This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
File:                     HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft (raw, json)
Hash identifier:          5SLk7+NaVu3kAJ2st3SFbt+MhY7q4NF/+Qcmn7qiWWQ=
Subject key identifier:   53:8F:C3:1B:30:E5:5A:84:3D:B7:B2:20:EB:17:4F:E7:4B:7C:B0:4B
Authority key identifier: 1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96
Certificate issuer:       /CN=F369B2BBAF/serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
Certificate serial:       1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
Manifest number:          1E
Signing time:             Fri 19 Dec 2025 05:22:12 +0000
Manifest this update:     Fri 19 Dec 2025 05:22:11 +0000
Manifest next update:     Sun 21 Dec 2025 05:22:11 +0000
Files and hashes:         1: HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl (hash: H6/ZQ757E73IkvLq8/yRKpumQe0R3QsNWXfPQ5GuuUg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B2BBAF, serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
        Validity
            Not Before: Dec 19 05:22:11 2025 GMT
            Not After : Dec 21 05:22:11 2025 GMT
        Subject: CN=6944e104-0c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:9d:de:a5:26:fc:0d:8f:4c:d6:dc:06:e0:
                    51:fc:f9:bd:27:14:45:59:1f:53:a6:e5:64:a3:56:
                    e1:b8:1b:06:d5:25:22:5b:3c:ea:e0:17:6a:8b:7d:
                    cf:8f:0f:de:ff:74:dd:f6:cc:fc:a4:2f:cd:a8:b2:
                    a6:b9:c7:25:66:c2:67:be:85:35:fa:29:9b:90:46:
                    2a:3c:50:19:56:24:9c:94:13:f5:1e:77:b4:6c:7a:
                    23:f2:47:24:05:7b:33:8d:48:c6:59:28:4c:c1:7a:
                    0b:1f:9b:98:f3:4a:12:3e:3f:2d:1c:80:9e:4d:e8:
                    5c:b5:a5:b2:8a:f5:dc:7c:85:7d:f3:c4:e0:a0:01:
                    20:f2:b5:7f:7c:92:64:b1:1f:61:55:a2:d9:d0:eb:
                    46:35:74:c8:ad:94:06:cd:b5:72:13:b1:5e:40:49:
                    9b:f7:4e:8c:71:4f:e5:48:4d:da:30:aa:29:e9:83:
                    04:13:9a:10:c6:5e:ab:5a:23:7e:2f:43:96:b7:57:
                    59:cb:0b:29:7e:be:1c:b3:cd:6b:4a:9d:62:6c:54:
                    25:08:10:c1:36:b5:eb:64:3f:d0:d4:77:86:84:47:
                    31:dc:77:96:dc:d4:83:b2:3a:4f:cd:54:fc:7c:c2:
                    22:09:96:7c:ec:78:36:52:13:ee:d8:2d:b5:eb:6e:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8F:C3:1B:30:E5:5A:84:3D:B7:B2:20:EB:17:4F:E7:4B:7C:B0:4B
            X509v3 Authority Key Identifier:
                keyid:1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:d4:43:64:65:0a:38:a3:c7:3b:a8:75:52:bb:62:c4:06:8b:
         4b:8f:8b:2f:d0:85:2a:f6:11:83:a2:4f:d9:59:d1:b1:72:8e:
         d8:5e:cf:95:b2:09:91:31:83:24:bc:5f:70:53:00:46:03:41:
         21:1e:03:17:2f:6b:5d:01:54:9a:5b:b4:d4:e1:a6:98:5a:31:
         dd:9f:d8:07:be:0d:f0:e5:fd:85:c8:2f:de:0a:7f:7a:6b:cc:
         5b:dd:d8:12:d2:f6:b3:e4:89:08:29:d8:49:1b:32:e7:8c:83:
         85:17:03:ff:2c:44:b5:bf:29:e0:a7:21:17:0e:ad:14:39:89:
         bb:1e:e3:18:60:08:3a:71:5c:31:c0:ba:6b:04:75:d0:20:9e:
         0a:6a:53:5c:a2:f9:78:a5:29:68:cc:93:7f:c6:90:7a:04:d7:
         03:1b:e7:ef:7d:4e:04:24:c1:72:4a:c3:54:18:81:d2:d4:2c:
         68:c7:3d:6b:76:bc:ed:17:c4:97:6e:ff:d4:0b:97:82:0a:97:
         f4:39:30:f5:92:c3:e6:f2:e9:7e:5c:a3:69:82:c2:44:55:15:
         40:5d:d6:b4:44:52:e9:d1:f7:b6:5a:c5:2c:28:43:ac:b4:e2:
         02:a4:37:2a:b8:50:ea:60:75:cf:f0:cc:39:89:7c:64:18:65:
         ca:4f:48:f6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBHjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
QjJCQkFGMTEwLwYDVQQFEygxRDNCMDU5MERCODM3MDI1QzlBMkYxNEIzNDlFRDI1
MTBENTU0Nzk2MB4XDTI1MTIxOTA1MjIxMVoXDTI1MTIyMTA1MjIxMVowGDEWMBQG
A1UEAxMNNjk0NGUxMDQtMGM3ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMTpnd6lJvwNj0zW3AbgUfz5vScURVkfU6blZKNW4bgbBtUlIls86uAXaot9
z48P3v903fbM/KQvzaiyprnHJWbCZ76FNfopm5BGKjxQGVYknJQT9R53tGx6I/JH
JAV7M41IxlkoTMF6Cx+bmPNKEj4/LRyAnk3oXLWlsor13HyFffPE4KABIPK1f3yS
ZLEfYVWi2dDrRjV0yK2UBs21chOxXkBJm/dOjHFP5UhN2jCqKemDBBOaEMZeq1oj
fi9DlrdXWcsLKX6+HLPNa0qdYmxUJQgQwTa162Q/0NR3hoRHMdx3ltzUg7I6T81U
/HzCIgmWfOx4NlIT7tgttetuKtsCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRTj8Mb
MOVahD23siDrF0/nS3ywSzAfBgNVHSMEGDAWgBQdOwWQ24NwJcmi8Us0ntJRDVVH
ljAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUIyQkIvOEY1Q0IzQjJDNkIzMTFGMDkyMTU2MDkyREFFNEVDOUMvSFRzRmtO
dURjQ1hKb3ZGTE5KN1NVUTFWUjVZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSFRzRmtOdURjQ1hKb3ZGTE5KN1NVUTFWUjVZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5QjJCQi84RjVDQjNCMkM2QjMxMUYwOTIxNTYwOTJEQUU0
RUM5Qy9IVHNGa051RGNDWEpvdkZMTko3U1VRMVZSNVkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAMfUQ2RlCjijxzuodVK7YsQGi0uPiy/Q
hSr2EYOiT9lZ0bFyjthez5WyCZExgyS8X3BTAEYDQSEeAxcva10BVJpbtNThppha
Md2f2Ae+DfDl/YXIL94Kf3przFvd2BLS9rPkiQgp2EkbMueMg4UXA/8sRLW/KeCn
IRcOrRQ5ibse4xhgCDpxXDHAumsEddAgngpqU1yi+XilKWjMk3/GkHoE1wMb5+99
TgQkwXJKw1QYgdLULGjHPWt2vO0XxJdu/9QLl4IKl/Q5MPWSw+by6X5co2mCwkRV
FUBd1rREUunR97ZaxSwoQ6y04gKkNyq4UOpgdc/wzDmJfGQYZcpPSPY=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:57:22 2025 by rpki-client