This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          v8JnZ/ygTGn/XMB+6MRV9L+ClM2y93n/w0sggoZYCrg=
Subject key identifier:   ED:06:ED:1F:DC:AB:A4:CE:75:B0:5B:18:B6:5E:FE:0E:7F:01:58:D6
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       02EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          02EA
Signing time:             Sun 25 Jan 2026 04:06:47 +0000
Manifest this update:     Sun 25 Jan 2026 04:06:46 +0000
Manifest next update:     Tue 27 Jan 2026 04:06:46 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: m6txylnpvi7p1kETzVdB+3ytxk4AXswewzJRwR3eFOI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Jan 25 04:06:46 2026 GMT
            Not After : Jan 27 04:06:46 2026 GMT
        Subject: CN=697596d7-d075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:86:19:b4:1d:be:e1:0e:cd:f4:62:1c:3b:
                    06:ff:7a:70:d0:03:da:1a:14:2a:3f:4f:b1:a4:66:
                    e4:15:1c:f1:67:b4:4b:be:16:51:48:29:7d:3b:a5:
                    94:6a:f3:7f:aa:5f:75:3a:9b:f1:36:83:a9:71:37:
                    5b:fc:83:3b:5e:31:08:d7:8e:82:2c:23:80:63:8f:
                    d2:ec:9e:79:bd:1c:c8:98:88:2d:69:73:76:1f:e2:
                    34:f0:9d:e4:96:5f:80:29:9b:8b:d4:ab:5b:09:5f:
                    60:4b:7e:62:46:e2:94:58:cc:c4:8b:4d:62:ae:db:
                    ea:82:67:5d:12:13:c6:77:47:51:02:51:17:ac:9d:
                    82:e0:c0:e3:88:f5:0e:ba:c1:59:86:fc:30:fc:58:
                    2f:d3:1b:ed:8e:67:3b:4e:91:f7:f8:04:5a:eb:69:
                    14:92:4f:74:f8:f9:72:48:94:48:71:ed:b3:8d:eb:
                    d6:8f:2b:14:a9:d7:6b:bd:43:6c:33:20:36:bb:c6:
                    47:76:f7:4d:17:38:e7:76:22:c6:d6:71:14:ab:79:
                    5c:22:5f:52:ca:11:3d:2a:a8:c0:d3:f4:a9:0c:d6:
                    c9:04:53:ab:9f:85:7a:76:ea:11:8c:fa:11:f5:fa:
                    e2:20:ec:b1:ac:a8:c8:ae:a8:0a:79:5d:ad:31:2b:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:ED:1F:DC:AB:A4:CE:75:B0:5B:18:B6:5E:FE:0E:7F:01:58:D6
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:24:1f:cf:84:81:bb:ad:a5:5f:18:3a:b6:1a:1d:60:87:85:
         55:74:25:97:40:bc:16:bc:64:d1:8f:fe:90:f3:ef:5b:c6:ea:
         f5:cc:56:2c:ef:88:cf:43:74:13:a2:db:44:3c:d8:7e:61:36:
         be:25:72:af:10:c1:18:8a:71:de:1d:98:41:90:9b:07:39:58:
         a1:a2:81:3b:f4:dc:a8:e3:71:5e:55:6c:f0:1f:77:bc:ad:a6:
         cd:99:b2:6e:64:49:63:3b:f4:49:cd:2e:f3:b1:b2:e8:29:6c:
         2a:a9:04:6c:1e:e5:dc:b7:91:5d:dc:a0:d5:3f:ca:0b:00:69:
         67:f6:b6:70:fe:61:7d:d7:d1:fc:8f:fb:9e:3b:ec:d1:e2:78:
         d1:b2:ba:1b:78:80:4b:7e:ab:af:f1:8f:35:94:7e:66:e8:ef:
         a1:6b:e7:c5:e4:a2:e6:89:3f:14:e8:52:2f:72:5b:25:e6:4e:
         ec:a9:3f:30:00:6a:e3:7b:55:63:aa:fc:79:ba:d2:f4:c0:82:
         73:55:db:04:52:0e:ea:73:e7:e6:3f:e5:e5:1e:cb:a1:ab:99:
         34:76:fd:83:51:40:f5:a3:57:07:70:06:bd:a4:2f:2f:09:84:
         19:0f:9e:ac:31:8f:d1:d6:4b:8d:f5:33:03:c9:44:ea:a7:c6:
         8a:fc:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:48 2026 by rpki-client