This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.mft (raw, json)
Hash identifier:          O/F0RE9SkwZIVxhAta/n1+Of0FNrHyCBw5eD/sRvIo4=
Subject key identifier:   CE:B0:38:97:C6:85:A3:65:A3:AD:13:7D:1B:7A:8D:A0:B0:BB:F1:A3
Authority key identifier: 39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Certificate issuer:       /CN=F366AE59AF/serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
Manifest number:          02A2
Signing time:             Sun 25 Jan 2026 04:10:28 +0000
Manifest this update:     Sun 25 Jan 2026 04:10:27 +0000
Manifest next update:     Tue 27 Jan 2026 04:10:27 +0000
Files and hashes:         1: OV0yW2nyp6M_rgog4SIm0pgbsF4.crl (hash: 0tzhFYndIX7RyEue31Fqd7IWgBXceG7n/1Ps0LnP+9s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AF, serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
        Validity
            Not Before: Jan 25 04:10:27 2026 GMT
            Not After : Jan 27 04:10:27 2026 GMT
        Subject: CN=697597b4-94dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:14:2c:cc:1c:d2:7c:c2:cd:1e:89:75:b9:
                    51:4c:91:e8:86:bd:16:2e:ff:72:e8:c5:17:c9:d9:
                    21:1d:c1:94:ac:55:66:f1:5e:20:7c:ea:58:d6:0b:
                    85:4b:dd:4d:25:b3:07:ef:11:91:67:bd:b3:f1:65:
                    1d:5a:ad:af:c4:ec:f8:98:de:67:2b:4e:01:e2:b6:
                    f2:59:f4:00:a7:eb:08:b7:e8:ed:c4:0a:dd:e9:18:
                    5f:09:6e:1b:3b:0a:16:6b:7e:fb:75:e1:fc:97:31:
                    45:c3:55:04:d8:42:a9:e4:e6:a1:c7:23:05:ea:9e:
                    52:01:32:52:cf:9e:b2:b3:20:51:b5:69:a5:50:1a:
                    d3:79:9c:47:b1:01:b9:99:c5:4b:77:9d:ac:78:95:
                    41:70:8d:d7:10:b0:79:c8:97:16:d6:ea:c6:6c:7e:
                    45:12:b0:36:24:df:61:3d:bf:9b:96:0f:58:bd:b6:
                    31:28:ba:a6:36:93:b1:86:ed:5b:3a:a2:89:20:38:
                    33:8d:af:87:a9:0f:ee:f4:21:1d:2b:e5:cb:d9:b3:
                    89:06:c9:bb:d3:d6:32:e1:00:42:e6:89:f6:12:52:
                    fe:90:80:d5:96:d7:3f:e0:10:71:5c:71:da:51:4e:
                    2c:bb:89:ac:37:be:7e:40:00:ec:02:0a:1f:8c:aa:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B0:38:97:C6:85:A3:65:A3:AD:13:7D:1B:7A:8D:A0:B0:BB:F1:A3
            X509v3 Authority Key Identifier:
                keyid:39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:89:69:61:5c:47:e8:4f:0e:ac:9c:52:9c:2e:9c:42:90:
         8c:a4:fb:2f:c2:f2:17:c1:c8:77:37:e6:59:e8:02:71:af:96:
         42:e2:8f:17:53:bd:6f:b2:39:1e:89:19:85:8a:f4:76:d5:0b:
         b2:8c:fc:20:cb:76:85:c3:ee:c1:37:ff:71:97:45:30:c4:4d:
         b4:d1:06:b1:9f:41:83:64:d6:d9:be:da:b1:83:13:64:c7:43:
         aa:85:91:4e:b2:bd:02:e7:d3:c5:06:8c:52:73:e3:97:4e:8e:
         71:59:90:d7:85:b4:96:64:1f:6e:91:5a:fe:a0:7f:ee:9b:8b:
         a7:4a:d7:9f:3a:62:bf:f5:40:6f:79:70:f1:e5:83:9d:64:f3:
         50:b9:cf:f3:b0:4c:cb:eb:50:0b:3e:8a:9a:a9:6b:87:36:16:
         79:b2:16:d6:47:61:13:4c:7c:12:7c:1a:9c:7c:ae:75:e5:55:
         ea:0c:96:cd:b7:e1:a6:69:f1:24:6d:e0:40:f5:b1:79:49:7a:
         58:a8:22:9d:0e:df:66:cb:4f:c7:ef:75:38:7e:2b:f2:b0:95:
         39:ea:9d:4a:17:8c:6a:b0:d5:15:01:a1:eb:af:3b:96:3a:2f:
         00:97:60:e8:32:7c:7d:bf:94:45:14:18:4e:7a:85:fb:22:0a:
         be:1f:ff:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:44 2026 by rpki-client