This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          ezbLA9xteWSnOo1C+0F6s6Rryn6OJ+M3l27Ba76srKw=
Subject key identifier:   5C:E7:54:ED:C4:FC:B7:5F:04:E7:89:4D:D0:FE:55:FF:20:67:71:80
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       021E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          021D
Signing time:             Sun 25 Jan 2026 04:29:41 +0000
Manifest this update:     Sun 25 Jan 2026 04:29:40 +0000
Manifest next update:     Tue 27 Jan 2026 04:29:40 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: QXeMQAforB1NPSg2DPohPIEmxR12Kwvt4xHFF4KUxag=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Jan 25 04:29:40 2026 GMT
            Not After : Jan 27 04:29:40 2026 GMT
        Subject: CN=69759c35-4870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:7d:e7:7a:46:9e:16:43:92:15:99:49:df:
                    d9:d1:e7:7b:88:85:74:65:57:ea:69:09:93:e5:5b:
                    4c:12:97:6a:24:53:41:c4:c9:36:03:04:a7:da:d3:
                    69:7b:45:9a:ac:e7:32:62:0c:59:1d:2f:3a:3c:5f:
                    bb:ed:64:fa:be:ef:db:3f:ef:b8:22:5f:87:a1:e2:
                    06:f5:33:66:4e:c1:3f:79:e9:20:4d:0b:53:07:b0:
                    96:0c:09:3e:78:c6:7f:56:3d:89:88:98:af:aa:27:
                    1d:db:16:5b:d3:67:09:c0:c7:a7:30:7f:6f:0e:85:
                    26:46:be:07:38:34:4e:27:3c:69:66:b1:d6:ae:4b:
                    91:50:eb:1e:8f:c9:a5:ff:c0:8b:46:ed:cd:38:1d:
                    e4:61:85:39:d2:9b:a2:ae:15:87:74:06:0b:cd:cd:
                    4d:cb:46:7d:7c:c0:b1:d9:c6:0d:5a:f8:f8:33:13:
                    7c:2e:ae:b8:a0:07:e7:ab:86:85:68:de:39:15:20:
                    0c:f8:c1:8a:7d:92:7f:4f:85:24:d4:88:b5:2b:78:
                    dc:6a:95:a7:33:e2:d8:ec:46:0d:bd:cf:a8:13:52:
                    ad:e9:e9:88:d0:4b:99:5f:11:c7:93:cf:a7:93:bb:
                    48:73:a2:c0:5a:9b:af:52:f7:c0:2d:e4:e5:a9:68:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:54:ED:C4:FC:B7:5F:04:E7:89:4D:D0:FE:55:FF:20:67:71:80
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:02:57:a3:39:1b:89:da:c6:39:e5:96:4e:83:20:e5:5d:af:
         17:59:0f:b1:2c:4e:59:50:b5:ec:2e:c2:9a:af:6e:d6:e2:6a:
         50:9a:b1:eb:aa:92:13:0c:18:f7:ca:4c:30:2f:05:5a:99:9d:
         1c:44:46:25:91:cc:3d:bb:77:55:ce:c3:0a:92:34:ed:3c:71:
         6e:91:54:80:d2:7b:92:c3:d0:40:30:8e:e1:5b:0e:86:5c:18:
         a9:a7:64:32:42:d5:00:ff:71:95:bf:57:ef:1f:bd:58:19:8e:
         fc:2a:a3:0c:f1:5e:86:15:bb:76:83:f3:bc:35:65:e6:90:98:
         e6:28:15:3a:37:08:35:e3:10:a0:61:49:33:44:bd:d5:67:3d:
         bb:32:5d:c9:64:06:cf:c1:68:a8:e0:b4:3d:86:62:a7:13:25:
         1a:c4:68:03:35:22:92:56:43:f3:c6:27:64:b9:fd:bf:94:75:
         77:ea:b7:9b:ac:6e:5b:05:0c:81:b2:ef:8f:7b:e7:df:f6:37:
         c3:f4:0e:48:f0:99:37:69:ae:1a:c9:74:d9:a9:24:d1:df:2d:
         78:a3:8d:90:68:19:04:fe:73:47:4c:80:2b:28:2d:c0:ff:78:
         03:d6:d7:53:68:d3:45:a1:35:f4:20:25:e0:76:66:29:42:df:
         09:59:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:37:50 2026 by rpki-client