This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
File:                     H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json)
Hash identifier:          zzeYoMcR/Zi+qPff3Ebz9WSz0twjqDtfo00+yx8sUWY=
Subject key identifier:   8D:E3:41:EE:8A:31:34:0D:86:D2:FC:B0:5A:40:BA:1F:9F:85:69:50
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       06B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
Manifest number:          069A
Signing time:             Sat 20 Dec 2025 02:18:00 +0000
Manifest this update:     Sat 20 Dec 2025 02:18:00 +0000
Manifest next update:     Mon 22 Dec 2025 02:18:00 +0000
Files and hashes:         1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: dTk2LhY6zN1mzuxugKsW9+VR+sAM8VFShzmNfjc/bcs=)
                          2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=)
                          3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=)
                          4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=)
                          5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=)
                          6: D8AB9D10C89011F0BEE7EFC7DAE4EC9C.roa (hash: mi8Ptbn8iwhQRbwYylFtD3uAOG7kNqb26/g5AbK5ZUA=)
                          7: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=)
                          8: 2E629470C89111F09FB590CBDAE4EC9C.roa (hash: EFh5M3QCNjeimEXA/mXdWrIx1eozgW+kjskB/TPAG8g=)
                          9: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=)
                          10: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=)
                          11: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=)
                          12: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=)
                          13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=)
                          14: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=)
                          15: 0FBCEAAEDCB711F09DDEE8BBDAE4EC9C.roa (hash: EmQsAEGTM1w3mZK41HDnUozu8PJBPWVc7GCPvEYJ9Vg=)
                          16: 51F4E7CEC0BE11F08C39787ADAE4EC9C.roa (hash: 2W4J7B3ID8LDT8DfX7jRxG+YaxSbNbWFCc4sdyZIaUo=)
                          17: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Dec 20 02:18:00 2025 GMT
            Not After : Dec 22 02:18:00 2025 GMT
        Subject: CN=69460758-a5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:45:23:8c:2b:c0:8c:1b:10:6c:02:c0:ab:
                    9a:7d:9e:f0:fd:5e:0a:81:7e:69:ed:62:bb:99:30:
                    0e:1c:a3:ea:cf:50:02:e2:86:12:f6:95:d6:c6:5a:
                    3a:7f:b8:66:d8:f9:f0:a5:a9:21:74:55:6c:04:ba:
                    05:52:63:43:30:2e:0b:2d:78:22:c8:a1:cf:f7:0e:
                    cd:89:78:42:92:c1:5e:f0:73:65:c7:0a:47:0a:9f:
                    1c:e8:47:00:cc:1a:5a:4e:32:1c:16:33:f1:25:f4:
                    ae:f2:b8:2d:2a:68:45:49:45:16:45:6e:b9:3c:43:
                    da:d1:72:57:6d:28:57:47:0e:02:3a:b6:62:9e:9e:
                    bc:46:36:b6:39:8c:c3:f5:65:e0:23:bb:db:2d:66:
                    dc:5a:76:16:ef:47:e8:c8:fd:39:ff:12:87:55:a7:
                    8a:b2:20:8c:98:aa:52:d3:69:d1:4a:af:37:d9:69:
                    8e:ae:e4:2e:81:b6:65:3b:99:1e:54:44:df:de:aa:
                    21:86:54:ed:a1:d8:d6:69:34:41:6a:04:5e:e4:b9:
                    ce:c1:ac:fb:2f:56:7a:16:aa:86:be:7d:3b:59:0f:
                    69:da:6a:85:77:a8:dd:c5:b1:e8:2a:30:ed:cb:b5:
                    82:ac:da:4e:d1:bc:bf:a6:48:f2:9d:9a:54:06:29:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E3:41:EE:8A:31:34:0D:86:D2:FC:B0:5A:40:BA:1F:9F:85:69:50
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:8d:d4:98:b5:c7:11:fa:ed:e1:79:61:ae:c0:65:09:b6:
         9d:8a:59:60:05:a6:50:da:58:2e:2f:9d:b1:55:47:41:bc:62:
         8e:2e:40:02:89:81:e8:c7:b9:14:f3:52:c1:9e:a5:10:4b:36:
         cc:ed:90:c0:7f:3e:74:b8:b5:8d:37:f9:28:3c:67:2e:68:22:
         a9:6a:d1:ef:fd:96:4f:99:f6:1a:47:00:f5:40:ff:4d:ba:1a:
         11:2e:cd:0d:32:76:3f:d4:bd:d2:df:21:d0:4a:a0:e5:58:2f:
         35:77:e8:7c:55:de:ba:0e:4b:6e:9a:c2:08:2b:4d:df:3f:91:
         07:60:b5:0a:92:16:9b:ac:b9:e4:e0:65:9d:0a:0c:50:4e:1e:
         b5:65:85:a5:28:2d:68:23:76:f0:28:20:a0:6d:c2:e1:76:85:
         ea:c7:b6:13:2c:19:91:62:b2:cd:e7:fa:21:8d:20:92:3c:41:
         6d:f8:4b:7b:fa:1d:29:ca:3d:ed:51:d3:27:61:9f:6c:3a:a8:
         b0:a4:a7:57:c9:c4:49:da:0d:f4:4d:06:0d:4c:2d:5c:75:78:
         d1:5d:a8:e1:e0:07:23:9f:c8:14:de:9b:d7:14:7f:16:fc:e1:
         6f:84:94:08:1f:04:ad:cb:c4:f4:82:99:86:b5:54:63:f9:4f:
         b1:dc:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:57:06 2025 by rpki-client