This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
File:                     SmfXXBQJ0u538xkN5zXsl-9jDVg.mft (raw, json)
Hash identifier:          9922Rs01l79mXeg28fwTAIIAYCkAopTN/x8ZjBd4Qtg=
Subject key identifier:   F6:FF:34:F1:BF:EA:B1:B0:50:3F:9A:5C:C5:F3:A5:0B:A2:B3:CA:A4
Authority key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58
Certificate issuer:       /CN=F36700DBAF/serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
Certificate serial:       068F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
Manifest number:          068F
Signing time:             Sun 25 Jan 2026 02:20:46 +0000
Manifest this update:     Sun 25 Jan 2026 02:20:45 +0000
Manifest next update:     Tue 27 Jan 2026 02:20:45 +0000
Files and hashes:         1: SmfXXBQJ0u538xkN5zXsl-9jDVg.crl (hash: 8u99cTzRaSEPC54R93WmoO3yve10Fet6j1QWQulw9os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
        Validity
            Not Before: Jan 25 02:20:45 2026 GMT
            Not After : Jan 27 02:20:45 2026 GMT
        Subject: CN=69757dfe-a247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:37:a9:75:35:c2:b1:bc:22:cc:99:5d:5e:
                    08:55:f2:8e:f3:fb:32:76:59:2c:61:56:d9:e0:f8:
                    23:42:9d:13:2f:bd:e7:dc:57:33:2f:f3:d3:7d:db:
                    4c:d6:12:e0:12:91:03:ba:e1:57:b0:3f:4e:8b:d0:
                    1f:20:99:71:ec:6b:8e:bd:7d:af:7f:b9:0a:8f:7c:
                    10:e2:06:ad:d0:41:de:3d:04:02:17:27:05:5e:0e:
                    4b:71:10:37:d8:e2:1b:a6:cb:30:61:87:63:dc:c6:
                    a1:bd:f2:d7:49:51:c2:31:7b:02:5f:24:6b:44:81:
                    17:ba:d9:c9:f6:8e:f5:5d:40:2d:31:9d:46:cc:b2:
                    ac:19:18:08:19:ed:d4:3a:88:bf:4c:a3:a8:37:d8:
                    24:77:9a:9a:ae:9e:37:1f:7f:38:1a:9e:39:9d:ae:
                    9f:86:38:15:2c:a7:d4:89:b1:1e:4e:b3:0c:9f:84:
                    19:83:de:3b:4d:36:11:e8:e5:18:2f:6e:df:ea:34:
                    87:02:35:e6:83:0f:8a:ea:3b:d1:bd:1a:47:4a:fa:
                    f4:53:9c:15:5a:31:70:3d:d9:0f:e7:2c:b6:7c:a1:
                    96:eb:39:01:e0:1f:83:79:b1:6c:38:33:33:8d:e1:
                    11:25:2f:7c:18:a2:0c:5e:97:78:3f:9a:b0:00:d5:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FF:34:F1:BF:EA:B1:B0:50:3F:9A:5C:C5:F3:A5:0B:A2:B3:CA:A4
            X509v3 Authority Key Identifier:
                keyid:4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:19:ff:44:8f:73:69:f8:b8:96:05:99:8d:aa:9c:1f:d2:a4:
         f3:cc:83:81:a4:c5:8b:74:a2:4b:8a:1a:3a:49:57:c8:7d:50:
         ae:cc:8d:3a:19:f6:8a:fd:f8:58:08:0a:4e:4f:a2:2f:fa:97:
         5b:94:97:bd:3a:0e:78:76:71:c7:2b:f4:15:e8:90:c6:4c:31:
         ef:76:49:51:c6:e6:31:ec:7c:b5:49:46:74:c0:53:b5:72:fc:
         e3:ea:40:8e:1a:14:93:76:7b:84:80:44:38:2c:47:b5:80:64:
         ea:db:42:ba:82:0e:74:0b:03:6c:7e:ad:2e:3e:ea:3d:3e:da:
         d2:3c:79:06:b5:27:3f:ca:c8:51:d6:89:2a:21:74:5e:be:c4:
         ab:0d:56:5e:02:45:38:66:4a:c3:7e:c2:5f:3b:6d:8e:67:27:
         41:c9:28:bc:5a:ae:48:28:2a:92:de:b7:18:40:b2:8c:5c:f3:
         d4:48:22:8e:28:c8:2c:f1:fe:5d:b9:0f:b5:73:82:b2:e1:d0:
         1e:5f:48:1b:eb:d9:a3:5e:40:ec:e6:53:d4:99:b8:46:7c:39:
         6e:56:83:cb:6d:12:a7:5a:07:83:22:70:25:37:9e:8c:6c:da:
         9d:83:95:5c:a2:cf:a3:f6:11:8f:c1:68:07:6e:34:65:7e:86:
         e5:36:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:34:04 2026 by rpki-client