This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
File:                     ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft (raw, json)
Hash identifier:          hMGK28NKC78xqEx2eC2efEquugKC/riGK1ZL1L/uKzo=
Subject key identifier:   ED:C8:C9:0B:89:97:98:E3:D2:3E:22:68:C6:32:7E:65:EA:10:F6:9B
Authority key identifier: 65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47
Certificate issuer:       /CN=F366E8F3AF/serialNumber=65068E4FC4D327F7B3F2E159AAD9126182257547
Certificate serial:       0142
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
Manifest number:          0141
Signing time:             Sun 25 Jan 2026 04:53:59 +0000
Manifest this update:     Sun 25 Jan 2026 04:53:59 +0000
Manifest next update:     Tue 27 Jan 2026 04:53:58 +0000
Files and hashes:         1: ZQaOT8TTJ_ez8uFZqtkSYYIldUc.crl (hash: vWlgpZbITWMTRKpLZj2MGBo/qmRT9lZN1F0kGl2NodU=)
                          2: FA23C6E0033111F0913B507A762E951A.roa (hash: UU+VLCaW1bzLKfQrboq/hHsg8DwvgOdl3KUVSjPJbis=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E8F3AF, serialNumber=65068E4FC4D327F7B3F2E159AAD9126182257547
        Validity
            Not Before: Jan 25 04:53:59 2026 GMT
            Not After : Jan 27 04:53:58 2026 GMT
        Subject: CN=6975a1e7-8000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:33:c9:01:7c:b5:10:b7:f3:fe:14:3d:b7:
                    0d:23:92:fb:70:35:98:69:47:ed:0a:51:d4:4c:de:
                    38:f4:c3:6c:6d:21:d9:17:23:24:24:a9:59:6d:7c:
                    ac:6a:3d:18:8e:b6:2a:52:30:8d:9d:2b:1c:17:81:
                    57:34:64:24:ae:5c:d9:33:2b:e0:d0:85:f8:c3:1b:
                    d7:62:e2:28:e7:ad:17:57:bf:00:7e:e3:f8:4c:ed:
                    bc:d0:20:bb:e2:9e:39:f6:aa:45:81:69:78:98:ec:
                    15:af:7e:ae:79:ff:ad:f5:29:56:2d:5f:98:59:d0:
                    5d:23:90:45:b0:c3:5b:7f:09:41:be:24:f1:9e:93:
                    97:c8:d2:67:d5:c5:ea:68:03:29:b7:cf:0e:41:aa:
                    8c:06:2a:bd:f4:c5:f5:87:62:37:90:6e:d9:89:9b:
                    64:71:ba:2b:67:79:ed:6f:18:54:2a:69:c1:2f:1a:
                    75:5a:1d:73:c2:4f:0b:b9:16:c7:c1:34:d2:c0:e1:
                    10:85:56:c5:96:60:c4:6e:76:2e:cd:fa:f0:1e:ff:
                    65:ed:ce:a9:b9:32:ca:60:a8:da:98:a1:c6:08:6c:
                    c3:2d:a8:c5:4e:7b:23:47:65:21:e1:8f:a2:ef:3c:
                    b6:86:92:3d:10:0c:3f:76:d5:e4:4f:9e:d9:8b:be:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:C9:0B:89:97:98:E3:D2:3E:22:68:C6:32:7E:65:EA:10:F6:9B
            X509v3 Authority Key Identifier:
                keyid:65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9b:77:74:95:5c:17:20:77:fa:a5:6b:45:42:1f:27:13:75:
         70:e3:21:11:d1:b6:e8:8d:0a:f4:b1:2f:06:2e:63:6d:c4:8d:
         a4:3c:de:cc:b1:e3:44:69:c3:fa:30:b1:82:19:30:f9:8f:43:
         29:3d:bb:de:11:72:12:4a:fa:75:49:68:89:0a:64:94:18:84:
         b9:29:13:50:c4:53:20:00:55:2c:c2:1c:79:f8:b3:c8:55:bb:
         db:9d:73:de:60:a1:47:92:d3:92:05:da:c4:dc:51:26:47:03:
         d1:da:21:5c:b2:5c:65:70:aa:94:3e:32:ba:fa:79:87:4c:4d:
         68:33:ec:13:e8:02:c0:63:dd:ae:64:0c:76:d7:12:11:dd:73:
         18:03:60:c3:6f:85:0a:bb:e9:4a:ff:0e:7a:07:e4:d1:05:90:
         60:b4:e0:a8:c7:2d:87:82:86:76:a1:7d:88:32:17:0a:78:eb:
         7d:be:c4:3e:20:2f:99:a9:6e:b6:59:f7:4d:0b:b1:02:86:c0:
         94:b2:59:ca:91:4a:ef:02:e6:f8:5b:34:9f:6f:dc:92:fd:26:
         e3:13:79:e6:22:b4:fd:18:9e:aa:9b:7d:99:4e:b2:43:15:0f:
         42:c4:f6:5a:51:07:26:23:fa:52:b3:95:81:85:06:a4:df:f1:
         59:a4:ee:c1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkU4RjNBRjExMC8GA1UEBRMoNjUwNjhFNEZDNEQzMjdGN0IzRjJFMTU5QUFEOTEy
NjE4MjI1NzU0NzAeFw0yNjAxMjUwNDUzNTlaFw0yNjAxMjcwNDUzNThaMBgxFjAU
BgNVBAMTDTY5NzVhMWU3LTgwMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAuzPJAXy1ELfz/hQ9tw0jkvtwNZhpR+0KUdRM3jj0w2xtIdkXIyQkqVlt
fKxqPRiOtipSMI2dKxwXgVc0ZCSuXNkzK+DQhfjDG9di4ijnrRdXvwB+4/hM7bzQ
ILvinjn2qkWBaXiY7BWvfq55/631KVYtX5hZ0F0jkEWww1t/CUG+JPGek5fI0mfV
xepoAym3zw5BqowGKr30xfWHYjeQbtmJm2Rxuitnee1vGFQqacEvGnVaHXPCTwu5
FsfBNNLA4RCFVsWWYMRudi7N+vAe/2Xtzqm5MspgqNqYocYIbMMtqMVOeyNHZSHh
j6LvPLaGkj0QDD921eRPntmLvu8XAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7cjJ
C4mXmOPSPiJoxjJ+ZeoQ9pswHwYDVR0jBBgwFoAUZQaOT8TTJ/ez8uFZqtkSYYIl
dUcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZFOEYzL0I3NDM1NjBFMDMyRTExRjBCQ0Y3OTQ2NTc2MkU5NTFBL1pRYU9U
OFRUSl9lejh1RlpxdGtTWVlJbGRVYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pRYU9UOFRUSl9lejh1RlpxdGtTWVlJbGRVYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkU4RjMvQjc0MzU2MEUwMzJFMTFGMEJDRjc5NDY1NzYy
RTk1MUEvWlFhT1Q4VFRKX2V6OHVGWnF0a1NZWUlsZFVjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdm3d0lVwXIHf6pWtFQh8nE3Vw4yER
0bbojQr0sS8GLmNtxI2kPN7MseNEacP6MLGCGTD5j0MpPbveEXISSvp1SWiJCmSU
GIS5KRNQxFMgAFUswhx5+LPIVbvbnXPeYKFHktOSBdrE3FEmRwPR2iFcslxlcKqU
PjK6+nmHTE1oM+wT6ALAY92uZAx21xIR3XMYA2DDb4UKu+lK/w56B+TRBZBgtOCo
xy2HgoZ2oX2IMhcKeOt9vsQ+IC+ZqW62WfdNC7EChsCUslnKkUrvAub4WzSfb9yS
/SbjE3nmIrT9GJ6qm32ZTrJDFQ9CxPZaUQcmI/pSs5WBhQak3/FZpO7B
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:02 2026 by rpki-client