This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
File:                     U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft (raw, json)
Hash identifier:          ZEghF9TycHkSWm3I7pqV/6kUYMVnA3KRRwzeUSh95Nk=
Subject key identifier:   42:A6:F9:5E:6D:10:36:9A:3B:9F:EE:34:49:7F:BC:05:0A:8E:DE:75
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
Manifest number:          22
Signing time:             Sat 24 Jan 2026 05:26:33 +0000
Manifest this update:     Sat 24 Jan 2026 05:26:32 +0000
Manifest next update:     Mon 26 Jan 2026 05:26:32 +0000
Files and hashes:         1: U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl (hash: CbpThAumIc3Wp7sv50rZ/47ro1XL74uKYvMunKxn4lI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 05:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 24 05:26:32 2026 GMT
            Not After : Jan 26 05:26:32 2026 GMT
        Subject: CN=69745808-719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:d3:5a:89:10:1c:39:02:0a:65:a3:df:53:
                    75:e5:d9:b4:46:1f:58:b4:70:d4:3d:29:56:5c:30:
                    30:5f:38:22:60:dd:28:db:fe:1d:d1:64:2c:19:e7:
                    a0:db:98:47:81:46:9d:9b:0d:6c:50:31:fe:90:f0:
                    15:55:c9:64:cd:b6:b7:75:1c:c1:b3:4c:75:b4:d3:
                    91:96:7e:41:57:1e:b9:63:92:27:6a:42:3d:7a:b3:
                    f9:ea:50:ad:1c:fe:bd:95:47:51:8e:83:86:37:a0:
                    66:23:9e:b5:19:da:e5:cf:95:48:54:89:b7:c2:0b:
                    60:a6:a5:84:c2:62:05:f4:4f:f9:43:85:9d:b7:aa:
                    6b:b4:20:4e:90:78:0a:86:35:4c:9f:77:d8:21:d4:
                    17:c6:da:02:f6:52:cf:e1:c7:8e:94:d8:fb:b6:d0:
                    f5:5d:9b:67:14:2c:71:0b:bc:96:00:61:6b:52:10:
                    6b:1f:6b:ed:ec:9f:bd:78:36:84:2c:a2:75:f5:bb:
                    6d:9c:26:db:15:14:de:c1:72:b0:8d:e9:e0:1a:c8:
                    ce:ad:28:19:72:b7:21:41:25:fa:a5:36:20:50:18:
                    12:67:cb:e3:30:4d:e5:7c:66:99:4f:e1:85:7e:d3:
                    30:05:5f:94:48:db:9e:c8:38:86:2f:1b:56:60:80:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A6:F9:5E:6D:10:36:9A:3B:9F:EE:34:49:7F:BC:05:0A:8E:DE:75
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:00:9a:e8:3d:e0:75:1e:bf:70:39:24:62:77:8a:c1:76:40:
         1d:75:c4:c4:40:4c:33:f9:d2:78:3c:7f:56:45:40:f0:ae:34:
         30:18:ff:20:3c:5e:fc:d5:5d:16:44:a3:9e:f1:18:f7:04:91:
         15:df:d4:8c:43:4b:63:18:41:77:f5:d7:f0:ee:53:36:ef:00:
         fc:ff:91:d7:1c:c5:7c:d7:62:f8:3b:35:9b:58:75:a4:a0:74:
         75:8c:58:72:72:ae:54:b3:1b:98:04:78:57:47:83:ff:9d:2b:
         2a:62:57:be:32:be:30:c2:c3:ab:e3:97:b5:31:b3:5e:22:bd:
         d0:63:ef:71:34:9d:5b:5d:76:93:83:83:bf:a2:f3:08:42:9f:
         79:0f:7f:86:65:c3:8c:a1:40:dd:fd:f9:05:35:90:0b:9d:5d:
         8f:94:28:50:3d:aa:9d:9d:6d:49:1a:22:6b:ac:0a:f4:3a:3b:
         6b:fa:a4:1d:6b:d7:14:9e:62:6b:b9:5b:45:40:2c:e2:b7:79:
         22:93:56:92:f8:e4:57:03:04:c6:92:3f:92:77:11:24:dc:0d:
         55:03:d9:93:db:b7:66:3d:76:6c:21:f9:59:cc:ea:66:66:06:
         a6:3f:11:fb:5a:9f:ea:68:f5:5b:9c:93:78:6f:be:fe:f3:af:
         47:fb:0f:75
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
MEIzNkFGMTEwLwYDVQQFEyg1M0MxRTZENDlGRDVBNjRFN0I2MDAxRjIyRTNGQTQy
QzcwREJBMzRFMB4XDTI2MDEyNDA1MjYzMloXDTI2MDEyNjA1MjYzMlowGDEWMBQG
A1UEAxMNNjk3NDU4MDgtNzE5YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVo01qJEBw5Agplo99TdeXZtEYfWLRw1D0pVlwwMF84ImDdKNv+HdFkLBnn
oNuYR4FGnZsNbFAx/pDwFVXJZM22t3UcwbNMdbTTkZZ+QVceuWOSJ2pCPXqz+epQ
rRz+vZVHUY6DhjegZiOetRna5c+VSFSJt8ILYKalhMJiBfRP+UOFnbeqa7QgTpB4
CoY1TJ932CHUF8baAvZSz+HHjpTY+7bQ9V2bZxQscQu8lgBha1IQax9r7eyfvXg2
hCyidfW7bZwm2xUU3sFysI3p4BrIzq0oGXK3IUEl+qU2IFAYEmfL4zBN5XxmmU/h
hX7TMAVflEjbnsg4hi8bVmCAG18CAwEAAaOCArgwggK0MB0GA1UdDgQWBBRCpvle
bRA2mjuf7jRJf7wFCo7edTAfBgNVHSMEGDAWgBRTwebUn9WmTntgAfIuP6QscNuj
TjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODBCMzYvRjVFREZBRTZERkQ2MTFGMDlBQkQ4REQ0REFFNEVDOUMvVThIbTFK
X1ZwazU3WUFIeUxqLWtMSERibzA0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVThIbTFKX1ZwazU3WUFIeUxqLWtMSERibzA0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4MEIzNi9GNUVERkFFNkRGRDYxMUYwOUFCRDhERDREQUU0
RUM5Qy9VOEhtMUpfVnBrNTdZQUh5TGota0xIRGJvMDQubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAC4Amug94HUev3A5JGJ3isF2QB11xMRA
TDP50ng8f1ZFQPCuNDAY/yA8XvzVXRZEo57xGPcEkRXf1IxDS2MYQXf11/DuUzbv
APz/kdccxXzXYvg7NZtYdaSgdHWMWHJyrlSzG5gEeFdHg/+dKypiV74yvjDCw6vj
l7Uxs14ivdBj73E0nVtddpODg7+i8whCn3kPf4Zlw4yhQN39+QU1kAudXY+UKFA9
qp2dbUkaImusCvQ6O2v6pB1r1xSeYmu5W0VALOK3eSKTVpL45FcDBMaSP5J3ESTc
DVUD2ZPbt2Y9dmwh+VnM6mZmBqY/Eftan+po9Vuck3hvvv7zr0f7D3U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:36 2026 by rpki-client