This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
File:                     4QUiVzRX-tnLWm9cGdaMzm1unCM.mft (raw, json)
Hash identifier:          1c8geNUIKBK6HoWduv+6Rub+7GKv8dyW4lV5iT5BOSk=
Subject key identifier:   1B:72:CC:2D:EF:B4:1C:39:C0:EB:8C:C8:6B:08:9D:41:1F:F5:4F:AF
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Certificate issuer:       /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial:       06C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
Manifest number:          06C1
Signing time:             Wed 24 Dec 2025 02:16:46 +0000
Manifest this update:     Wed 24 Dec 2025 02:16:45 +0000
Manifest next update:     Fri 26 Dec 2025 02:16:45 +0000
Files and hashes:         1: 4QUiVzRX-tnLWm9cGdaMzm1unCM.crl (hash: exBxYSRly3KlrIXgOA2Hcm/NgfwAUzeMZo4RXQ0OO30=)
                          2: 4E070DD6D22711EE84901E62775412E6.roa (hash: BH/57g82jCGEW3Gi9zhi5zpe2WKpng1h5j7GySibBtY=)
                          3: 3824F918D4D911EBACDD633EF8AEA228.roa (hash: L3vH2zmIsjZ03q0URRZICrpO1MOA0mkvPARr/jfeppg=)
                          4: 970F1E641FEA11EE99947F624AD9E6FC.roa (hash: 0Kn857c5JBdTYzWFmA6vGDiE64UxZrMNDZC0t8mHU/g=)
                          5: EED2265022E811EDAF592A9AF1222468.roa (hash: y2XN76mWZxn5ruFQMI5ZgWhqdKjQY5mD0t+GE/wohCs=)
                          6: 6BE29F76D4D911EB8763AE3EF8AEA228.roa (hash: X6fENjfD/CbaGp5w9cKC1jdpjMT1u+e4NgCmYHUQ1mc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 02:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0CB0AF, serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
        Validity
            Not Before: Dec 24 02:16:45 2025 GMT
            Not After : Dec 26 02:16:45 2025 GMT
        Subject: CN=694b4d0e-b0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:43:8b:01:7f:43:57:17:87:9c:42:e8:ec:
                    45:61:bc:8c:a0:05:2a:de:98:54:d3:e1:73:8f:30:
                    72:cd:58:f0:d4:b5:78:ee:de:96:0b:80:74:b5:65:
                    24:ee:e4:52:87:cc:0a:c9:5a:5d:8e:9c:0b:a0:01:
                    8d:da:96:ba:b4:a3:0b:68:24:fc:5f:95:1a:1b:83:
                    e5:73:90:bc:ae:7d:f4:02:83:ca:fb:bf:4b:67:6e:
                    bc:6a:01:f7:43:c4:96:eb:f8:15:82:2d:70:77:cc:
                    7e:7c:f9:77:2f:86:91:38:c9:e4:53:71:5b:06:bd:
                    a0:c6:8c:0c:77:bf:c9:7d:04:e2:51:42:1c:4e:d6:
                    07:7c:9a:7c:81:4a:f4:ee:6c:8c:e5:c9:0f:ec:d5:
                    23:07:cb:b3:d0:b8:e0:1b:84:ed:b9:58:f2:67:93:
                    85:1b:1b:d8:9c:e5:19:e6:67:0c:ec:01:c1:7a:69:
                    a6:49:1b:ad:59:23:b2:a9:e0:cf:20:88:ab:60:1c:
                    a4:8f:99:e9:9c:ae:3b:e6:f3:67:5a:56:cd:b4:96:
                    e0:9e:bf:56:c5:5a:a8:d1:fc:14:60:1c:00:b7:77:
                    26:0c:e0:1f:04:99:ad:4b:a4:7b:f1:9d:96:68:05:
                    d3:7a:14:aa:8d:f5:52:8c:92:ce:33:71:e8:9c:1b:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:CC:2D:EF:B4:1C:39:C0:EB:8C:C8:6B:08:9D:41:1F:F5:4F:AF
            X509v3 Authority Key Identifier:
                keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2f:80:50:b3:3f:fd:75:ac:5b:04:22:9c:de:e6:62:9e:f0:
         36:fc:43:1a:63:4b:26:9c:cc:84:d3:1c:f7:9b:df:32:a8:57:
         8c:0d:ad:ca:25:e8:67:d6:6d:71:1c:93:fa:d0:02:3e:fc:04:
         3c:75:6f:bb:f1:7c:fa:4a:e2:a6:cd:5a:f2:78:22:78:a2:62:
         40:6b:07:52:d1:8a:dc:fc:cd:d9:1d:55:42:bb:dd:02:00:58:
         5d:85:99:31:82:ae:53:3b:4e:9f:77:70:4c:10:73:5d:c0:d4:
         24:43:bb:5a:15:2a:8b:17:8f:89:25:e3:4c:be:a4:b1:1a:7c:
         3b:10:7a:42:f6:82:66:61:55:a9:96:26:17:56:bb:35:bf:db:
         55:65:e2:4e:b4:eb:cb:81:1a:9f:85:10:e8:fa:6c:fa:1a:54:
         03:6c:66:58:9c:06:56:fc:91:b1:ae:ba:f1:54:4f:16:24:97:
         1c:97:67:26:62:5d:f9:9e:ca:c9:9a:de:a7:ce:21:7c:94:bb:
         bf:5b:4c:dd:c2:a9:49:ef:f3:62:a9:28:e3:d6:51:31:37:69:
         41:30:23:fd:b1:83:61:4e:2b:16:d5:42:3d:58:fe:2c:72:84:
         44:59:c9:76:cd:be:ec:84:e1:1b:0d:73:ad:cd:ed:55:a3:6e:
         be:98:e5:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTBDQjBBRjExMC8GA1UEBRMoRTEwNTIyNTczNDU3RkFEOUNCNUE2RjVDMTlENjhD
Q0U2RDZFOUMyMzAeFw0yNTEyMjQwMjE2NDVaFw0yNTEyMjYwMjE2NDVaMBgxFjAU
BgNVBAMTDTY5NGI0ZDBlLWIwYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdZ0OLAX9DVxeHnELo7EVhvIygBSremFTT4XOPMHLNWPDUtXju3pYLgHS1
ZSTu5FKHzArJWl2OnAugAY3alrq0owtoJPxflRobg+VzkLyuffQCg8r7v0tnbrxq
AfdDxJbr+BWCLXB3zH58+XcvhpE4yeRTcVsGvaDGjAx3v8l9BOJRQhxO1gd8mnyB
SvTubIzlyQ/s1SMHy7PQuOAbhO25WPJnk4UbG9ic5RnmZwzsAcF6aaZJG61ZI7Kp
4M8giKtgHKSPmemcrjvm82daVs20luCev1bFWqjR/BRgHAC3dyYM4B8Ema1LpHvx
nZZoBdN6FKqN9VKMks4zceicG2HLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUG3LM
Le+0HDnA64zIawidQR/1T68wHwYDVR0jBBgwFoAU4QUiVzRX+tnLWm9cGdaMzm1u
nCMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEwQ0IwLzE4MkY0OTg0QzIxODExRUI5OTRFNDI3MUY4QUVBMjI4LzRRVWlW
elJYLXRuTFdtOWNHZGFNem0xdW5DTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRRVWlWelJYLXRuTFdtOWNHZGFNem0xdW5DTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTBDQjAvMTgyRjQ5ODRDMjE4MTFFQjk5NEU0MjcxRjhB
RUEyMjgvNFFVaVZ6UlgtdG5MV205Y0dkYU16bTF1bkNNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtL4BQsz/9daxbBCKc3uZinvA2/EMa
Y0smnMyE0xz3m98yqFeMDa3KJehn1m1xHJP60AI+/AQ8dW+78Xz6SuKmzVryeCJ4
omJAawdS0Yrc/M3ZHVVCu90CAFhdhZkxgq5TO06fd3BMEHNdwNQkQ7taFSqLF4+J
JeNMvqSxGnw7EHpC9oJmYVWpliYXVrs1v9tVZeJOtOvLgRqfhRDo+mz6GlQDbGZY
nAZW/JGxrrrxVE8WJJccl2cmYl35nsrJmt6nziF8lLu/W0zdwqlJ7/NiqSjj1lEx
N2lBMCP9sYNhTisW1UI9WP4scoREWcl2zb7shOEbDXOtze1Vo26+mOXc
-----END CERTIFICATE-----
Generated at Wed Dec 24 23:55:17 2025 by rpki-client