This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File:                     LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier:          zAZNjvKtDlDSfT9cGDkN5iwXFIm0Haz4bg+gNJ+IGso=
Subject key identifier:   F5:64:2D:E2:B8:B2:00:3A:AB:3F:0A:57:91:A1:C9:3F:0F:37:57:C5
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       082A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number:          0820
Signing time:             Sun 25 Jan 2026 01:53:30 +0000
Manifest this update:     Sun 25 Jan 2026 01:53:29 +0000
Manifest next update:     Tue 27 Jan 2026 01:53:29 +0000
Files and hashes:         1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: W4YXORg5w4mhmHgmMVLFFJ4N0bUIw4P2CEYZ/MHNFUg=)
                          2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
                          3: C1EA4780FB7F11EB9D2CC317D8A014CE.roa (hash: EuixU3epnpbUpwoJhFUHV5OKLLMlJHPLSrbxyzVttAM=)
                          4: 43E1BDF2F95C11EBACA1E93DD8A014CE.roa (hash: jtNO13rj1M0ghD4GjsATf2dtAxGGZDj246YjTe+oOGk=)
                          5: 12ADEF1CF95C11EB89B1B33DD8A014CE.roa (hash: ZNOFebzvFvT2Nb1vHcS6wuQ11RKpspXLfVTrmKqLFjM=)
                          6: 6315ACECF95C11EB8E0A1B3ED8A014CE.roa (hash: IvSwZp9IV18zo8x0c31GN2xd9ugQho3aot5Bm2hShIs=)
                          7: 39106F00FBB611ED8E7FD90D4AD9E6FC.roa (hash: +HdzaGd/6604DHYW5LPhty4qlNfPBJ18Y9dSfuN3sGc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Jan 25 01:53:29 2026 GMT
            Not After : Jan 27 01:53:29 2026 GMT
        Subject: CN=69757799-0a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:71:41:dd:0b:fe:9f:14:95:1e:2c:6c:03:
                    94:d7:15:b5:c0:bd:8e:8f:32:e0:ac:4c:72:35:23:
                    cb:68:fa:82:a3:96:27:77:72:e1:86:d8:8c:47:54:
                    34:38:1a:1b:4b:27:a0:18:2d:3f:ff:9f:8c:5c:41:
                    8e:e4:a6:a0:fa:03:94:80:fc:20:4f:68:6f:e6:18:
                    5c:b3:7c:3f:89:63:3a:80:ab:c6:47:5c:9c:40:4e:
                    b9:79:44:b2:78:99:b8:c2:b6:b8:d8:27:57:28:77:
                    29:b4:84:b4:8c:bf:08:8c:3a:e2:ca:0a:25:7b:c9:
                    11:dd:c9:c6:64:53:a9:3b:d0:2d:e7:7c:54:d5:b4:
                    17:84:99:f5:08:a0:7a:3e:54:0a:92:ab:a4:c5:7b:
                    01:51:24:36:d0:4a:c0:ca:0c:a2:0f:9d:c5:51:95:
                    08:08:9d:33:5c:4d:99:f1:df:3d:fc:9d:0f:44:d7:
                    ee:02:32:cb:dd:1b:df:6b:44:ac:08:54:aa:91:56:
                    de:33:04:46:34:76:ec:7c:66:a9:42:43:6d:a3:6c:
                    98:01:a1:f5:f2:1f:49:11:d1:7f:6c:1b:dc:12:f7:
                    d4:73:13:c1:80:a2:82:68:85:6f:9e:80:fa:0d:d4:
                    86:f3:c3:43:d0:d9:84:43:ab:6a:f4:91:b7:67:58:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:64:2D:E2:B8:B2:00:3A:AB:3F:0A:57:91:A1:C9:3F:0F:37:57:C5
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e6:2b:b3:99:aa:73:0d:ef:90:0f:c3:5d:a2:47:ca:56:d3:
         9d:00:5c:86:ba:f7:4f:45:68:05:06:91:8d:d3:db:a3:a4:0c:
         3c:fa:a4:34:02:e8:78:af:f5:c1:72:8f:3f:1e:d1:38:af:20:
         4b:08:b9:fd:0b:81:6d:e3:7a:12:48:f2:13:a1:8c:2c:4e:b3:
         78:f6:9b:29:02:04:7f:c8:6c:98:dd:91:d1:72:e0:7d:e0:e2:
         21:9f:62:28:fa:89:7b:62:63:e4:e7:76:b9:45:6f:c7:60:b9:
         bb:43:4a:99:b4:34:1d:f0:0b:7f:7f:02:62:e7:80:02:91:d8:
         b0:c8:6a:0f:95:1d:e0:3a:86:f6:29:0b:c9:31:09:d5:70:83:
         56:44:0d:32:0c:0a:3f:29:ac:e5:36:a4:ac:cc:b9:64:5c:d5:
         ce:c9:88:b8:73:ec:39:1c:77:c2:bd:83:59:86:b1:8f:27:75:
         67:b5:24:ad:a8:86:98:f5:9c:cd:62:b6:3d:d5:84:a0:37:03:
         39:d9:7b:4b:81:56:4c:7d:b6:fe:ba:fe:34:c0:23:ae:c6:87:
         04:0a:83:08:d0:0c:fc:1c:cc:35:53:f8:ca:c8:bd:bf:69:71:
         a6:15:78:44:7b:ac:f3:25:91:fc:03:8b:ef:15:19:b3:de:7d:
         5c:8e:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:37 2026 by rpki-client