This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          PcuYoXMupfbSvl2A5LnYbNvHQQDy/1xKhr8Sl2EG6+E=
Subject key identifier:   5B:1F:2A:8E:43:74:1A:F5:55:CB:D9:6F:32:B7:64:65:A3:E9:5B:52
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       0267
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          0266
Signing time:             Sun 28 Dec 2025 04:21:14 +0000
Manifest this update:     Sun 28 Dec 2025 04:21:13 +0000
Manifest next update:     Tue 30 Dec 2025 04:21:13 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: zU9o/KSDrw4dh4ez0UI8hZgFJScDOr7wjF5fivmcf2o=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: Dec 28 04:21:13 2025 GMT
            Not After : Dec 30 04:21:13 2025 GMT
        Subject: CN=6950b03a-444c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:7c:2f:0b:9d:2c:a3:5a:22:c9:0a:df:6e:
                    5d:ec:51:51:34:71:5c:f5:28:5f:28:3a:7c:19:be:
                    bc:db:6e:68:62:29:3a:1c:1a:23:d1:1c:c3:aa:7f:
                    c0:88:86:5d:13:2e:7e:53:ac:fb:56:ab:22:c1:2e:
                    5a:28:63:70:f7:49:42:18:33:8c:5d:73:08:a7:b5:
                    dd:fd:4c:e6:a3:f4:7b:f2:36:9b:79:42:88:07:fa:
                    f1:f3:cc:a2:37:ad:52:d5:42:9f:4b:22:ee:4b:cf:
                    a4:b2:16:4c:36:7a:db:1f:4b:dd:b9:51:e4:ec:fe:
                    f3:7d:9e:06:5d:f8:e4:c9:45:17:cd:37:fe:78:fd:
                    c0:9b:71:3f:0e:db:08:75:fd:42:d9:b1:3d:07:ec:
                    45:e7:b9:5c:12:54:68:30:d5:21:30:0d:2f:4f:3c:
                    25:6f:a6:ef:2f:24:43:e4:a5:79:b8:13:91:ca:93:
                    1d:f5:69:a2:92:0c:f1:fa:42:8a:77:1d:9a:29:09:
                    72:17:ce:9e:01:74:24:32:dd:fa:c5:2d:af:26:c8:
                    6c:d5:ce:7c:c7:72:54:0c:af:4c:f7:d8:9e:3c:c4:
                    40:c5:82:5c:77:a1:d7:52:76:e7:f6:cc:5d:2a:22:
                    2a:0a:2f:68:08:d3:2c:81:21:45:e4:5b:ff:d9:ea:
                    e0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:2A:8E:43:74:1A:F5:55:CB:D9:6F:32:B7:64:65:A3:E9:5B:52
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:e8:d8:dc:4b:22:dd:e5:5c:ae:3e:40:54:a0:19:23:6c:
         6b:cc:22:e0:c4:aa:94:c3:d5:67:9e:b2:8f:b3:d7:8f:4e:62:
         bc:e6:6c:99:77:fa:bc:49:21:d5:7e:98:90:39:84:a1:39:f9:
         0e:6e:ad:eb:a3:66:ff:2e:6d:59:c6:a6:f3:03:44:b6:b5:76:
         13:51:18:17:a4:4d:73:e3:ef:6f:55:f8:46:52:f4:40:c5:00:
         e8:b0:1e:fe:34:1a:e6:e7:9e:69:a9:99:1f:e5:1b:1d:a1:3c:
         97:69:4d:f9:1f:7b:ad:dd:5e:c5:e8:37:7c:ec:a1:48:ff:38:
         bb:5a:f1:7c:af:32:bb:c9:26:8b:fb:a8:6e:dd:68:d8:99:f8:
         45:66:31:2c:72:f3:76:5c:6b:4b:1d:f8:6b:dd:cd:e5:8a:a9:
         e0:61:6f:0d:2e:6e:5a:bd:35:48:b2:12:ed:3e:9d:4c:57:ed:
         79:1d:b2:95:30:75:95:e3:38:ef:28:fc:89:c0:42:fb:61:ef:
         0c:73:1c:9f:2e:6d:48:2e:c2:f9:17:a4:57:fe:ed:4b:2d:ba:
         75:72:fc:cb:04:c7:da:29:cf:b9:31:e1:29:82:bc:1a:4a:7b:
         b4:9a:c0:91:46:c5:29:0a:1f:d4:43:6e:dd:50:f5:fd:2d:08:
         1c:d8:5b:83
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgzMjFBUjExMC8GA1UEBRMoRTJFODA1RTg5RERGOTA3QjJCNTI4RjQyNjQxQjRG
Rjc2MjI2OUIxNjAeFw0yNTEyMjgwNDIxMTNaFw0yNTEyMzAwNDIxMTNaMBgxFjAU
BgNVBAMTDTY5NTBiMDNhLTQ0NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSZ3wvC50so1oiyQrfbl3sUVE0cVz1KF8oOnwZvrzbbmhiKTocGiPRHMOq
f8CIhl0TLn5TrPtWqyLBLlooY3D3SUIYM4xdcwintd39TOaj9HvyNpt5QogH+vHz
zKI3rVLVQp9LIu5Lz6SyFkw2etsfS925UeTs/vN9ngZd+OTJRRfNN/54/cCbcT8O
2wh1/ULZsT0H7EXnuVwSVGgw1SEwDS9PPCVvpu8vJEPkpXm4E5HKkx31aaKSDPH6
Qop3HZopCXIXzp4BdCQy3frFLa8myGzVznzHclQMr0z32J48xEDFglx3oddSduf2
zF0qIioKL2gI0yyBIUXkW//Z6uCZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUWx8q
jkN0GvVVy9lvMrdkZaPpW1IwHwYDVR0jBBgwFoAU4ugF6J3fkHsrUo9CZBtP92Im
mxYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MzIxLzlDRTczNzRFMERGQzExRUZCQkM1OEI1QjAxNzAwMUIxLzR1Z0Y2
SjNma0hzclVvOUNaQnRQOTJJbW14WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzR1Z0Y2SjNma0hzclVvOUNaQnRQOTJJbW14WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODgzMjEvOUNFNzM3NEUwREZDMTFFRkJCQzU4QjVCMDE3MDAx
QjEvNHVnRjZKM2ZrSHNyVW85Q1pCdFA5MkltbXhZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB63ujY3Esi3eVcrj5AVKAZI2xrzCLgxKqU
w9VnnrKPs9ePTmK85myZd/q8SSHVfpiQOYShOfkObq3ro2b/Lm1ZxqbzA0S2tXYT
URgXpE1z4+9vVfhGUvRAxQDosB7+NBrm555pqZkf5RsdoTyXaU35H3ut3V7F6Dd8
7KFI/zi7WvF8rzK7ySaL+6hu3WjYmfhFZjEscvN2XGtLHfhr3c3liqngYW8NLm5a
vTVIshLtPp1MV+15HbKVMHWV4zjvKPyJwEL7Ye8McxyfLm1ILsL5F6RX/u1LLbp1
cvzLBMfaKc+5MeEpgrwaSnu0msCRRsUpCh/UQ27dUPX9LQgc2FuD
-----END CERTIFICATE-----
Generated at Sun Dec 28 18:14:44 2025 by rpki-client