This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
File:                     P2d_OhisqubJf4H5muh5RlTgQQs.mft (raw, json)
Hash identifier:          TeFYLgTis2d4v9F9/3ahiSVfZ5ceUFiznjzETcQ9SoA=
Subject key identifier:   E4:C0:0B:83:0D:4A:A5:F6:FA:B7:3E:7A:6E:94:33:EE:67:5A:84:93
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       0429
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
Manifest number:          03F6
Signing time:             Mon 22 Dec 2025 03:36:32 +0000
Manifest this update:     Mon 22 Dec 2025 03:36:31 +0000
Manifest next update:     Wed 24 Dec 2025 03:36:31 +0000
Files and hashes:         1: P2d_OhisqubJf4H5muh5RlTgQQs.crl (hash: BvmegYW9bfxzqYC+ewE6j6e2L3TZgnWzJHUdUjT/meU=)
                          2: 93BEB9727B6F11EF81325783762E951A.roa (hash: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=)
                          3: B598428C7BD011EF9348E170762E951A.roa (hash: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=)
                          4: 93134C74962011EFAAA0A9B4762E951A.roa (hash: HWJdyAQD0gPKecvYAkvhvhhvqGUM+2Gwedr+o6pd7fI=)
                          5: 1A4F9134922511EF83368F9D762E951A.roa (hash: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=)
                          6: F430395C9D2F11EFB715FD42762E951A.roa (hash: QZVPOHGEn0usgf/YbR+2DThtu8NQGk1/eDy5A5nCKIg=)
                          7: 0EED0EBABAA811EFB3FB887B762E951A.roa (hash: cWJpYejV3y01oVA8qnDQSW9CTviS9mBH5RQPU8qnsl4=)
                          8: 7B0EB180561611EF957AD24F762E951A.roa (hash: YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=)
                          9: 837E97941C2511EEAA26D4594AD9E6FC.roa (hash: DmTBedmJtAZllDRXX8QYacyLifphZi9/9tYqy0qa/Z8=)
                          10: E1F54F2E5FF511EFAE767E52762E951A.roa (hash: ZHyP78AP+q/JJtHtUW/HC4m2P265a+lBVZzkus9pUMQ=)
                          11: 9B6E721AE3E411EFB934FF78762E951A.roa (hash: gBgcjfT/qrh95VoyMQ5KZbvh0uc6ei9HAXRDsRUsII4=)
                          12: 77525E5A1C2611EE8D4AC85C4AD9E6FC.roa (hash: DpMrNiTjRZWKu4SpXJlLIPkKtzQPA3MM+9+EToM9kyg=)
                          13: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (hash: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=)
                          14: D305BF9E1C2611EE962CF15D4AD9E6FC.roa (hash: QvV0F8KyJ9WvuBSABzYloVhD1CSoUH2t+UNQgJHZffQ=)
                          15: 8CBFAAFA561711EFA32AB1BE762E951A.roa (hash: x13tTUmCqaneTmuylrncyIbgJsZvmJqEqrEdlvKnZD8=)
                          16: 003205069B9511EFB5BBFBA3762E951A.roa (hash: UjNuym/YVxBGxCeImR5szQOeTVJpSD09YHDR0+HigJY=)
                          17: 48DB40CE1C2511EE961F2B594AD9E6FC.roa (hash: 0WYNowNq6/ghxa/+ViWE2YlwzJQFXVRIIBMOUYA+fQ8=)
                          18: CC06753C9B9411EFB98A1EA2762E951A.roa (hash: PrWrPFpz78YhUoGxQ7jEkZFHzPPsv0jeCPOMzZB31PQ=)
                          19: D6A352521C2511EE9164F55A4AD9E6FC.roa (hash: He2Venw8taiOIZNG5L2+aSFbOwse3tT4XMAeuZ2rfyQ=)
                          20: 4134710A1C2611EE8654415C4AD9E6FC.roa (hash: FOrfNT73uBh2aYXKjOIxZWv6Nr2ME7Pa+Um5EKzqmIQ=)
                          21: 2D888128971311EFB14662AA762E951A.roa (hash: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=)
                          22: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (hash: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=)
                          23: F101CBE6561811EFA074CAB5762E951A.roa (hash: PVkzNVX7ipe9aGzB4gi4o8SFUMbc7U3/3IkSQs7+GcU=)
                          24: AC6C1AF87C2011EF8072375D762E951A.roa (hash: 3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=)
                          25: 494629A869C611EFAB29428D762E951A.roa (hash: eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=)
                          26: 93F6BF08D1D611EFA285465B762E951A.roa (hash: tVKwje6T2o4eP3SDnHXNKWk8+gEDaKos+OkXYB9+jE0=)
                          27: C3DC7C78744B11EFB00C628E762E951A.roa (hash: DslpOa5/mWSwqGcWwNCCAP4kUIk852TGOki17LeoHAI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF, serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Dec 22 03:36:31 2025 GMT
            Not After : Dec 24 03:36:31 2025 GMT
        Subject: CN=6948bcc0-092c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:33:e8:73:c1:9e:c2:b6:36:54:25:af:34:
                    5d:dc:6a:81:ed:08:2f:0f:ac:41:2b:26:da:60:73:
                    18:ca:07:42:cc:5a:0e:f2:28:ad:e0:26:05:77:2d:
                    c7:66:9e:57:51:c8:4d:b0:5e:78:ba:ea:a6:65:cd:
                    3c:7b:19:a8:c1:6b:bb:e1:9c:6a:36:34:c8:73:70:
                    44:4e:66:8b:de:32:d1:9f:fe:7e:bb:8f:1e:7d:7c:
                    5f:2a:19:bc:b7:9f:2a:17:07:36:7b:46:07:69:30:
                    1b:61:79:f6:e3:51:a0:a0:3f:78:bd:96:53:6a:03:
                    79:38:21:75:9c:fb:81:af:99:d8:a2:e2:78:f0:ee:
                    b4:5f:ce:57:a5:f2:e9:66:38:5a:8e:7b:e1:e1:ae:
                    9a:ac:19:1f:69:be:bc:9c:a7:0f:2b:23:85:8e:d1:
                    57:15:d1:3e:aa:b0:21:83:60:16:d7:ee:52:43:e1:
                    a1:50:7b:ae:25:45:a1:91:45:34:7b:91:1a:ea:22:
                    8e:06:d6:d1:05:77:4f:a7:53:5a:db:15:1d:f4:c5:
                    e3:51:9e:61:10:30:1d:88:80:c2:a3:91:a0:94:3e:
                    83:38:6d:94:14:88:da:1b:b7:12:cd:b1:59:6e:be:
                    52:43:d8:e7:b5:9d:a9:56:6f:11:e0:f1:d8:04:59:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:0B:83:0D:4A:A5:F6:FA:B7:3E:7A:6E:94:33:EE:67:5A:84:93
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:97:eb:54:cb:7d:3f:09:a0:f4:ae:a9:eb:64:20:7f:e4:
         82:7d:ca:ea:e2:f9:7d:1a:5a:5f:8a:39:d2:d7:b5:bd:a1:fe:
         5b:6e:a2:be:7f:3e:f2:64:f3:42:1a:92:0a:c5:1b:94:e7:60:
         ea:25:a1:0d:16:08:ab:04:a2:8d:3e:88:cc:fc:15:a9:d3:01:
         54:64:3c:05:9a:12:46:77:03:73:aa:c2:fe:c3:6c:b0:87:21:
         66:b2:54:b6:59:52:5b:e0:eb:e9:cf:b9:ff:bb:b4:8f:32:dd:
         b9:d6:72:e8:a3:1a:a8:c4:b3:90:06:c2:21:24:be:6c:ba:31:
         26:25:95:89:96:62:cd:f2:c4:17:02:63:93:96:43:da:41:a1:
         4b:2a:44:4b:75:64:d3:a7:04:52:66:91:42:3b:98:91:ee:3a:
         7a:e9:7a:0c:55:04:6e:d1:9b:a2:dc:27:01:6a:bb:bf:92:36:
         17:7a:dd:62:12:8c:36:6c:fd:a2:d1:2b:1a:3a:fd:8d:fe:14:
         88:5e:28:db:e9:72:eb:6e:24:11:48:21:37:f4:68:a8:e0:22:
         f8:d6:23:d7:91:3a:38:dc:af:92:d6:26:e3:77:53:2c:f8:be:
         75:4a:5b:39:08:0f:c1:6f:ed:97:24:48:eb:42:02:e9:0a:4a:
         9d:f3:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:31:33 2025 by rpki-client