:c1:4b:d8:27:16:8a:54:17:45:
                    7d:fa:c0:34:f2:26:d8:18:85:a6:c1:66:cc:4b:f0:
                    55:eb:bd:42:e3:be:e7:06:62:f3:35:8c:07:5d:40:
                    e1:95:02:d2:8f:c3:0e:0e:b3:4c:48:8e:2d:43:cf:
                    67:91:2f:66:d8:2f:17:de:44:b3:a4:a7:b0:fc:1c:
                    c7:ff:0b:7f:96:13:9f:6c:35:0a:5f:43:08:06:13:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A8:81:8E:F8:6A:BB:D3:D6:C4:0B:0E:4D:21:9C:AC:0E:E0:9D:06
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:fb:1e:a0:02:1a:8b:ad:3f:65:b0:d4:37:1a:9c:82:b9:
         b3:7b:1f:ed:d1:11:b4:2b:4e:24:e3:c6:4c:7c:d4:65:02:50:
         38:bc:29:d0:a9:49:32:77:3e:fb:96:5c:89:27:be:91:47:1c:
         72:c8:c0:d8:37:4e:02:57:dd:8d:80:96:5e:a7:fc:13:47:aa:
         b5:f0:f3:21:8e:5c:68:fc:9d:bd:a8:17:bf:95:f3:9b:f8:90:
         a5:90:66:78:5c:a2:8b:61:ab:b1:8c:06:a4:79:f3:64:84:f2:
         ea:79:63:f0:31:01:db:d2:09:22:b9:45:bd:b2:45:18:b9:73:
         9e:f6:06:cb:44:a6:03:7e:c8:ec:5a:ea:51:34:c7:c6:d2:b7:
         5d:62:39:47:2a:bc:8a:ec:68:dc:92:b7:f3:30:e1:ab:19:86:
         54:d0:6d:6d:67:5d:75:8f:7a:4c:10:16:85:b7:1e:20:00:14:
         7a:d2:f4:97:57:fd:0d:ae:bd:2f:c8:9c:f0:a6:5e:18:97:14:
         76:c4:a1:9f:49:d2:27:bc:76:6d:bc:31:e5:aa:82:a5:16:04:
         f0:52:e2:20:82:9d:34:d6:28:e8:12:ec:1b:9b:eb:28:0d:1d:
         a2:ef:29:1b:af:42:b5:17:f9:fa:6f:c4:83:b4:92:28:74:e9:
         48:1a:21:0a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICArkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgxNjNBRjExMC8GA1UEBRMoNzkxNDdEM0Q2RTUzN0VENjg3RDA4NTdCQUY4NDky
ODExOEZEQTRFNTAeFw0yNTEyMjUwNDA1MThaFw0yNTEyMjcwNDA1MThaMBgxFjAU
BgNVBAMTDTY5NGNiN2ZmLWE4ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDogoeulwFv38iCBFhJJ0uUX2LnRqNphnl2UXHnN6TlZ2i18SU1Mvc4HtqD
niD3LtLlaePMEE/U6sPtxG5xs1GwC73uuQZe3zGGSVoxDEBjVJnTIoNHI5ze8Qm/
ZMzgGL4zqImGWiI0avBKELSUwYtXDNT39gAxAhr6pbXkDVHm5MP7mn/WN4AKvO0X
fn115CLUNlqQZplUcxW7ZXOg75R9UZQwIB46H4tlPsFL2CcWilQXRX36wDTyJtgY
habBZsxL8FXrvULjvucGYvM1jAddQOGVAtKPww4Os0xIji1Dz2eRL2bYLxfeRLOk
p7D8HMf/C3+WE59sNQpfQwgGE7mHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEqiB
jvhqu9PWxAsOTSGcrA7gnQYwHwYDVR0jBBgwFoAUeRR9PW5TftaH0IV7r4SSgRj9
pOUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MTYzLzM5ODJBNzRFQ0JDOTExRUVBN0Y1RjU3Njc3NTQxMkU2L2VSUjlQ
VzVUZnRhSDBJVjdyNFNTZ1JqOXBPVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VSUjlQVzVUZnRhSDBJVjdyNFNTZ1JqOXBPVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgxNjMvMzk4MkE3NEVDQkM5MTFFRUE3RjVGNTc2Nzc1
NDEyRTYvZVJSOVBXNVRmdGFIMElWN3I0U1NnUmo5cE9VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBp2fseoAIai60/ZbDUNxqcgrmzex/t
0RG0K04k48ZMfNRlAlA4vCnQqUkydz77llyJJ76RRxxyyMDYN04CV92NgJZep/wT
R6q18PMhjlxo/J29qBe/lfOb+JClkGZ4XKKLYauxjAakefNkhPLqeWPwMQHb0gki
uUW9skUYuXOe9gbLRKYDfsjsWupRNMfG0rddYjlHKryK7GjckrfzMOGrGYZU0G1t
Z111j3pMEBaFtx4gABR60vSXV/0Nrr0vyJzwpl4YlxR2xKGfSdInvHZtvDHlqoKl
FgTwUuIggp001ijoEuwbm+soDR2i7ykbr0K1F/n6b8SDtJIodOlIGiEK
-----END CERTIFICATE-----
Generated at Thu Dec 25 09:16:02 2025 by rpki-client