This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
File:                     oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft (raw, json)
Hash identifier:          30+CPLwumceBw23Z5xm9V1TYXW41Fk0F2W52SFdlUbs=
Subject key identifier:   E7:18:9E:FB:20:FE:67:6E:13:BF:6A:46:8A:7A:A9:02:68:E6:C9:A0
Authority key identifier: A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
Certificate issuer:       /CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
Manifest number:          029D
Signing time:             Sun 25 Jan 2026 04:11:41 +0000
Manifest this update:     Sun 25 Jan 2026 04:11:40 +0000
Manifest next update:     Tue 27 Jan 2026 04:11:40 +0000
Files and hashes:         1: oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl (hash: 3s5aDFSvIYE/drI9t4PZXOddttPpdFuniThwHo06SJY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AF, serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
        Validity
            Not Before: Jan 25 04:11:40 2026 GMT
            Not After : Jan 27 04:11:40 2026 GMT
        Subject: CN=697597fd-84a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:e7:91:3f:23:22:37:1d:67:30:8d:0d:97:
                    f9:82:f1:1f:e0:f7:45:f2:53:cd:1f:94:e9:97:f4:
                    c5:b8:a1:4f:46:79:7c:ad:9c:93:d7:97:3a:90:e6:
                    b3:dd:2b:fa:0d:33:4e:f2:d2:32:c1:ca:90:86:76:
                    5a:e9:1a:e6:12:1e:71:d6:b9:c8:31:37:76:25:27:
                    c1:8e:30:74:69:64:ac:22:15:4a:93:8e:ee:17:f1:
                    4b:4d:2c:33:9e:e9:49:44:b4:57:3f:d1:99:e3:a5:
                    2e:25:b5:da:0b:59:49:d8:40:86:ae:ce:d5:4c:af:
                    1c:54:9f:9f:50:95:73:2f:0e:80:f2:aa:2f:c0:f5:
                    40:a6:08:30:0d:3e:8d:d2:79:4c:cb:14:41:eb:b5:
                    ba:72:b9:55:39:f6:4d:3d:dc:b9:3e:38:d4:1d:c4:
                    d3:d6:4a:0f:ff:a2:ff:a5:81:5b:3c:30:a1:a5:70:
                    c3:54:ba:75:f4:f4:3b:39:64:22:c3:f6:d5:73:90:
                    b8:3d:30:ad:0c:99:45:b8:09:c3:f3:85:39:6a:e4:
                    27:45:b5:75:6e:46:0d:45:9d:ce:03:d1:3e:01:cf:
                    26:fb:6f:2b:98:fa:8f:75:e4:e2:cd:94:6e:3f:bc:
                    ec:73:5b:04:78:3f:18:4c:18:d3:11:46:c0:bf:e3:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:9E:FB:20:FE:67:6E:13:BF:6A:46:8A:7A:A9:02:68:E6:C9:A0
            X509v3 Authority Key Identifier:
                keyid:A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ab:e8:67:0a:58:29:d6:83:a7:b9:f2:2c:48:80:78:75:59:
         cd:fc:e2:bd:38:5a:e1:e6:fc:dc:f5:25:ff:f0:69:e7:ce:11:
         21:e1:4c:b5:ac:90:f9:59:27:29:81:3b:17:13:09:67:7d:7d:
         24:7a:7a:ae:c0:ec:b7:61:1d:e8:d3:45:59:a4:d3:20:13:80:
         8a:79:39:ce:bf:1a:9a:fe:4b:0d:df:09:8c:af:e5:e8:97:7d:
         e0:00:b8:26:99:a6:91:60:73:d7:95:18:0a:9b:45:ae:bb:40:
         e0:94:16:72:f1:d0:9d:de:21:cd:16:8b:34:25:a6:35:e0:1a:
         8d:b4:94:a7:78:23:5f:9a:1a:c7:0c:cc:5c:84:c0:90:34:ed:
         51:0e:0d:4b:f1:66:e3:9e:28:6a:bb:77:ca:0c:75:b3:e9:ab:
         13:ef:09:ca:69:87:e1:c8:e4:cf:ee:37:51:17:f6:1b:9d:e2:
         2e:35:12:ad:d1:3a:ad:6c:1e:63:60:38:53:7f:95:d6:c7:74:
         a7:b2:b8:eb:43:7e:31:14:6d:c1:53:7c:d6:9a:04:92:b7:b1:
         54:55:96:4b:d8:a2:af:69:5d:3a:fb:e8:7a:24:7d:b5:61:ef:
         91:32:05:ba:93:9e:43:d0:64:bc:30:9e:23:74:7c:b1:2b:41:
         9f:0e:2d:62
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkMzMDJBRjExMC8GA1UEBRMoQTFFREFCMUFDRDQzMENGRTRBNTFGMzFEQjE4NTBE
OTVBODg0QjE0NDAeFw0yNjAxMjUwNDExNDBaFw0yNjAxMjcwNDExNDBaMBgxFjAU
BgNVBAMTDTY5NzU5N2ZkLTg0YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT2ueRPyMiNx1nMI0Nl/mC8R/g90XyU80flOmX9MW4oU9GeXytnJPXlzqQ
5rPdK/oNM07y0jLBypCGdlrpGuYSHnHWucgxN3YlJ8GOMHRpZKwiFUqTju4X8UtN
LDOe6UlEtFc/0ZnjpS4ltdoLWUnYQIauztVMrxxUn59QlXMvDoDyqi/A9UCmCDAN
Po3SeUzLFEHrtbpyuVU59k093Lk+ONQdxNPWSg//ov+lgVs8MKGlcMNUunX09Ds5
ZCLD9tVzkLg9MK0MmUW4CcPzhTlq5CdFtXVuRg1Fnc4D0T4Bzyb7byuY+o915OLN
lG4/vOxzWwR4PxhMGNMRRsC/40fBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5xie
+yD+Z24Tv2pGinqpAmjmyaAwHwYDVR0jBBgwFoAUoe2rGs1DDP5KUfMdsYUNlaiE
sUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDMzAyLzc2M0Q4MjlFRkVFNjExRUU5MDRCQ0Y2QjAxNzAwMUIxL29lMnJH
czFERFA1S1VmTWRzWVVObGFpRXNVUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29lMnJHczFERFA1S1VmTWRzWVVObGFpRXNVUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkMzMDIvNzYzRDgyOUVGRUU2MTFFRTkwNEJDRjZCMDE3
MDAxQjEvb2UyckdzMUREUDVLVWZNZHNZVU5sYWlFc1VRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTq+hnClgp1oOnufIsSIB4dVnN/OK9
OFrh5vzc9SX/8GnnzhEh4Uy1rJD5WScpgTsXEwlnfX0kenquwOy3YR3o00VZpNMg
E4CKeTnOvxqa/ksN3wmMr+Xol33gALgmmaaRYHPXlRgKm0Wuu0DglBZy8dCd3iHN
Fos0JaY14BqNtJSneCNfmhrHDMxchMCQNO1RDg1L8Wbjnihqu3fKDHWz6asT7wnK
aYfhyOTP7jdRF/YbneIuNRKt0TqtbB5jYDhTf5XWx3SnsrjrQ34xFG3BU3zWmgSS
t7FUVZZL2KKvaV06++h6JH21Ye+RMgW6k55D0GS8MJ4jdHyxK0GfDi1i
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:03 2026 by rpki-client