This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          XKH+SN2kb4UXvoFOu1OGlYOvrSAthvTlscjEWdkrwq0=
Subject key identifier:   38:78:29:27:02:A3:BA:B9:43:DF:7A:FA:EE:B6:70:B0:C7:89:50:16
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       071C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          0718
Signing time:             Sun 25 Jan 2026 02:05:08 +0000
Manifest this update:     Sun 25 Jan 2026 02:05:07 +0000
Manifest next update:     Tue 27 Jan 2026 02:05:07 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: SjKG9vxdxV+lcTfuz+DjUM/aCYReUahdFkBnLLifbqk=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
                          4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Jan 25 02:05:07 2026 GMT
            Not After : Jan 27 02:05:07 2026 GMT
        Subject: CN=69757a54-97d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:0a:00:c0:48:48:00:d3:6e:19:ab:35:3d:
                    17:0b:79:1d:0a:f8:b8:4f:4c:43:06:7c:92:c2:aa:
                    14:f2:8d:9a:4a:ec:73:4a:37:11:12:e9:d8:f7:2f:
                    5e:a2:72:48:23:44:14:5f:bc:61:bd:6e:ba:e8:a4:
                    b7:4f:a3:a5:12:5f:d5:fb:45:bc:2c:c4:b4:c9:9f:
                    26:32:1d:ab:02:ff:22:dd:48:4e:c2:23:6b:af:7c:
                    0d:63:5b:ab:1b:bc:9f:3d:27:af:66:66:f2:f5:66:
                    e8:4b:7b:16:78:f6:ce:00:1c:ea:23:61:c9:19:cd:
                    23:3a:55:d7:e8:18:d3:47:ec:c0:c4:37:75:e9:ac:
                    a5:90:bd:d0:72:95:3d:ab:60:98:75:cd:e5:fc:75:
                    ad:e8:09:ce:e3:49:b2:a2:36:eb:9f:af:56:44:f3:
                    f9:c7:96:2d:dc:1a:67:c1:01:dc:b0:44:3d:4e:d4:
                    82:0e:85:3b:cf:a4:7e:57:18:18:fb:a8:59:af:83:
                    41:db:52:16:9c:e7:0b:b6:e2:19:61:da:06:b6:03:
                    7a:26:7a:c4:38:d2:70:ff:02:fa:38:96:c9:04:26:
                    13:0b:65:19:6c:57:af:35:bf:c0:44:8f:2e:ad:01:
                    f2:e7:7a:40:52:f6:ac:40:f0:7e:d7:5d:23:c5:6a:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:78:29:27:02:A3:BA:B9:43:DF:7A:FA:EE:B6:70:B0:C7:89:50:16
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:4f:19:03:97:3f:62:90:cc:8a:f9:9a:c7:49:4d:3f:1f:
         a3:56:a4:be:d4:91:73:e2:32:d0:ec:c8:38:9a:89:1a:28:b0:
         48:af:cc:9c:e8:3d:4e:e1:6b:e4:24:98:88:4d:81:14:b4:2f:
         0c:c1:9f:e5:8d:c6:2c:ae:f4:27:f7:65:51:ea:aa:63:5f:e7:
         e5:2d:1b:86:da:16:6d:8e:ce:02:83:f2:11:9d:c3:b7:64:c4:
         36:69:8a:82:56:d2:a8:ea:46:a1:e9:75:62:11:96:24:99:0d:
         28:f0:1f:bd:64:e3:ee:ec:68:28:8e:88:9e:d0:b8:88:f9:a0:
         24:1d:4d:b2:0a:fa:51:70:a8:8c:0c:ca:64:80:46:ef:d7:fa:
         a8:e4:2f:57:4b:2e:71:a3:b8:51:95:03:88:e3:59:a2:80:c3:
         99:21:36:ce:1e:52:66:06:79:7b:12:76:e3:9e:58:e2:37:41:
         df:75:28:91:f6:a2:95:ca:0d:e8:df:f8:b0:ec:8d:7d:2b:6a:
         63:66:47:32:98:57:be:1e:95:99:15:3f:d2:73:59:6e:1b:ed:
         56:61:fe:67:73:a7:a1:fb:4f:bf:e7:cd:bb:56:88:8c:5c:0a:
         e6:8d:0b:61:3c:53:86:d9:d9:90:6d:98:46:75:1d:53:cb:fb:
         5c:31:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:21:29 2026 by rpki-client