This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File:                     tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier:          R+Two8BzwYOjimRRMlRa9TbzTLXVgE4xDeu4wfT21+4=
Subject key identifier:   A7:62:DF:16:AB:54:73:49:E2:DC:E9:00:C4:FC:E5:CA:2C:11:EB:CF
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer:       /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial:       0387
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number:          0381
Signing time:             Wed 24 Dec 2025 03:46:23 +0000
Manifest this update:     Wed 24 Dec 2025 03:46:22 +0000
Manifest next update:     Fri 26 Dec 2025 03:46:22 +0000
Files and hashes:         1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: zdhckTGLCg6m8pWrNiITkRLz4A4F7+73iamcDW5MBAE=)
                          2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
                          3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
                          4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
                          5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
                          6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 03:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
        Validity
            Not Before: Dec 24 03:46:22 2025 GMT
            Not After : Dec 26 03:46:22 2025 GMT
        Subject: CN=694b620f-2525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:da:b3:3e:0a:2d:aa:d5:80:ae:59:dc:85:
                    76:c3:1f:75:52:73:59:f0:08:fa:88:45:31:d2:cc:
                    d4:76:9e:2b:de:4f:7b:e7:f8:dc:0f:66:fa:c2:19:
                    e8:3b:07:81:c9:a1:3a:3d:33:54:12:aa:f7:d1:e7:
                    02:eb:b2:09:60:9e:70:6c:54:02:10:95:69:1e:f6:
                    f7:b4:4a:96:6e:dc:dc:92:1e:1d:79:3c:e2:ec:37:
                    56:f9:26:80:62:51:f7:6f:b3:65:54:d6:81:26:4b:
                    bd:c3:5e:b8:fc:f9:24:ca:52:9b:36:ba:28:a8:5b:
                    d0:fa:30:fe:0d:48:6d:04:1a:a7:f8:ff:ba:58:85:
                    e1:9d:33:1b:76:9f:d7:1f:85:73:57:78:e6:d9:44:
                    df:ea:69:70:3a:ac:7c:f5:f1:d4:56:8b:80:20:ee:
                    df:23:61:b6:e8:ad:64:9e:a6:59:9b:f2:a9:c6:8b:
                    69:b4:bf:fc:0d:a9:d8:37:a6:45:87:48:9e:99:9f:
                    15:4a:67:1e:96:c7:53:aa:15:c7:9b:58:da:4c:c1:
                    9c:dd:4d:2b:b1:f9:63:e1:04:f9:99:d2:2d:09:64:
                    47:49:7f:90:c5:04:b6:cf:43:a3:97:be:f5:c0:c3:
                    a3:ad:d9:d6:53:13:f4:cb:ea:93:fb:9f:b6:10:9c:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:DF:16:AB:54:73:49:E2:DC:E9:00:C4:FC:E5:CA:2C:11:EB:CF
            X509v3 Authority Key Identifier:
                keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:61:bb:01:4b:ed:c7:5d:46:67:fd:03:1a:a9:cb:e8:08:
         d5:a9:31:2f:c6:f3:d7:5f:b7:b3:39:f8:01:dd:0e:35:5a:b3:
         1d:50:32:d5:89:51:d8:05:c6:cb:cc:a8:04:e3:6c:ce:fa:79:
         1c:d9:e5:99:9c:c3:a7:c8:8b:4f:98:63:b9:a6:fb:0c:98:28:
         95:de:38:a8:df:29:28:48:69:ec:7a:e6:a3:35:5a:f8:b2:8c:
         d5:05:a0:b9:84:68:8e:d1:45:d3:fb:cc:b7:d2:72:e1:ec:71:
         46:e3:de:82:e2:52:40:d4:83:23:fd:a4:45:83:c5:25:7b:1a:
         ea:ae:ca:21:d6:f1:b6:5f:e0:55:e6:9d:7d:08:3d:f9:da:f0:
         22:f0:0d:37:b2:8c:29:52:2d:93:dc:ca:88:d9:a3:18:97:06:
         81:e0:9a:03:74:d8:bf:93:0c:1d:37:2b:73:b5:65:6c:ce:10:
         2f:ec:71:99:24:06:50:a2:74:cb:b5:3d:41:e8:76:b7:2a:cf:
         4f:24:91:ae:4d:74:f1:10:5e:9a:51:b7:c3:8b:ca:5b:46:aa:
         09:57:ef:55:cc:17:13:0a:25:c0:ba:03:00:0e:45:4b:2b:bd:
         e2:36:89:59:f2:5e:d7:5d:ca:46:20:c8:8a:42:8c:e9:08:52:
         d5:a7:b4:e8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTdCOTlBRjExMC8GA1UEBRMoQjQxMDlCRURDNDc3ODcyN0UyNEU5QTM3N0NDNjE3
QkMwN0MwQTczNTAeFw0yNTEyMjQwMzQ2MjJaFw0yNTEyMjYwMzQ2MjJaMBgxFjAU
BgNVBAMTDTY5NGI2MjBmLTI1MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6NNqzPgotqtWArlnchXbDH3VSc1nwCPqIRTHSzNR2niveT3vn+NwPZvrC
Geg7B4HJoTo9M1QSqvfR5wLrsglgnnBsVAIQlWke9ve0SpZu3NySHh15POLsN1b5
JoBiUfdvs2VU1oEmS73DXrj8+STKUps2uiioW9D6MP4NSG0EGqf4/7pYheGdMxt2
n9cfhXNXeObZRN/qaXA6rHz18dRWi4Ag7t8jYbborWSeplmb8qnGi2m0v/wNqdg3
pkWHSJ6ZnxVKZx6Wx1OqFcebWNpMwZzdTSux+WPhBPmZ0i0JZEdJf5DFBLbPQ6OX
vvXAw6Ot2dZTE/TL6pP7n7YQnLfHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUp2Lf
FqtUc0ni3OkAxPzlyiwR688wHwYDVR0jBBgwFoAUtBCb7cR3hyfiTpo3fMYXvAfA
pzUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3Qjk5LzExRkUzNjAwMzc2MDExRUVBMjhBMjEyQzRBRDlFNkZDL3RCQ2I3
Y1IzaHlmaVRwbzNmTVlYdkFmQXB6VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3RCQ2I3Y1IzaHlmaVRwbzNmTVlYdkFmQXB6VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdCOTkvMTFGRTM2MDAzNzYwMTFFRUEyOEEyMTJDNEFE
OUU2RkMvdEJDYjdjUjNoeWZpVHBvM2ZNWVh2QWZBcHpVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANyWG7AUvtx11GZ/0DGqnL6AjVqTEv
xvPXX7ezOfgB3Q41WrMdUDLViVHYBcbLzKgE42zO+nkc2eWZnMOnyItPmGO5pvsM
mCiV3jio3ykoSGnseuajNVr4sozVBaC5hGiO0UXT+8y30nLh7HFG496C4lJA1IMj
/aRFg8Ulexrqrsoh1vG2X+BV5p19CD352vAi8A03sowpUi2T3MqI2aMYlwaB4JoD
dNi/kwwdNytztWVszhAv7HGZJAZQonTLtT1B6Ha3Ks9PJJGuTXTxEF6aUbfDi8pb
RqoJV+9VzBcTCiXAugMADkVLK73iNolZ8l7XXcpGIMiKQozpCFLVp7To
-----END CERTIFICATE-----
Generated at Thu Dec 25 03:35:26 2025 by rpki-client