This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.mft
File:                     rdxrvdHv8GRS1TGmpJ97AwyXxhQ.mft (raw, json)
Hash identifier:          DcGjk3FE7S8VcZX4Q8CrVRvv5oDDObVG4O+4odAalRQ=
Subject key identifier:   70:BE:EC:4F:33:BD:F1:99:37:BF:78:4D:81:A5:08:BA:3E:34:7B:0C
Authority key identifier: AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14
Certificate issuer:       /CN=F365DBE0AF/serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
Certificate serial:       0669
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.mft
Manifest number:          0668
Signing time:             Sun 25 Jan 2026 02:23:14 +0000
Manifest this update:     Sun 25 Jan 2026 02:23:13 +0000
Manifest next update:     Tue 27 Jan 2026 02:23:13 +0000
Files and hashes:         1: rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl (hash: D+JtVhihP0qwdywfDe21RqmzCuUHGzyF07fq4YOIBZw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365DBE0AF, serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
        Validity
            Not Before: Jan 25 02:23:13 2026 GMT
            Not After : Jan 27 02:23:13 2026 GMT
        Subject: CN=69757e92-a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:ec:dd:24:a5:da:6a:04:5e:14:d4:8b:9d:
                    73:2d:96:33:91:ee:e6:11:ef:10:88:51:dc:01:02:
                    1d:2d:6f:6c:dc:6d:ba:ea:ad:80:cd:e2:b0:62:9c:
                    bf:50:da:ad:05:a1:69:1a:34:f5:3a:54:88:e8:6e:
                    df:46:83:95:ed:10:c8:8f:69:3c:10:56:fb:79:96:
                    e5:45:ab:05:b0:23:b4:6c:a5:ad:9d:8d:1d:fe:79:
                    cd:88:b0:ca:d2:f2:91:6d:c4:04:62:92:2c:2f:6d:
                    49:bf:29:68:21:2f:dd:b9:f9:3a:19:a2:3c:54:32:
                    e8:87:f3:30:c8:28:6b:72:86:cf:3e:d1:29:4c:41:
                    d0:69:73:4c:a9:c2:55:d3:40:51:a7:51:4a:6c:e1:
                    85:c8:00:d3:b2:71:c1:53:e0:7b:65:3c:a6:2f:cb:
                    7e:65:18:28:23:c6:af:dd:d0:42:ef:d5:f4:41:f7:
                    85:b2:db:c3:e5:28:86:f2:8e:24:a4:1a:57:35:36:
                    c3:cb:ac:b0:f5:97:b5:ae:cb:d2:bb:1e:a3:14:f8:
                    58:1d:7f:9a:49:0f:b5:13:e0:8c:b1:69:f3:80:81:
                    92:e1:f8:af:88:c8:d8:57:b8:7f:87:6a:9c:bc:8e:
                    0e:20:4b:be:54:28:60:ef:c8:6c:ee:87:0f:1d:62:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BE:EC:4F:33:BD:F1:99:37:BF:78:4D:81:A5:08:BA:3E:34:7B:0C
            X509v3 Authority Key Identifier:
                keyid:AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:ef:5a:b4:e9:bb:25:6e:7b:10:7e:a0:16:9b:47:ef:0d:
         71:a2:ac:44:bf:57:66:3c:ac:0a:ab:f6:f4:5f:ec:2f:1c:e9:
         07:3c:4f:b2:39:93:2b:45:8f:eb:d8:9b:c6:6e:3e:6b:34:46:
         7b:d9:9d:cf:6d:0c:48:b8:94:f3:c8:ec:c3:c6:c1:9a:37:96:
         9c:c2:40:95:7f:fa:47:17:74:ab:98:dd:91:39:0a:fd:74:64:
         83:f9:15:fb:e7:70:24:fb:6c:47:9b:af:e4:de:e8:be:36:51:
         95:ac:bc:14:c5:04:f3:36:93:d5:45:13:86:05:24:0a:6d:de:
         d9:fc:a8:cf:de:2d:1b:eb:f6:d3:78:e7:72:63:9e:0a:73:ee:
         67:87:94:16:2e:77:19:7b:43:07:9f:24:f4:36:f0:dd:50:2f:
         71:7a:81:bc:ad:ab:4f:a4:a6:ce:c6:3e:62:6a:72:5c:77:18:
         44:44:0a:d9:1e:5e:bb:57:d6:85:11:33:af:1b:1a:87:51:31:
         d7:4a:48:06:56:2c:62:98:e8:29:86:55:3f:42:c2:a5:c6:24:
         9b:bf:44:df:78:00:26:e5:a0:6e:d8:12:50:6b:09:64:d3:3a:
         2d:c4:ca:82:85:87:36:d0:7a:4f:1c:d2:6d:3a:6c:ce:2d:55:
         5a:5d:a6:54
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NURCRTBBRjExMC8GA1UEBRMoQUREQzZCQkREMUVGRjA2NDUyRDUzMUE2QTQ5RjdC
MDMwQzk3QzYxNDAeFw0yNjAxMjUwMjIzMTNaFw0yNjAxMjcwMjIzMTNaMBgxFjAU
BgNVBAMTDTY5NzU3ZTkyLWE3Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdUezdJKXaagReFNSLnXMtljOR7uYR7xCIUdwBAh0tb2zcbbrqrYDN4rBi
nL9Q2q0FoWkaNPU6VIjobt9Gg5XtEMiPaTwQVvt5luVFqwWwI7Rspa2djR3+ec2I
sMrS8pFtxARikiwvbUm/KWghL925+ToZojxUMuiH8zDIKGtyhs8+0SlMQdBpc0yp
wlXTQFGnUUps4YXIANOyccFT4HtlPKYvy35lGCgjxq/d0ELv1fRB94Wy28PlKIby
jiSkGlc1NsPLrLD1l7Wuy9K7HqMU+Fgdf5pJD7UT4IyxafOAgZLh+K+IyNhXuH+H
apy8jg4gS75UKGDvyGzuhw8dYg5dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcL7s
TzO98Zk3v3hNgaUIuj40ewwwHwYDVR0jBBgwFoAUrdxrvdHv8GRS1TGmpJ97AwyX
xhQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVEQkUwL0E1RDRFRDM2MTQ5MTExRUNBMjk0NTU3OEQ4QTAxNENFL3JkeHJ2
ZEh2OEdSUzFUR21wSjk3QXd5WHhoUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JkeHJ2ZEh2OEdSUzFUR21wSjk3QXd5WHhoUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NURCRTAvQTVENEVEMzYxNDkxMTFFQ0EyOTQ1NTc4RDhB
MDE0Q0UvcmR4cnZkSHY4R1JTMVRHbXBKOTdBd3lYeGhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe6e9atOm7JW57EH6gFptH7w1xoqxE
v1dmPKwKq/b0X+wvHOkHPE+yOZMrRY/r2JvGbj5rNEZ72Z3PbQxIuJTzyOzDxsGa
N5acwkCVf/pHF3SrmN2ROQr9dGSD+RX753Ak+2xHm6/k3ui+NlGVrLwUxQTzNpPV
RROGBSQKbd7Z/KjP3i0b6/bTeOdyY54Kc+5nh5QWLncZe0MHnyT0NvDdUC9xeoG8
ratPpKbOxj5ianJcdxhERArZHl67V9aFETOvGxqHUTHXSkgGViximOgphlU/QsKl
xiSbv0TfeAAm5aBu2BJQawlk0zotxMqChYc20HpPHNJtOmzOLVVaXaZU
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:11:13 2026 by rpki-client