This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
File:                     2cDlwkl6yIv_-87Z9V1goiiYkn8.mft (raw, json)
Hash identifier:          qoPqwi7BxPy6VDCBD0jjzfrBZZApOHKF+0jriAtzlew=
Subject key identifier:   0D:E9:1B:E9:67:BB:2C:84:FC:1C:68:43:91:9E:18:98:9E:40:37:28
Authority key identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
Certificate issuer:       /CN=F3644EA8AF/serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
Manifest number:          C9
Signing time:             Sun 25 Jan 2026 05:04:35 +0000
Manifest this update:     Sun 25 Jan 2026 05:04:34 +0000
Manifest next update:     Tue 27 Jan 2026 05:04:34 +0000
Files and hashes:         1: 2cDlwkl6yIv_-87Z9V1goiiYkn8.crl (hash: +m03WX6LOH9H91Ci7SCUKKH4a0wy3nv8C018TUPY3s8=)
                          2: 696CD0C060B411F0907E96B2DAE4EC9C.roa (hash: 5bAy/PZpHx90ghvP8O3g7YznUOeX+iyLW+PI1ddCQfo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
        Validity
            Not Before: Jan 25 05:04:34 2026 GMT
            Not After : Jan 27 05:04:34 2026 GMT
        Subject: CN=6975a463-6997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:75:81:99:f3:1c:29:ca:6c:0a:85:16:74:
                    c6:52:3e:08:13:6e:b7:71:ab:08:24:a4:18:c9:55:
                    e0:b2:a3:40:ad:6d:9c:73:68:af:34:07:20:4f:41:
                    33:db:34:df:d5:c1:0f:d8:ab:7c:b7:f8:d4:0c:c5:
                    8c:92:bb:aa:83:58:e9:6a:0d:c9:d4:b5:4c:38:db:
                    12:f0:a0:9e:c8:ca:ba:ac:93:8c:bb:49:8a:ea:7b:
                    a9:3c:d7:08:75:ea:cf:9a:44:14:61:b1:28:d8:30:
                    b4:a9:97:a4:54:db:35:fb:94:1f:3c:b9:31:a4:81:
                    c1:cf:8a:0d:46:b8:aa:bd:c7:a1:38:c7:2c:fd:45:
                    22:27:39:28:af:c7:46:32:b8:77:8a:14:ee:f9:3f:
                    01:54:83:81:fa:9e:16:8b:ab:fc:fe:03:90:c6:b6:
                    8f:e8:4d:ed:0c:bf:69:33:74:2d:0e:9d:be:d9:4e:
                    5f:3c:03:52:5b:20:af:f1:94:20:05:2b:ac:ab:1e:
                    da:55:f4:6d:cf:2a:98:20:c9:1a:b4:07:ca:ba:e8:
                    34:75:d5:d4:3c:b0:2f:65:3e:09:42:02:b0:8e:cb:
                    9c:b9:ba:d3:03:8f:c7:ef:20:86:de:68:70:69:4e:
                    46:f5:47:9b:b6:49:54:ed:39:9e:4d:0c:03:1e:08:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:1B:E9:67:BB:2C:84:FC:1C:68:43:91:9E:18:98:9E:40:37:28
            X509v3 Authority Key Identifier:
                keyid:D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:2e:b0:17:26:88:44:a9:ab:c0:81:09:c7:01:35:74:7d:
         7f:5a:af:28:be:41:0b:33:26:83:4d:5b:72:92:a8:0e:d8:72:
         3d:e1:63:a6:b8:7a:cc:44:cc:51:cf:bc:88:3e:25:24:ec:93:
         c6:f5:81:65:e7:d6:93:b1:53:58:c5:35:d0:53:53:cc:e2:f9:
         4e:da:27:22:80:22:60:97:58:8b:17:6f:a1:71:13:ab:70:26:
         39:c3:c4:17:71:c4:dd:5b:ae:c5:72:25:02:1c:e6:98:d6:72:
         cf:64:46:a8:17:10:e4:48:27:2e:07:0e:aa:cd:72:d6:5c:2f:
         7e:cf:fa:af:13:13:b0:7d:1c:a9:5d:86:01:7a:3e:63:82:fb:
         34:78:72:ee:04:0a:dc:3c:0b:88:1b:87:3e:1b:07:6c:df:bd:
         4d:c1:1b:3d:91:db:da:51:e8:1e:b4:35:10:0f:85:4d:21:f7:
         ce:b1:7a:d4:14:5f:a1:65:72:42:82:81:f9:18:fc:ec:32:42:
         0b:e5:4a:76:16:1d:0d:8e:b4:0d:ce:10:f1:27:b3:20:b0:2d:
         d1:c0:48:e4:a7:f4:74:1a:f2:ce:39:d9:b2:76:b7:f4:2b:fb:
         13:ed:90:fa:33:d3:c4:73:ac:fc:90:90:4e:32:f7:84:53:b5:
         6c:0f:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:32 2026 by rpki-client