This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File:                     UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier:          w4VfuWie8v+gDV6NxBaSNkMpDpDPDjiPVtBhq73dvp4=
Subject key identifier:   22:AB:0A:2C:A2:CD:E2:06:70:9F:99:54:F6:C8:AF:3D:74:CC:33:0D
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer:       /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial:       0475
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number:          0471
Signing time:             Sun 25 Jan 2026 03:13:18 +0000
Manifest this update:     Sun 25 Jan 2026 03:13:17 +0000
Manifest next update:     Tue 27 Jan 2026 03:13:17 +0000
Files and hashes:         1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: mwlDS4BsDQHPvJI4uefxa0K83utHbW23oXttBKwOTJk=)
                          2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
                          3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
        Validity
            Not Before: Jan 25 03:13:17 2026 GMT
            Not After : Jan 27 03:13:17 2026 GMT
        Subject: CN=69758a4e-edfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:6f:37:12:16:4b:64:d4:cb:65:01:ba:b6:
                    13:c6:cd:cb:e8:a5:71:0c:13:31:b7:78:c2:db:1e:
                    10:c7:34:58:54:ba:79:84:1f:f9:60:44:33:86:d1:
                    12:32:0b:a9:2b:9f:a0:a5:75:d2:e9:9f:50:fc:21:
                    76:06:5d:8a:41:58:16:06:70:9d:f7:2f:b3:71:93:
                    7c:d7:94:a9:94:cc:e6:e0:1a:92:82:ae:17:e3:eb:
                    c5:ef:c8:16:9a:03:74:69:9b:a1:18:26:a2:6f:9a:
                    f1:61:d9:f5:5f:83:66:55:d0:ef:05:7b:13:70:3e:
                    76:8b:16:f0:64:68:ca:15:a0:a3:36:c4:dd:00:a9:
                    aa:36:84:c0:93:4e:4d:d6:b4:0a:00:99:65:9a:88:
                    b0:7e:68:9b:23:ec:35:12:6f:2b:d3:ae:59:37:74:
                    9a:73:c6:f8:d4:70:c2:34:a1:47:64:11:f4:77:bb:
                    bb:95:28:19:59:87:ab:ef:78:30:4b:8d:6f:6f:0d:
                    94:14:90:b5:d8:96:13:e7:2a:00:7b:b1:a3:38:45:
                    50:2f:76:18:24:31:92:4d:d2:ab:83:f5:f7:bc:62:
                    cc:58:eb:98:20:38:9d:54:51:cd:82:66:c6:80:c7:
                    e6:93:8b:87:76:5f:3b:b0:47:10:1f:56:b5:8d:44:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:0A:2C:A2:CD:E2:06:70:9F:99:54:F6:C8:AF:3D:74:CC:33:0D
            X509v3 Authority Key Identifier:
                keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:61:08:ba:54:1b:3a:2a:2d:e7:fd:c6:09:26:2a:eb:48:9b:
         58:7f:46:39:27:e2:12:28:83:56:12:b6:99:c7:ce:43:09:bc:
         a9:66:27:14:58:d4:8e:5b:2a:7e:d0:96:d3:52:e9:19:7b:01:
         b1:46:d9:a2:e7:29:8c:b5:71:32:aa:8d:a1:96:ca:9c:70:ca:
         98:35:7f:65:98:c6:f3:44:3a:a6:6b:1c:ba:18:5b:7d:af:c0:
         05:cd:5b:72:6e:6b:e6:aa:83:ad:99:d8:f6:b0:71:96:41:25:
         ba:c2:68:51:6b:3d:e0:6d:99:77:c3:13:bd:7a:8f:6f:e3:f5:
         c2:07:0f:21:b9:49:3a:09:24:d7:05:b7:97:27:31:2b:8b:2c:
         58:f8:ac:7d:5d:8e:f4:7a:e9:f3:4e:fb:4f:ca:cc:be:40:51:
         d9:b2:72:93:99:21:e1:1e:aa:05:f7:af:22:d9:13:e3:3c:3f:
         e9:a1:21:0b:73:48:c7:a4:ea:d1:f5:9c:67:68:d9:21:a5:9b:
         1b:27:e6:6c:3a:41:ac:91:7b:fd:0f:20:b2:2c:9a:7f:c8:99:
         66:80:b7:55:0d:f4:f2:0a:19:90:8b:fd:36:b6:94:53:15:e4:
         b2:9c:33:46:18:fd:96:f0:99:a7:f8:d9:ef:ed:82:5a:34:71:
         ed:70:d1:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlBRkJBRjExMC8GA1UEBRMoNTAzRDE4MjhENEVGMENEQzYzQTU4QTU0RjVDMEM5
OTJEMjNCQzFBQTAeFw0yNjAxMjUwMzEzMTdaFw0yNjAxMjcwMzEzMTdaMBgxFjAU
BgNVBAMTDTY5NzU4YTRlLWVkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC52G83EhZLZNTLZQG6thPGzcvopXEMEzG3eMLbHhDHNFhUunmEH/lgRDOG
0RIyC6krn6ClddLpn1D8IXYGXYpBWBYGcJ33L7Nxk3zXlKmUzObgGpKCrhfj68Xv
yBaaA3Rpm6EYJqJvmvFh2fVfg2ZV0O8FexNwPnaLFvBkaMoVoKM2xN0Aqao2hMCT
Tk3WtAoAmWWaiLB+aJsj7DUSbyvTrlk3dJpzxvjUcMI0oUdkEfR3u7uVKBlZh6vv
eDBLjW9vDZQUkLXYlhPnKgB7saM4RVAvdhgkMZJN0quD9fe8YsxY65ggOJ1UUc2C
ZsaAx+aTi4d2XzuwRxAfVrWNROGtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIqsK
LKLN4gZwn5lU9sivPXTMMw0wHwYDVR0jBBgwFoAUUD0YKNTvDNxjpYpU9cDJktI7
waowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QUZCL0NFNTA0QzBBOUJBNTExRUQ5ODQxQUVDN0YxMjIyNDY4L1VEMFlL
TlR2RE54anBZcFU5Y0RKa3RJN3dhby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VEMFlLTlR2RE54anBZcFU5Y0RKa3RJN3dhby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTlBRkIvQ0U1MDRDMEE5QkE1MTFFRDk4NDFBRUM3RjEy
MjI0NjgvVUQwWUtOVHZETnhqcFlwVTljREprdEk3d2FvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVYQi6VBs6Ki3n/cYJJirrSJtYf0Y5
J+ISKINWEraZx85DCbypZicUWNSOWyp+0JbTUukZewGxRtmi5ymMtXEyqo2hlsqc
cMqYNX9lmMbzRDqmaxy6GFt9r8AFzVtybmvmqoOtmdj2sHGWQSW6wmhRaz3gbZl3
wxO9eo9v4/XCBw8huUk6CSTXBbeXJzEriyxY+Kx9XY70eunzTvtPysy+QFHZsnKT
mSHhHqoF968i2RPjPD/poSELc0jHpOrR9ZxnaNkhpZsbJ+ZsOkGskXv9DyCyLJp/
yJlmgLdVDfTyChmQi/02tpRTFeSynDNGGP2W8Jmn+Nnv7YJaNHHtcNEP
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:37 2026 by rpki-client