This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
File:                     7PbzU5pP4IyibRf5jcsVmgR8v-g.mft (raw, json)
Hash identifier:          AgQVPqOn+3rgxRdVELPVJ0ycl5o2WbkYxrCILsgibJw=
Subject key identifier:   FA:71:A4:16:B7:DF:1A:92:44:9F:9A:56:89:FC:9A:6D:1E:E8:83:4F
Authority key identifier: EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8
Certificate issuer:       /CN=F3662F58AF/serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8
Certificate serial:       08C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
Manifest number:          08C1
Signing time:             Sun 25 Jan 2026 01:42:01 +0000
Manifest this update:     Sun 25 Jan 2026 01:42:00 +0000
Manifest next update:     Tue 27 Jan 2026 01:42:00 +0000
Files and hashes:         1: 7PbzU5pP4IyibRf5jcsVmgR8v-g.crl (hash: lVrfTXQmbzgc8H5E3rNCgQQKlDsd8bdx4B9tJ/CagGk=)
                          2: 61D9EFE8D21F11EE9A695056775412E6.roa (hash: sHwcRAoEIh3+NnhsNE7+YK15IM8uU90vV0uO3YY5oHk=)
                          3: C6128B02498711EA8512D154F8AEA228.roa (hash: YenFdE2aLh0x++T/JYlwu3uxxzj0ygFVKQ0oMgyFqM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243 (0x8c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662F58AF, serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8
        Validity
            Not Before: Jan 25 01:42:00 2026 GMT
            Not After : Jan 27 01:42:00 2026 GMT
        Subject: CN=697574e8-6d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:e2:b3:a6:41:b5:10:0f:57:31:80:71:7d:
                    18:05:01:59:b4:9e:bb:26:b1:23:f8:e9:a8:b2:ff:
                    19:44:8a:e8:37:3c:17:7b:ec:10:eb:f4:19:4a:79:
                    9b:04:7f:64:e0:c5:d2:a7:fa:de:cf:49:80:3b:c0:
                    65:2c:b5:38:b5:86:40:5f:a0:f1:6c:55:e0:89:cc:
                    bb:0c:99:ba:3d:07:a1:6a:ae:ab:23:8c:ad:6d:36:
                    06:21:b1:55:e6:07:10:8f:f9:39:68:3b:b7:00:7e:
                    48:ae:4a:00:99:2c:aa:b1:08:ca:6f:13:3d:85:74:
                    5e:1e:0e:fb:4f:10:4e:3f:2a:dc:93:1e:8b:72:f0:
                    fd:d0:03:64:ce:a7:da:32:e2:06:71:59:70:ee:9e:
                    bb:5a:4e:3a:0e:17:5d:6a:62:96:07:93:01:16:50:
                    78:d8:01:23:6e:23:d8:d9:d9:c9:2f:bf:94:2b:b2:
                    a8:5e:86:80:95:be:32:3c:d0:22:b2:2a:5f:3d:68:
                    db:fe:41:5c:40:07:41:6e:b0:49:66:67:bb:25:dd:
                    25:ff:ec:01:d8:e0:32:f1:0d:45:c3:92:70:cf:84:
                    52:fa:5c:09:38:15:e5:c6:b5:8f:1f:21:9c:46:c9:
                    1b:6c:7b:87:96:57:14:e4:09:e2:aa:73:fd:84:1e:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:71:A4:16:B7:DF:1A:92:44:9F:9A:56:89:FC:9A:6D:1E:E8:83:4F
            X509v3 Authority Key Identifier:
                keyid:EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:78:7d:34:cf:a3:c9:67:ec:c6:4a:67:81:d2:cc:bb:09:
         6d:19:ad:af:cf:59:42:7d:99:e8:46:48:35:38:7d:52:e8:c5:
         d0:3a:ab:e2:16:e7:8d:59:ee:1c:67:de:10:cd:43:fe:a8:87:
         13:6d:77:90:bc:00:07:26:c1:a7:7e:ad:ae:07:57:e7:b0:ff:
         2e:a8:45:23:81:9f:37:84:9d:57:d7:70:4c:23:8e:58:d1:fb:
         48:f2:69:84:53:a8:25:9f:b0:7d:e4:b6:2d:71:50:da:19:5b:
         13:66:2f:90:f6:8a:54:e0:fb:d8:a0:e9:5a:9e:f1:a8:c0:3c:
         60:79:e0:b4:ec:b4:6c:ec:91:5b:e5:84:8a:34:8f:c6:71:b0:
         a7:fb:29:77:41:d0:7e:36:2e:50:56:0e:5b:4a:98:44:67:65:
         d8:fb:c0:f5:9a:d5:d4:e2:27:fd:a9:ad:13:1c:a0:93:97:31:
         7b:a7:69:a7:a5:d0:f8:e5:eb:82:62:6d:88:cc:b8:f7:d9:00:
         31:7c:85:e7:2f:f6:18:49:1a:74:d7:97:75:a6:5a:6d:a5:e9:
         d3:bd:8d:11:0b:50:b7:66:d3:21:9e:d0:d9:20:3a:cb:fb:51:
         40:23:86:cf:fd:bc:9b:ea:31:ab:82:ec:79:6b:8a:ea:8e:c2:
         11:48:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:01:58 2026 by rpki-client