This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          aTAVRWDKgD7FjZOw6Wm2W1iHLt5aupTMP+S5JWUsjR8=
Subject key identifier:   24:9B:4B:BF:60:0F:2C:3F:30:65:78:BD:1F:64:A0:30:D0:F9:E9:62
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0E94
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0E8A
Signing time:             Sat 20 Dec 2025 01:00:27 +0000
Manifest this update:     Sat 20 Dec 2025 01:00:26 +0000
Manifest next update:     Mon 22 Dec 2025 01:00:26 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: uqPGf6NYT8YWXRmpJdfABVbTCsL1jAkvi2zA1Vi8rK8=)
                          2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
                          4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
                          5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
                          7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
                          8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
                          9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3732 (0xe94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Dec 20 01:00:26 2025 GMT
            Not After : Dec 22 01:00:26 2025 GMT
        Subject: CN=6945f52b-baa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:49:d9:95:26:e5:db:0a:fe:de:dd:bb:b0:
                    26:ac:ff:18:68:a4:ed:5c:a5:66:62:37:5d:a6:bf:
                    7a:f1:46:6c:ae:fe:1c:66:51:b4:4f:c6:76:12:5d:
                    20:11:a4:89:e5:0a:40:f7:18:ee:e5:e7:db:8a:80:
                    bb:fe:a6:b5:38:07:32:d5:40:94:cc:a0:ce:db:ef:
                    28:c4:40:c7:be:7b:97:db:b6:07:47:68:66:9d:48:
                    6e:6e:9c:e0:d3:49:87:e6:12:68:27:f4:e4:c6:f0:
                    51:1d:ca:51:7f:df:ae:a2:e1:f2:33:0c:c6:91:cc:
                    3b:79:b3:cf:67:f4:9d:57:db:ed:1a:99:bd:87:03:
                    f7:0e:46:1a:7b:0b:9c:e4:fe:f0:d3:3a:16:b9:96:
                    6f:97:b9:bc:80:46:36:21:fd:31:f3:08:26:70:bc:
                    20:15:d1:b5:74:9b:8f:04:52:1b:a9:d6:a4:8b:14:
                    0e:82:c5:9d:95:7b:85:a5:98:c7:20:6b:4b:3f:1a:
                    54:9f:64:a6:73:9a:a5:fa:30:8e:58:68:11:3a:93:
                    58:d8:f3:b1:f7:3b:92:cd:14:95:95:8e:25:e7:43:
                    2d:49:ff:1b:75:60:42:b4:b4:1b:45:08:e2:9c:69:
                    80:8c:85:54:cd:5c:e6:c1:56:8c:34:ff:ff:bd:4f:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9B:4B:BF:60:0F:2C:3F:30:65:78:BD:1F:64:A0:30:D0:F9:E9:62
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3f:38:cd:75:b5:d1:43:0d:fc:d3:ed:da:cd:2d:49:5f:38:
         e4:0b:b4:66:e4:73:77:9a:6d:21:e9:fb:04:34:e6:02:39:b7:
         61:44:3e:48:07:72:de:4d:7a:f8:5e:d4:e1:42:80:bb:a7:a2:
         96:47:b7:a5:5d:cf:1e:c9:de:3c:9b:60:f0:4c:30:ac:b4:ca:
         eb:89:d8:76:95:7c:05:6c:6d:a5:c4:07:8b:f5:a1:54:ba:66:
         c3:70:55:ba:8a:39:a1:11:20:d9:8d:59:c4:5b:cb:30:36:cf:
         31:8b:8f:b2:db:0f:91:2a:60:74:d4:f8:33:16:5e:59:82:7f:
         9a:a5:aa:97:88:a5:c4:e7:3b:4b:d9:ab:18:59:9e:56:89:73:
         40:3f:00:52:09:36:ad:b5:00:88:e4:66:32:87:32:42:94:53:
         53:2c:ef:ff:77:fd:8e:1f:1a:32:b7:b8:56:94:c1:2f:cf:c1:
         29:cd:6a:27:a0:5c:cd:f0:0c:5b:96:dd:bc:02:21:03:04:b8:
         08:42:32:a0:05:51:9b:06:5d:2e:78:96:c9:63:39:01:ab:d5:
         a7:82:3e:37:a5:23:2f:9c:4e:e7:9a:3f:cd:87:ab:70:0d:78:
         37:a8:79:52:c6:f0:90:d1:44:02:3f:e6:7a:b2:6d:b5:1e:e1:
         10:17:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:32:38 2025 by rpki-client