This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          rq6HyN5cPtAfc8S6sUZYh+TqL6EP3mXrLw0QHH1GTTI=
Subject key identifier:   E3:8A:A8:6C:FB:AC:BC:F9:EC:21:7D:6A:DD:1B:C4:45:8C:84:65:12
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       0352
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          034E
Signing time:             Sun 25 Jan 2026 03:50:37 +0000
Manifest this update:     Sun 25 Jan 2026 03:50:36 +0000
Manifest next update:     Tue 27 Jan 2026 03:50:36 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: Y/Cn4jD7zLx6x+/Sk6veLGE1hG7xgIJcKFMUSMKzEdU=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Jan 25 03:50:36 2026 GMT
            Not After : Jan 27 03:50:36 2026 GMT
        Subject: CN=6975930d-5bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:d9:d2:09:ed:fa:1d:de:40:d8:fb:d9:91:
                    11:e3:b2:f9:23:3e:32:ef:99:98:6d:12:dd:c1:9f:
                    cd:a7:ca:39:e5:b1:59:f2:04:9a:8a:6a:59:b4:d6:
                    1a:91:55:c1:f0:66:0a:dd:d3:d8:91:ee:a5:28:ca:
                    35:a8:4e:ba:4d:37:22:b0:6f:26:ea:e1:4b:b0:88:
                    e5:bc:40:ae:16:44:13:63:32:90:62:52:fb:32:c5:
                    f4:d7:64:41:ef:fe:aa:27:bb:f3:5a:52:86:6e:13:
                    21:8e:40:46:ef:bb:98:bf:71:93:15:27:60:e6:82:
                    d8:41:f3:15:97:fd:ec:33:bd:c9:69:63:8a:c1:2f:
                    25:bb:a5:27:f7:43:0a:7d:90:04:f4:5a:29:c9:7b:
                    6f:e0:75:f7:b4:c9:3c:65:c2:e4:af:87:1d:66:c4:
                    0b:59:c9:01:ae:01:ce:e3:91:f7:5b:70:ec:42:89:
                    41:76:25:43:96:5d:63:6f:7c:c7:0d:91:0d:29:aa:
                    49:98:97:74:bf:9f:4f:47:28:9c:1d:43:4c:a0:8d:
                    47:13:dc:af:03:14:ef:39:4e:20:59:f6:eb:e0:5d:
                    81:84:8f:d3:7a:63:6d:44:b6:d9:08:07:e3:b7:22:
                    ad:d6:19:97:50:4f:e9:dc:85:4b:53:44:bf:d0:f4:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:A8:6C:FB:AC:BC:F9:EC:21:7D:6A:DD:1B:C4:45:8C:84:65:12
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:e2:f6:a1:0b:fb:a0:68:ab:86:47:73:a0:9a:91:98:f0:
         04:75:f9:fd:a9:35:e2:51:d6:2b:11:6f:19:5b:9a:ad:8e:0c:
         ca:6a:97:fd:74:76:86:5b:e6:43:44:53:bb:e0:f6:39:00:09:
         72:69:96:a9:35:c5:38:a6:95:23:bd:b1:ee:c0:21:1e:f6:df:
         58:a8:52:f4:73:21:d9:2f:42:62:85:0f:50:53:32:24:32:53:
         2a:04:fa:a3:2f:58:a3:db:a6:1b:c2:21:e6:0c:5f:23:0c:29:
         0f:b9:c8:9a:98:4f:58:35:f5:6d:b3:9e:53:85:03:9e:26:cd:
         ba:89:38:05:f0:ca:7d:88:a8:ee:a3:c8:43:f2:ee:71:98:ce:
         24:8b:3f:89:84:33:dd:8a:fc:7d:89:1f:d9:83:cc:89:e7:29:
         46:0a:cd:a9:b2:52:1c:d2:1f:d8:cc:6d:1f:e0:11:b2:50:87:
         27:9a:04:db:0e:5c:26:bf:7e:a4:e3:ff:75:d4:9d:1c:25:fb:
         4e:84:4f:50:96:72:e0:49:4c:75:d3:aa:0b:44:fc:8f:37:a3:
         43:d0:f6:8a:3c:c0:43:0f:bb:d8:68:4d:8b:a0:94:f7:e5:3d:
         51:e5:3a:68:5d:c6:6b:df:4f:e3:79:74:4f:a1:61:97:89:d2:
         b5:8a:ed:fc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRERkRBRjExMC8GA1UEBRMoM0NFNzRBQzUyNUFCQzlCNTA1MTMxRTU2RDNBRjRC
QUEwQ0E4NkJDNzAeFw0yNjAxMjUwMzUwMzZaFw0yNjAxMjcwMzUwMzZaMBgxFjAU
BgNVBAMTDTY5NzU5MzBkLTViY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtT9nSCe36Hd5A2PvZkRHjsvkjPjLvmZhtEt3Bn82nyjnlsVnyBJqKalm0
1hqRVcHwZgrd09iR7qUoyjWoTrpNNyKwbybq4UuwiOW8QK4WRBNjMpBiUvsyxfTX
ZEHv/qonu/NaUoZuEyGOQEbvu5i/cZMVJ2DmgthB8xWX/ewzvclpY4rBLyW7pSf3
Qwp9kAT0WinJe2/gdfe0yTxlwuSvhx1mxAtZyQGuAc7jkfdbcOxCiUF2JUOWXWNv
fMcNkQ0pqkmYl3S/n09HKJwdQ0ygjUcT3K8DFO85TiBZ9uvgXYGEj9N6Y21EttkI
B+O3Iq3WGZdQT+nchUtTRL/Q9L5LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU44qo
bPusvPnsIX1q3RvERYyEZRIwHwYDVR0jBBgwFoAUPOdKxSWrybUFEx5W069Lqgyo
a8cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0REZELzkxODdDNUQ0Nzc2NzExRUU5OURGRDk3MjRBRDlFNkZDL1BPZEt4
U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BPZEt4U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFE
OUU2RkMvUE9kS3hTV3J5YlVGRXg1VzA2OUxxZ3lvYThjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAt8OL2oQv7oGirhkdzoJqRmPAEdfn9
qTXiUdYrEW8ZW5qtjgzKapf9dHaGW+ZDRFO74PY5AAlyaZapNcU4ppUjvbHuwCEe
9t9YqFL0cyHZL0JihQ9QUzIkMlMqBPqjL1ij26YbwiHmDF8jDCkPuciamE9YNfVt
s55ThQOeJs26iTgF8Mp9iKjuo8hD8u5xmM4kiz+JhDPdivx9iR/Zg8yJ5ylGCs2p
slIc0h/YzG0f4BGyUIcnmgTbDlwmv36k4/911J0cJftOhE9QlnLgSUx106oLRPyP
N6ND0PaKPMBDD7vYaE2LoJT35T1R5TpoXcZr30/jeXRPoWGXidK1iu38
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:24 2026 by rpki-client