This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          wKvkjc/WUwqcj4pzclPS6pC+WEz9E3d3VH3fr1mqr2Q=
Subject key identifier:   E2:91:DF:9A:07:F6:A2:5F:94:DB:32:71:C4:6B:E1:59:F8:99:56:8E
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       0856
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          0856
Signing time:             Sun 25 Jan 2026 01:48:35 +0000
Manifest this update:     Sun 25 Jan 2026 01:48:34 +0000
Manifest next update:     Tue 27 Jan 2026 01:48:34 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: 8AVP7NdXCTiOgblVGRiFakDx3dAYM/83SDa96KUuq4Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Jan 25 01:48:34 2026 GMT
            Not After : Jan 27 01:48:34 2026 GMT
        Subject: CN=69757673-f2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5b:cc:3e:63:82:b9:90:32:52:03:f1:31:71:
                    ca:2b:2b:61:15:c2:31:ff:9b:aa:77:24:1a:42:ab:
                    66:75:54:19:56:88:98:4c:42:39:dc:22:40:27:a8:
                    e8:89:3e:6b:67:c7:ef:99:55:4b:a4:89:f3:7f:95:
                    4f:35:d8:15:5d:71:93:ac:08:a8:e7:2e:1c:d2:25:
                    01:4a:2b:3b:ee:ce:c8:c4:99:0c:60:f1:1a:12:77:
                    5a:46:e4:f0:26:72:2d:d2:a4:90:00:4f:30:1d:d6:
                    74:72:6e:08:5f:f0:61:89:b4:5a:76:6d:e6:40:b0:
                    b4:ed:0f:ec:f3:1a:0f:9c:bb:58:67:d3:cc:70:e4:
                    16:2b:5a:10:f4:a9:32:f7:94:38:33:b8:6d:9f:f4:
                    7d:4c:a7:40:67:bc:e1:9d:e7:00:81:52:90:25:b3:
                    d3:8b:01:07:d1:d5:c4:b5:f6:82:89:34:97:62:65:
                    34:b7:14:f3:66:a5:d7:6a:6a:d4:9f:de:7e:57:a8:
                    f5:8b:22:c3:99:25:98:69:f9:79:41:b3:ea:f3:7b:
                    9e:48:20:d0:82:59:96:bf:2c:e0:74:6c:6f:86:36:
                    54:44:29:83:02:d8:67:92:21:6a:56:ff:01:51:6f:
                    aa:74:3f:6a:78:f1:87:6d:93:3f:96:81:11:8a:d2:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:91:DF:9A:07:F6:A2:5F:94:DB:32:71:C4:6B:E1:59:F8:99:56:8E
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:96:bb:6d:43:f3:59:d5:ef:91:b8:a2:b9:07:f1:b5:6d:
         38:7d:c9:6a:ca:ee:06:0f:0f:71:0f:df:82:04:23:e2:2a:9e:
         34:87:0b:bc:ea:96:cf:48:73:41:05:25:34:6e:12:fc:3f:ec:
         8a:53:ed:db:01:35:76:9c:36:3a:61:5d:d3:ef:b6:a6:58:4f:
         f6:47:92:ad:ed:c3:1a:fc:9e:c7:c8:75:39:2d:50:53:28:61:
         61:bc:16:b1:06:12:60:95:f4:10:28:68:3a:4a:29:70:04:2f:
         10:cd:62:0f:24:55:47:7d:b9:09:6a:bc:61:8b:3f:01:9a:c6:
         47:a3:b0:29:97:d8:a3:7a:42:41:29:cc:13:2c:36:10:fe:0e:
         8f:28:82:1c:60:94:ee:7e:2f:fc:d1:21:9b:64:3d:43:b8:65:
         9f:bd:72:c9:18:04:1e:08:48:e9:a2:07:b3:bf:c7:a5:a2:22:
         53:f6:d4:ed:1a:46:2a:f7:bd:b1:93:53:36:f8:02:48:5a:40:
         c8:90:a8:f3:64:c7:ca:c1:26:5b:d4:52:be:79:ce:23:ee:5a:
         62:89:da:49:5c:ee:8c:c5:b3:ad:65:cf:6a:3b:5d:b8:ce:43:
         6d:79:98:30:ac:d6:4a:cb:fd:74:70:31:87:4c:2b:be:db:68:
         be:2b:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:20 2026 by rpki-client