This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          9koLVrDcEjUvpMs27ykyHi3tKlOmsWwX8kdHabvw1mA=
Subject key identifier:   53:F5:FC:6E:5B:20:5E:6C:1A:22:97:C8:F6:F4:B9:59:08:30:AF:FE
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          02BC
Signing time:             Sun 25 Jan 2026 04:08:49 +0000
Manifest this update:     Sun 25 Jan 2026 04:08:48 +0000
Manifest next update:     Tue 27 Jan 2026 04:08:48 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: 9nFtigmo/+qick8SUyk6B18vWzXM2PjgTBqaZHy9CFM=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Jan 25 04:08:48 2026 GMT
            Not After : Jan 27 04:08:48 2026 GMT
        Subject: CN=69759751-2dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:fd:91:f4:3e:9b:7e:29:bc:6b:8d:b1:8a:
                    6d:0e:b8:71:09:28:d0:a6:25:c7:65:d3:e0:e8:65:
                    70:32:41:25:cb:36:64:0a:ae:d2:a7:be:fe:33:5f:
                    53:80:05:7b:7a:ad:18:ae:42:31:b9:6d:10:25:7f:
                    4f:aa:b6:6f:aa:85:1c:1a:f9:ad:ad:ef:9d:2f:c7:
                    d7:7e:96:16:99:b6:8c:9c:94:66:39:fa:99:b0:4a:
                    70:56:a0:53:59:61:90:e7:e8:25:f7:58:e4:3e:d4:
                    f5:c0:90:9d:6d:73:d8:a1:22:3e:b0:d9:d1:97:42:
                    48:b4:9b:a5:d5:ac:58:fb:34:58:64:97:6a:ee:a2:
                    4c:e5:f7:3c:47:58:19:77:b2:df:79:6e:40:c4:aa:
                    84:69:78:a2:1c:7f:ce:62:29:92:6f:f5:d8:c4:96:
                    15:aa:16:f4:15:b7:f2:70:e5:b5:f9:b3:8a:61:14:
                    54:81:7a:f6:26:6f:94:a3:e6:ed:9c:ff:16:b7:ff:
                    50:a6:c6:a6:5c:de:38:84:1a:f0:88:99:e8:2f:5a:
                    02:15:1f:de:d4:08:5e:68:b8:4a:ac:e4:98:a6:eb:
                    66:f1:b2:59:56:b9:55:30:a8:82:9d:91:9e:d8:8f:
                    23:95:1d:63:61:a3:9b:85:83:07:43:ed:4d:d8:74:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F5:FC:6E:5B:20:5E:6C:1A:22:97:C8:F6:F4:B9:59:08:30:AF:FE
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:f4:c0:bb:f4:b0:4c:ec:e9:6a:f3:fe:e3:a0:75:c7:f6:
         e6:f5:4f:f0:7a:a7:23:16:b5:86:6a:49:26:c8:6f:01:9a:2e:
         1b:19:d7:db:d2:7b:2d:e6:c3:a7:db:95:32:33:23:6c:39:8c:
         29:85:a7:f8:84:ab:d7:8a:82:88:d2:f5:7a:87:52:51:4d:1d:
         b9:b3:3e:b9:29:93:68:78:ca:e1:c5:89:69:bb:da:c9:1c:13:
         62:d0:ea:d6:d1:c8:d5:98:7f:c3:46:ad:b2:fa:25:16:47:af:
         39:0b:0c:6f:a5:98:b2:5e:3e:69:04:d6:57:40:5f:37:f7:f4:
         35:d6:98:65:f2:c6:5d:e5:da:d8:8c:c1:e7:ae:7f:00:6a:f4:
         0f:c9:86:d4:09:5a:c6:89:b7:75:a0:db:38:30:06:02:62:df:
         b7:88:24:7c:05:77:a5:57:b0:aa:fa:26:e7:a2:0b:96:13:60:
         0d:ee:ee:b3:e9:b1:88:2c:85:94:42:12:7f:ff:04:e0:5b:86:
         04:96:54:f2:c4:5c:55:c2:75:89:d8:1e:07:df:38:ae:ee:3c:
         79:e7:c3:92:04:d0:f1:de:67:cf:2a:d3:d2:4c:06:4e:7e:e5:
         f0:7d:f6:8a:5b:b3:42:42:ee:64:f7:d7:15:30:fb:53:f0:63:
         92:9b:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:10:06 2026 by rpki-client