This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
File:                     EAy9RkqQWltWj3rc7x-dILx1IzE.mft (raw, json)
Hash identifier:          b2Z3FhGdSFNoW5Ykr52nMs+KXL9FJSJM5+NJEUMVkBk=
Subject key identifier:   BC:C2:32:10:26:91:E8:0E:27:F8:14:C6:5A:D4:09:CE:27:B2:CA:67
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Certificate issuer:       /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial:       044A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
Manifest number:          0443
Signing time:             Sun 25 Jan 2026 03:20:21 +0000
Manifest this update:     Sun 25 Jan 2026 03:20:20 +0000
Manifest next update:     Tue 27 Jan 2026 03:20:20 +0000
Files and hashes:         1: EAy9RkqQWltWj3rc7x-dILx1IzE.crl (hash: g06WKnm0TBpDSrId0UfynFC9vaXlvMA9/cZ3nJniqaE=)
                          2: C719F080031811F0BCF8A45B762E951A.roa (hash: 79NJnHtzqcMQMYnoSD6NuoCr6AjHcaiwFE26hsB9lSo=)
                          3: E7C40FA68A6711F08E76079BDAE4EC9C.roa (hash: VT6zH98Frb6UtC81E1Tg7fyG8o/UWEDY/xqxWLn85AE=)
                          4: BE98A03E46CD11F08B83E8B4DAE4EC9C.roa (hash: GvbT42KDVOWTxS2JfgWWuD/aGjv1HwP9FkaDOKQ86zw=)
                          5: F6AE29B646C911F0A3352A9CDAE4EC9C.roa (hash: xJc4bxraTn4VMWGp4tujLjr4NYvnFKt/PaHncXl4bO8=)
                          6: 5110E694031F11F0BEF24185762E951A.roa (hash: WjTHo5/2GMgpz/biHo/PTtID/ZgNKHDsBiz50asiS8I=)
                          7: 71F0925246CB11F0906DF5A4DAE4EC9C.roa (hash: 4GpwoUFSemgnNHOneEphyunOOkVz96lSUfPWz4U/DVI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098 (0x44a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
        Validity
            Not Before: Jan 25 03:20:20 2026 GMT
            Not After : Jan 27 03:20:20 2026 GMT
        Subject: CN=69758bf5-16c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:63:e2:77:2d:f6:75:69:74:dc:d7:a9:23:
                    bb:47:58:ef:10:5a:12:c9:a1:c2:70:5a:37:0d:4a:
                    08:38:b4:0f:b7:20:55:5a:ec:6d:23:cf:29:47:fc:
                    42:60:0e:5e:cf:52:b4:53:c2:64:1b:bd:be:9c:a1:
                    b2:1c:07:cf:bf:b4:13:64:b5:09:f9:3f:78:a6:ef:
                    73:17:1b:85:04:a1:17:27:c5:16:ea:11:ef:9f:60:
                    d4:b6:8e:87:3c:44:b0:f1:3b:e1:ef:c0:08:37:1b:
                    11:67:62:92:9f:0d:3c:1f:4f:8f:21:a7:73:b6:44:
                    2d:82:05:db:87:06:d6:0d:c8:42:5e:3c:67:ec:09:
                    f2:22:80:cf:68:11:97:74:eb:4e:f2:25:bc:9f:2e:
                    aa:81:ca:8d:78:d6:d6:83:97:44:26:e1:20:56:92:
                    62:3f:c5:3c:ea:ab:d9:8b:9d:9c:09:42:04:36:d0:
                    ca:39:b4:86:c0:e5:aa:51:cf:53:41:7f:ea:05:6b:
                    f6:b0:2f:1e:f0:51:2a:e6:1b:6c:ab:fc:be:20:18:
                    54:1c:17:89:84:9f:24:5f:34:0f:d7:f5:c1:36:6b:
                    53:6c:8f:0d:31:64:1c:48:5d:05:3d:e7:80:46:b3:
                    d3:1e:af:27:ed:43:33:fa:ba:24:c5:38:67:b1:8c:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C2:32:10:26:91:E8:0E:27:F8:14:C6:5A:D4:09:CE:27:B2:CA:67
            X509v3 Authority Key Identifier:
                keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:11:88:7f:cf:d9:92:89:9b:3b:8b:04:c9:b3:41:fd:81:46:
         a4:44:4e:92:a0:24:8f:f1:1c:6e:5e:8f:13:73:b7:78:ce:f6:
         c0:2f:46:11:3b:88:99:12:4b:63:f7:e8:13:d4:1c:62:03:b4:
         b9:cc:6e:ae:96:86:59:a0:84:d9:00:89:e5:c8:9e:ee:10:b1:
         34:2d:1a:a4:03:0b:fa:df:5e:f3:b1:6e:12:52:cf:c7:fb:34:
         1c:a5:c2:fe:32:7c:85:56:12:bc:12:41:02:db:4c:2f:02:0a:
         80:8a:00:da:0a:62:62:2d:4c:88:17:f8:0a:70:f7:d6:42:05:
         37:10:1a:8b:99:cd:f6:fc:a7:6e:6e:87:e0:2e:43:0a:00:1a:
         ca:4c:ee:ab:d8:0e:30:3c:51:42:d1:92:2e:87:cb:4b:0f:64:
         f5:9b:ef:c0:35:7f:96:0b:55:79:ee:4c:cd:33:2d:fa:e1:48:
         6a:11:9a:49:df:03:2a:44:27:e8:53:b6:fd:f5:ee:37:0e:a9:
         10:02:e2:0f:cc:45:8e:6f:e6:f1:ca:de:15:3c:88:45:2a:f9:
         ca:23:c2:ab:7e:e0:13:a6:89:34:8c:06:6d:f3:64:0f:e4:05:
         c6:be:44:2f:15:97:69:45:11:5f:54:ee:a8:20:5e:ca:12:c6:
         1a:04:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:52:18 2026 by rpki-client