This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
File:                     YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft (raw, json)
Hash identifier:          M7GnqjootUJI1lHYAY6JDej71RLgE0LG7PNzEkyhDVY=
Subject key identifier:   3B:BB:60:33:A2:F8:95:D2:AB:18:06:A0:F7:1B:AA:2A:4B:17:BC:BB
Authority key identifier: 60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC
Certificate issuer:       /CN=F36426B7AF/serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
Certificate serial:       0106
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
Manifest number:          0106
Signing time:             Sun 25 Jan 2026 04:56:26 +0000
Manifest this update:     Sun 25 Jan 2026 04:56:25 +0000
Manifest next update:     Tue 27 Jan 2026 04:56:25 +0000
Files and hashes:         1: YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl (hash: iu08AtSFSfwv9Y9zuKzm7BrO490RKQtOXAY6fMdfoIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36426B7AF, serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
        Validity
            Not Before: Jan 25 04:56:25 2026 GMT
            Not After : Jan 27 04:56:25 2026 GMT
        Subject: CN=6975a27a-5588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:5c:65:98:f4:e8:26:c0:47:7b:01:6d:8b:
                    f6:f4:1a:38:0e:d7:d5:27:5e:a8:0f:54:d8:8d:93:
                    2f:66:1a:fc:2e:d5:bd:20:ce:c0:4e:a4:3c:3e:83:
                    9e:4a:03:d4:3b:c6:cd:78:29:48:23:3c:fb:f8:f0:
                    a6:d2:9c:52:be:5f:d4:14:db:98:85:bd:e9:b3:09:
                    d8:48:5e:a4:8b:67:11:2d:3b:47:6b:66:19:b8:76:
                    97:20:55:74:16:32:d1:d6:bc:d8:bc:ad:2a:fb:68:
                    c9:7f:a6:2c:63:a8:6f:12:c0:34:77:a6:2e:f8:ea:
                    da:50:0d:93:52:66:2d:d9:c9:bf:5d:be:65:73:30:
                    96:fc:b7:8b:2b:26:a0:c2:87:c8:ec:fe:98:a0:0a:
                    53:fd:32:46:23:7d:67:a4:6e:83:0a:f5:f5:f7:ff:
                    de:9b:32:fa:e6:ae:c1:cd:5e:a4:91:f7:ee:3f:b2:
                    5e:7e:61:20:35:7b:3d:26:7e:e3:ec:57:e4:ea:a8:
                    0a:82:f8:23:a5:46:29:95:a3:f8:9a:e6:78:8c:25:
                    b4:49:c6:bf:63:21:f9:6a:0e:7f:09:54:ed:62:28:
                    55:eb:a2:1f:4c:11:bd:21:e5:90:47:8b:c0:fc:64:
                    1b:1d:a3:63:7a:8a:e1:d7:84:cc:89:36:bc:55:ae:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:60:33:A2:F8:95:D2:AB:18:06:A0:F7:1B:AA:2A:4B:17:BC:BB
            X509v3 Authority Key Identifier:
                keyid:60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:2a:08:80:b5:f8:12:70:eb:4d:59:30:08:fd:45:c5:88:
         e1:c8:b1:2f:a2:bc:27:39:95:fd:e9:72:e2:76:ec:8e:66:a6:
         bb:47:42:9a:c7:2e:40:fb:20:b4:72:ee:89:a2:e3:f2:f1:fc:
         2c:54:1d:05:81:63:16:a1:ca:62:61:18:a3:ca:2f:c2:80:85:
         cf:f7:e8:71:ef:bb:2e:56:de:1b:3b:60:f9:87:2d:ec:ed:80:
         29:70:d2:ee:46:db:6e:94:d3:41:78:9c:5c:4b:2c:b5:5b:01:
         1c:03:87:50:79:48:c1:7a:00:63:97:01:1b:4f:2f:d6:84:50:
         5e:0c:4e:16:a5:8e:a3:32:e7:09:89:73:01:ec:1c:97:3d:ed:
         74:9a:49:a6:6b:f9:25:37:a8:38:79:94:3c:84:e0:d1:df:34:
         98:9a:b5:52:d6:fe:c9:ec:e0:2d:e4:47:71:b3:71:59:11:cc:
         9d:f0:a3:8f:4f:a2:19:73:01:3b:d2:6c:30:f3:d7:ad:85:fb:
         58:6e:0c:8f:c3:dc:af:96:1f:5a:5a:29:f9:8a:d3:ea:aa:54:
         05:08:9c:cd:68:0d:2a:3d:3d:31:eb:89:dc:e6:c6:3a:c4:94:
         41:31:58:19:c0:76:47:8a:01:b0:ea:74:d4:db:53:d2:86:d0:
         97:ee:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:08 2026 by rpki-client