This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
File:                     FvKYpXAKlUr3VINg7kAxK0QV8ok.mft (raw, json)
Hash identifier:          7pdCpbt+52AmdhU374WpYq7Ttg50IasrGEwYMwOH8W4=
Subject key identifier:   61:94:4D:AB:06:FB:56:AD:C2:00:EA:4B:43:D6:5C:49:9A:48:79:55
Authority key identifier: 16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89
Certificate issuer:       /CN=F3627EC7AF/serialNumber=16F298A5700A954AF7548360EE40312B4415F289
Certificate serial:       06CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
Manifest number:          06C9
Signing time:             Sun 25 Jan 2026 02:14:46 +0000
Manifest this update:     Sun 25 Jan 2026 02:14:45 +0000
Manifest next update:     Tue 27 Jan 2026 02:14:45 +0000
Files and hashes:         1: FvKYpXAKlUr3VINg7kAxK0QV8ok.crl (hash: tvUYfy25xZilAWG+rql8MxhqKLdf/2vXyA82swtVh4Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627EC7AF, serialNumber=16F298A5700A954AF7548360EE40312B4415F289
        Validity
            Not Before: Jan 25 02:14:45 2026 GMT
            Not After : Jan 27 02:14:45 2026 GMT
        Subject: CN=69757c96-0233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:36:e0:b1:1a:b6:34:37:4c:6c:db:f5:44:
                    0d:36:96:b3:29:6b:46:1b:0d:12:aa:f5:f9:8b:cc:
                    75:a3:82:b2:96:24:80:9d:44:fe:40:e7:fd:cd:bd:
                    53:99:27:81:8a:45:a4:3b:8f:31:2e:28:3f:d1:8b:
                    8c:ce:a4:58:26:c3:64:46:ba:de:1e:6c:09:1c:8b:
                    db:33:42:3d:67:80:32:8a:a6:ef:f8:5a:e3:82:ca:
                    cb:9f:0e:f4:a8:81:69:cc:7c:ff:cd:a4:c3:3f:69:
                    bb:be:38:00:65:01:3a:b8:67:8c:5f:c8:6d:23:7d:
                    d8:b8:35:d0:28:93:8b:90:93:94:d9:ce:41:14:77:
                    e9:42:c8:bf:b7:84:ef:b8:d7:19:36:c7:7a:0e:8f:
                    ff:02:b1:21:9c:d0:c2:de:b7:bc:d8:c0:27:00:ab:
                    3d:61:eb:78:ab:04:32:34:4f:7f:f7:42:9d:57:0e:
                    9c:1f:ea:2e:d6:5e:df:34:2d:8d:52:e3:16:8d:22:
                    a8:1a:61:9d:a9:20:d8:50:40:11:0f:ce:f1:9b:81:
                    cd:0c:a7:a5:d2:55:3d:3b:d5:59:5a:ef:9b:41:b7:
                    22:89:6a:86:87:b7:b9:df:25:85:40:6e:8a:64:a6:
                    db:4a:85:61:58:93:c2:70:78:ec:3d:d0:c6:03:1b:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:4D:AB:06:FB:56:AD:C2:00:EA:4B:43:D6:5C:49:9A:48:79:55
            X509v3 Authority Key Identifier:
                keyid:16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:0c:35:10:e9:c0:0e:b3:db:2a:c8:05:af:1e:c8:1d:78:1b:
         9b:68:bf:a4:03:c6:92:36:8e:cf:f3:54:af:66:df:f2:b6:6a:
         d9:d7:ac:63:9c:3a:c5:2f:f6:bd:35:3a:f1:d5:aa:b6:b3:7e:
         18:90:eb:a9:7a:14:89:ea:df:4c:1c:4e:0e:bc:6a:bf:bd:42:
         21:e6:8b:ec:b8:4c:5f:10:ff:d0:e0:f4:03:a6:1e:7a:c9:4c:
         c5:e7:79:b1:e9:bf:92:35:85:9b:11:aa:18:e0:bd:ed:85:f0:
         14:40:bf:90:a5:15:6e:8f:0b:28:1c:b2:77:ba:c6:68:01:72:
         69:85:73:e3:d3:7a:35:db:0e:b6:d9:54:a1:31:ef:ad:3f:47:
         06:88:8d:18:c3:19:5d:a6:6e:4b:0f:3b:71:b9:fc:cc:b8:cc:
         dc:17:e9:fc:cd:84:3d:b2:59:c7:b4:69:38:79:ba:8f:4b:2e:
         92:e8:24:c7:3f:20:32:95:f9:6d:51:46:cf:1b:f6:b0:72:c3:
         1d:81:50:69:78:9b:dc:d9:a7:ad:ac:08:98:00:74:d6:0d:55:
         26:26:a5:a0:69:ba:e0:cd:e6:0f:44:52:80:a6:63:9e:dc:49:
         20:a9:bb:a3:dd:b2:94:5a:43:69:6a:3c:f1:b5:ce:39:8a:5e:
         b9:e1:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:40:04 2026 by rpki-client