This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
File:                     BgFTVgEyf0M_jYQnIExQlCCErVY.mft (raw, json)
Hash identifier:          bc0B/hpQiY318E91qeIBQoGwkJX18GeHrlXrKn0wOsc=
Subject key identifier:   39:E9:89:B2:C5:1C:BC:4A:13:13:D4:38:19:2D:A1:DE:46:5A:4E:D3
Authority key identifier: 06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
Certificate issuer:       /CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
Certificate serial:       03CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
Manifest number:          03C9
Signing time:             Sun 25 Jan 2026 03:36:44 +0000
Manifest this update:     Sun 25 Jan 2026 03:36:43 +0000
Manifest next update:     Tue 27 Jan 2026 03:36:43 +0000
Files and hashes:         1: BgFTVgEyf0M_jYQnIExQlCCErVY.crl (hash: 78QVWMUwk4DpfxpVh/rLmvhpxOUi2O54TAd/l0VOUTY=)
                          2: B4157BCEC51811EEA71E2955775412E6.roa (hash: +8B3PetXXdBYl4xVysjBuEdmB8tCvNT4URtK1ryNHXo=)
                          3: 9B15553CC51711EE865F7453775412E6.roa (hash: B4szk6C0WLymXGOq975zsN9fUPmrwwcdkQwfSngmA8Q=)
                          4: D7ED7CFCC51511EE85F58D50775412E6.roa (hash: QAA9COkPZwe9PTmNfwL5wojLGp+HtJSiqKQk5ypGdaw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367676CAF, serialNumber=0601535601327F433F8D8427204C50942084AD56
        Validity
            Not Before: Jan 25 03:36:43 2026 GMT
            Not After : Jan 27 03:36:43 2026 GMT
        Subject: CN=69758fcc-2cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:0a:8a:b8:15:e7:46:7f:83:34:78:68:a5:
                    00:93:26:8e:2a:52:1e:89:70:14:7f:ab:f1:c4:ec:
                    56:45:a8:f1:62:63:e0:fe:c3:40:a4:7d:e5:c5:e7:
                    c7:ac:cd:b7:c9:14:78:ea:1e:a4:f9:49:e8:f3:8b:
                    de:5a:4a:bd:cc:cb:e5:65:aa:e5:eb:40:bc:27:15:
                    b5:41:24:6d:7a:6d:2f:84:9a:10:eb:8e:10:27:6b:
                    09:b4:4b:a5:8f:a5:09:ce:89:e3:bc:b3:d5:84:e4:
                    ca:02:b4:f4:3a:46:9b:21:0c:18:b0:df:97:c9:63:
                    1a:7f:8a:32:b6:29:e8:96:1d:38:9f:6d:d7:db:d5:
                    09:63:f4:94:75:90:d4:f3:87:67:73:a5:85:01:03:
                    42:f5:a6:e5:ff:7f:b1:2e:34:30:b5:e8:af:1b:4e:
                    b1:9e:02:8e:dd:09:b5:4f:ec:80:ae:af:f1:00:57:
                    01:0e:6e:f7:65:a0:fd:6f:52:75:a7:dd:ce:5f:a2:
                    6b:0f:ff:fb:40:6e:61:d6:bf:c9:b7:4e:63:fa:e4:
                    8e:68:7f:a7:3f:a0:34:8d:40:43:1b:e7:e0:fb:d7:
                    e3:f3:a7:9a:c3:48:e7:a1:5d:12:76:56:e0:91:88:
                    b6:68:20:7d:f4:fe:65:7e:b4:21:dd:4d:6e:d6:48:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E9:89:B2:C5:1C:BC:4A:13:13:D4:38:19:2D:A1:DE:46:5A:4E:D3
            X509v3 Authority Key Identifier:
                keyid:06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:ea:43:5b:ac:8d:c1:a1:63:4d:d9:ea:80:b8:4c:1d:cc:
         8e:53:59:b0:2a:71:06:49:48:2d:34:5f:aa:a6:47:42:fb:76:
         c7:50:c3:35:7b:7a:41:50:2b:74:a8:ab:14:9a:d8:1d:7a:8a:
         7a:81:cb:93:e4:1e:fc:8e:cb:8f:b1:40:62:3c:45:cf:9a:31:
         cb:02:7e:5c:9c:cf:35:d5:70:81:bd:91:c3:9a:72:80:01:f3:
         56:7c:eb:7e:f6:3a:b4:9e:8b:2d:eb:96:3f:65:17:91:48:7d:
         87:8f:17:f6:bf:ae:b7:34:eb:3d:e7:7e:a7:60:b7:d2:41:ff:
         5c:82:cb:22:ac:85:36:05:73:ae:e1:7f:b9:75:7a:bf:83:27:
         d2:b1:8f:13:60:b7:d8:13:98:f7:01:a8:a5:41:ce:2b:e8:e6:
         21:b6:dd:2f:85:67:b1:5a:97:5a:48:f0:5e:51:02:58:a6:6c:
         e8:c7:8f:a2:61:4c:3a:d1:a3:9b:25:10:24:87:6c:b7:8e:dc:
         4c:ed:10:47:4e:58:df:25:f9:13:90:28:b4:0a:44:5f:45:e0:
         dc:b1:40:c7:d6:54:4c:7c:4a:cc:b9:85:5b:c3:43:a4:a9:6a:
         8c:85:43:fb:74:f3:94:a6:42:de:6d:59:b7:ce:48:45:cc:00:
         a4:fd:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:42:37 2026 by rpki-client