This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          5cB6fU9/XU9/x76uU8v9+S1K/SDDVlJ10htZKPwTiT8=
Subject key identifier:   41:CA:69:E4:60:EA:F7:3B:14:8C:0D:2E:A0:66:42:F4:20:C2:CB:EB
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       0625
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          0624
Signing time:             Sun 25 Jan 2026 02:31:28 +0000
Manifest this update:     Sun 25 Jan 2026 02:31:27 +0000
Manifest next update:     Tue 27 Jan 2026 02:31:27 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: 0Wf7MMvEMXvsRpojAeBu2Kq13z4rs/qcUiQuHdxWOes=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF, serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Validity
            Not Before: Jan 25 02:31:27 2026 GMT
            Not After : Jan 27 02:31:27 2026 GMT
        Subject: CN=69758080-bb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:57:6d:48:02:6e:65:18:1d:17:2e:68:8b:
                    c7:cc:ac:aa:25:b6:0a:37:92:5a:32:8c:47:8e:c0:
                    30:5f:f4:5c:ca:a3:c4:45:35:35:f6:3a:d3:9a:67:
                    fc:62:35:de:03:cd:e3:e5:42:d4:e0:2c:fc:fc:e4:
                    21:3c:e6:c8:02:5b:9c:ba:2b:c3:8d:00:5f:f4:a4:
                    d3:40:94:c1:bf:61:31:04:0c:79:4f:3b:50:e9:45:
                    73:6d:3d:8f:99:1d:fc:93:bc:dd:b4:4f:af:b4:08:
                    e1:53:07:45:2d:83:b1:f0:64:63:0f:c9:a5:74:0d:
                    5b:ed:71:73:ef:ce:d6:9f:71:e7:21:3a:8e:f6:35:
                    e0:85:23:9e:ec:95:f2:19:ae:d1:2e:bd:61:79:08:
                    b8:6f:dc:92:2f:67:45:95:d3:07:31:3a:5f:a7:0f:
                    25:cf:c7:2b:bd:b4:1b:7e:77:53:d2:85:60:e4:24:
                    c4:bc:f1:6d:f9:ce:b7:81:a4:b0:5b:15:94:02:a5:
                    8c:df:57:a4:25:c1:84:b0:9c:0d:2c:32:88:bc:06:
                    f6:cf:f3:47:68:3b:8f:cc:39:8a:f8:de:1b:73:cf:
                    6a:5c:13:d9:1b:8d:2c:79:1c:df:2e:ec:10:09:6f:
                    9a:58:fb:f5:83:cb:89:c1:6f:5d:1b:24:7e:fb:7f:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:69:E4:60:EA:F7:3B:14:8C:0D:2E:A0:66:42:F4:20:C2:CB:EB
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1b:b1:d6:64:ce:f4:39:68:84:6b:c6:ad:24:9e:d6:85:e9:
         d2:6c:9e:36:31:6b:1f:ae:af:63:c0:30:db:42:e7:b9:43:41:
         25:2f:3d:56:03:82:37:64:75:fa:3a:6a:ac:51:45:39:d0:93:
         fd:0c:a4:47:81:10:91:69:1f:24:70:6b:15:80:38:8e:dc:98:
         83:f8:34:75:a8:f7:63:f5:29:d9:45:e4:e4:8f:cf:ec:ab:35:
         cb:e2:5e:ee:a4:b5:2a:31:69:8f:a8:49:41:41:4c:83:a1:be:
         fd:b4:c2:41:a7:36:0f:c5:02:6d:a5:47:98:fe:36:5d:93:46:
         eb:de:db:90:06:b2:10:00:27:c0:89:24:45:91:80:18:f5:07:
         06:77:f2:9a:59:7d:a9:2c:bc:95:e1:d3:53:22:83:73:fc:f4:
         a9:e7:c1:37:56:03:57:38:8a:86:03:20:5a:8d:62:eb:40:56:
         ed:ae:70:ef:94:eb:41:ab:90:52:72:39:ca:ba:d1:bc:ab:91:
         f2:66:0d:a4:d0:52:4d:65:29:d7:69:e7:ca:a0:3a:db:f8:83:
         27:4a:b7:f1:b0:a9:09:60:1f:d5:7e:26:7f:62:b2:08:96:15:
         45:0e:cb:d3:38:9a:9d:2d:be:71:7b:a6:d9:93:9f:91:f3:33:
         06:52:9b:d7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzlDQjhBRjExMC8GA1UEBRMoM0IwODg5MTA1N0NFOEEyNzY4MTEwNDA1OTVDQ0FB
QzQwOERGNTFBNjAeFw0yNjAxMjUwMjMxMjdaFw0yNjAxMjcwMjMxMjdaMBgxFjAU
BgNVBAMTDTY5NzU4MDgwLWJiMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC001dtSAJuZRgdFy5oi8fMrKoltgo3kloyjEeOwDBf9FzKo8RFNTX2OtOa
Z/xiNd4DzePlQtTgLPz85CE85sgCW5y6K8ONAF/0pNNAlMG/YTEEDHlPO1DpRXNt
PY+ZHfyTvN20T6+0COFTB0Utg7HwZGMPyaV0DVvtcXPvztafcechOo72NeCFI57s
lfIZrtEuvWF5CLhv3JIvZ0WV0wcxOl+nDyXPxyu9tBt+d1PShWDkJMS88W35zreB
pLBbFZQCpYzfV6QlwYSwnA0sMoi8BvbP80doO4/MOYr43htzz2pcE9kbjSx5HN8u
7BAJb5pY+/WDy4nBb10bJH77f4zdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQcpp
5GDq9zsUjA0uoGZC9CDCy+swHwYDVR0jBBgwFoAUOwiJEFfOiidoEQQFlcyqxAjf
UaYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5Q0I4L0JFMjJDOEM2NDVFODExRUNCRTk2NzcxOUQ4QTAxNENFL093aUpF
RmZPaWlkb0VRUUZsY3lxeEFqZlVhWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL093aUpFRmZPaWlkb0VRUUZsY3lxeEFqZlVhWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzlDQjgvQkUyMkM4QzY0NUU4MTFFQ0JFOTY3NzE5RDhB
MDE0Q0UvT3dpSkVGZk9paWRvRVFRRmxjeXF4QWpmVWFZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvG7HWZM70OWiEa8atJJ7WhenSbJ42
MWsfrq9jwDDbQue5Q0ElLz1WA4I3ZHX6OmqsUUU50JP9DKRHgRCRaR8kcGsVgDiO
3JiD+DR1qPdj9SnZReTkj8/sqzXL4l7upLUqMWmPqElBQUyDob79tMJBpzYPxQJt
pUeY/jZdk0br3tuQBrIQACfAiSRFkYAY9QcGd/KaWX2pLLyV4dNTIoNz/PSp58E3
VgNXOIqGAyBajWLrQFbtrnDvlOtBq5BScjnKutG8q5HyZg2k0FJNZSnXaefKoDrb
+IMnSrfxsKkJYB/VfiZ/YrIIlhVFDsvTOJqdLb5xe6bZk5+R8zMGUpvX
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:29 2026 by rpki-client