This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File:                     2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier:          95e0bHReDnzjKECQEFgVzWGjiBpO3J00lfjJuPEqLks=
Subject key identifier:   02:4A:19:D5:1B:54:2A:F0:F0:2B:E6:A3:BB:CF:EE:E3:C5:5E:7E:CF
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer:       /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial:       0256
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number:          024E
Signing time:             Sun 25 Jan 2026 04:21:03 +0000
Manifest this update:     Sun 25 Jan 2026 04:21:02 +0000
Manifest next update:     Tue 27 Jan 2026 04:21:02 +0000
Files and hashes:         1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: 1Rcc337eaMRwEqC9S6z+49c6zU5fVwxPok6D8Co8WeM=)
                          2: CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa (hash: gzKwOZ98jgnieBv/5nWznefopJ4KkE1g7Or0zMyAoZI=)
                          3: 83DC9676CDCD11F08E2794B7DAE4EC9C.roa (hash: 4Gl9Zow27JuQ8GOMSVeAJ+sgSeivkesNbYlt5t1Eo1A=)
                          4: 31C48A88CDCD11F0A70CB3B5DAE4EC9C.roa (hash: 443cxlKgy4pnPq2qfyUo04AC7frZpxKf8kr/vGjPde4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
        Validity
            Not Before: Jan 25 04:21:02 2026 GMT
            Not After : Jan 27 04:21:02 2026 GMT
        Subject: CN=69759a2f-01c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:53:f5:8a:3d:f2:a2:a1:63:8c:7f:ac:49:
                    d2:6a:6f:91:5c:e2:19:f2:fe:35:e9:07:1c:00:ee:
                    d8:02:95:81:bb:57:ae:ee:14:5b:62:85:ea:da:1e:
                    2e:67:6b:0d:ea:31:ce:04:8a:d9:ed:a2:68:a8:63:
                    f1:f5:a9:3c:c2:40:35:3a:e8:78:7f:1c:ff:5f:5a:
                    08:48:06:d2:fe:22:10:50:1f:6a:62:8c:50:10:2e:
                    a8:23:e2:94:0e:b6:ef:b2:b9:24:0d:6c:0e:3a:a8:
                    f3:8a:ea:38:97:e8:85:93:ba:01:f1:13:c7:2e:b7:
                    0d:7f:b0:d8:3a:85:3d:d9:40:03:db:be:d6:4f:8f:
                    e2:02:bf:2b:54:d4:65:c5:5e:bf:d8:de:87:57:2e:
                    72:1e:ed:42:2b:20:2a:93:4c:1a:f6:d4:eb:8d:fb:
                    cf:1e:dd:c8:f6:54:17:d0:be:a5:4b:ad:15:9c:f4:
                    53:ff:07:5e:6a:d2:06:39:e3:13:42:9d:31:d6:34:
                    48:78:b6:9a:0a:96:db:05:9d:56:25:47:47:7f:29:
                    83:10:00:c6:dc:b6:7c:0c:5e:17:c9:8c:1c:dd:d6:
                    22:68:33:98:d1:5c:0d:d5:2e:2b:f0:5c:16:83:45:
                    56:31:c9:93:72:85:39:25:36:e8:10:5c:b1:a1:af:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4A:19:D5:1B:54:2A:F0:F0:2B:E6:A3:BB:CF:EE:E3:C5:5E:7E:CF
            X509v3 Authority Key Identifier:
                keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:fe:a9:b4:5b:5c:5a:d5:ce:0b:34:3d:db:b4:f4:79:59:
         8f:c7:22:c2:0e:42:32:19:7e:bb:4e:8d:27:be:b1:ee:6d:65:
         ec:06:09:76:c9:af:40:9b:17:21:87:de:84:f6:3c:53:d6:89:
         63:d7:8a:3a:26:41:eb:62:13:af:00:7d:82:64:fb:da:78:2a:
         13:88:56:6b:e5:a0:4e:cf:f9:19:c9:73:52:92:07:4b:49:33:
         b9:a3:0e:95:3c:d8:38:a3:47:d3:bb:42:cc:b4:c2:55:3d:09:
         7e:ef:56:2b:2c:df:05:d4:39:cb:9d:93:c5:e2:01:2f:49:35:
         c8:55:2a:3c:2d:5b:09:79:1e:16:d5:a2:73:e6:ba:da:f0:f2:
         01:2d:70:a6:2d:30:9a:33:04:ba:ea:03:04:c6:fa:2b:99:fe:
         85:5f:1b:35:b1:05:be:16:ec:84:e1:40:3a:a3:a6:f1:10:6c:
         c5:bd:37:5d:c7:9b:ed:15:b5:9f:e8:e2:60:67:ae:83:02:bc:
         ee:af:73:d7:e9:2a:59:1e:3a:c2:48:64:bb:09:f5:14:7a:fc:
         57:70:e9:a0:ba:94:08:12:8b:f6:26:22:b5:57:45:d2:67:ce:
         63:09:c7:13:f5:af:30:66:e9:2d:dc:4c:fa:0c:f2:9a:7f:b8:
         f2:6c:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:23 2026 by rpki-client