This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
File:                     tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft (raw, json)
Hash identifier:          UabIP7RoznrwxOnyUT0i/DL84sybMLMsaKcCrHp74Ko=
Subject key identifier:   9B:7D:9B:B6:17:AA:8B:3F:E2:42:D4:59:7F:3D:71:BE:44:A9:24:FC
Authority key identifier: B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4
Certificate issuer:       /CN=F364563FAF/serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
Certificate serial:       C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
Manifest number:          C5
Signing time:             Sun 25 Jan 2026 05:06:26 +0000
Manifest this update:     Sun 25 Jan 2026 05:06:26 +0000
Manifest next update:     Tue 27 Jan 2026 05:06:26 +0000
Files and hashes:         1: tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl (hash: tn2X+UBIca0Tx6gPxd90HCrgUJjtIwCjuLL+5tBGrPE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364563FAF, serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
        Validity
            Not Before: Jan 25 05:06:26 2026 GMT
            Not After : Jan 27 05:06:26 2026 GMT
        Subject: CN=6975a4d2-ff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:0a:6f:ff:3f:1b:b3:20:c8:2c:82:c1:80:
                    06:57:a0:12:63:8c:0f:e2:33:ee:bb:6a:2b:98:a2:
                    02:64:67:69:4d:01:d2:97:83:8e:0b:82:b4:e4:3b:
                    8f:73:bc:5d:02:a9:8d:ea:6e:89:65:97:26:fe:8c:
                    4c:93:52:c7:5f:49:7a:96:59:3a:c0:f0:aa:ea:81:
                    08:fa:fc:ed:a7:3f:2e:1e:f1:18:3f:06:e0:b7:44:
                    08:17:17:a7:8d:57:c1:07:92:de:44:41:6b:96:2e:
                    68:59:37:89:58:5a:e0:1b:a7:e0:57:3f:cd:9e:91:
                    cb:ef:72:7c:41:3d:30:f6:ba:1b:ed:61:a7:d5:8a:
                    81:ef:ec:d5:3b:d1:cc:28:35:39:b1:c9:0e:dc:54:
                    0f:51:d3:98:f2:55:ce:8e:5e:9b:91:3c:4a:a9:7e:
                    d2:67:b1:0b:56:33:9b:00:fe:c7:15:0f:17:c7:07:
                    bd:f4:36:17:e5:10:e2:00:c0:82:13:0a:84:30:67:
                    2d:50:8f:87:31:7a:66:34:0a:c4:d4:0e:9a:cf:74:
                    f3:20:8d:85:76:39:4c:18:87:ac:54:ef:d3:6c:1f:
                    fb:f2:67:c4:7a:80:88:0a:c0:31:75:e2:fe:2c:a5:
                    7f:b4:cf:b5:fe:dd:bc:b0:03:97:48:3a:05:33:17:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:9B:B6:17:AA:8B:3F:E2:42:D4:59:7F:3D:71:BE:44:A9:24:FC
            X509v3 Authority Key Identifier:
                keyid:B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:91:7e:93:c3:27:2a:bb:d1:0f:ee:91:a6:47:a7:cc:e7:de:
         14:c0:af:6b:12:3b:8c:96:62:ca:93:2d:d5:2f:1b:4a:da:4d:
         94:6b:e4:0e:03:f9:90:7d:0c:3c:4d:58:33:b8:ef:cf:e5:7e:
         86:38:2b:e8:0d:f4:b1:9c:7c:1a:2f:27:62:4d:35:9c:fb:39:
         67:cb:33:12:0e:8b:b9:ca:87:73:d1:2c:d0:db:30:30:ff:34:
         5f:4f:7e:d9:ae:2b:59:61:ca:71:3a:79:94:76:c6:b3:0c:96:
         d7:a2:16:3f:7a:24:1a:1d:c5:bb:67:65:73:f4:de:de:b2:0c:
         c2:8e:01:0d:4e:c1:22:2c:f1:e7:80:0f:99:50:65:5e:f0:1f:
         d4:db:c9:64:d8:bb:85:6a:db:41:b8:f7:3a:9a:5f:39:34:51:
         e2:68:0b:e9:ea:09:76:11:4c:33:88:9d:39:97:64:53:3f:91:
         cd:5c:a1:67:53:12:cc:77:b3:65:77:c1:d7:95:67:cf:f3:65:
         0a:c6:01:6e:f1:cd:68:ea:5b:0a:8d:7b:bf:a4:ba:19:46:63:
         28:ee:84:72:4e:0e:0e:47:6b:8a:61:37:f3:0c:d6:1f:8d:74:
         f1:76:57:7d:56:d0:71:d7:b4:51:fb:c7:95:d4:2b:d9:d4:3b:
         df:36:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:40 2026 by rpki-client