This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File:                     Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier:          bCOAwI/dX0ZLNqP2VOvN6/oT1MYIWQ2rW2kM0N/ZnoY=
Subject key identifier:   43:F6:04:19:38:11:80:9C:F3:97:0F:54:D2:6C:08:3D:9C:EF:F0:AC
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer:       /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial:       068F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number:          068C
Signing time:             Sun 25 Jan 2026 02:13:19 +0000
Manifest this update:     Sun 25 Jan 2026 02:13:18 +0000
Manifest next update:     Tue 27 Jan 2026 02:13:18 +0000
Files and hashes:         1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: 9rkmFUX3zcuzFOB5CTfXErl6/OXnJ0kwdEJZfJpNC6Q=)
                          2: E0505504C53611F09BAB2BC1DAE4EC9C.roa (hash: quGCMeMgrGs/I61IGIUq5ARCX8eAFzJjwoxXSU6rXcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
        Validity
            Not Before: Jan 25 02:13:18 2026 GMT
            Not After : Jan 27 02:13:18 2026 GMT
        Subject: CN=69757c3f-4d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:33:4b:a7:6b:80:90:b5:b3:9b:e6:50:a9:
                    98:f3:79:3d:13:33:56:c7:22:e6:9f:e4:d2:80:52:
                    90:b1:f1:0a:b3:5c:47:ef:ed:86:f1:31:a0:45:92:
                    c2:a2:2d:0e:fb:c1:63:eb:96:0f:70:73:f2:57:d0:
                    c3:17:6c:24:8f:66:8f:47:ea:60:ca:fb:6c:77:2d:
                    10:6e:62:59:d7:79:d3:b5:be:b8:2f:57:34:f4:27:
                    fd:34:ae:8c:5b:34:0f:fe:70:9a:84:c0:bf:80:9e:
                    c2:fa:58:6d:3a:90:e5:42:c0:31:6a:62:d8:be:db:
                    bc:c4:33:ed:bc:0a:ba:7c:97:85:d5:e7:c1:5f:d6:
                    cb:7c:66:ab:1e:dc:c2:5c:91:47:b1:90:e9:ad:7c:
                    d9:ef:23:36:b3:b1:92:b1:6f:54:2d:33:a4:13:dd:
                    d1:98:d6:09:e9:1e:5a:36:09:47:2d:31:2d:03:26:
                    7a:4d:af:1a:b0:23:55:58:60:f9:11:5e:ff:60:69:
                    f7:b1:78:09:e4:54:d0:60:65:4d:ce:68:8e:42:88:
                    65:96:a8:74:06:0e:d7:1a:a1:c6:22:60:f0:81:58:
                    4f:a6:0e:29:cb:9d:50:33:74:93:5f:2a:21:78:4c:
                    f5:61:93:91:0c:e3:5b:ec:60:ec:1b:3a:46:03:d4:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F6:04:19:38:11:80:9C:F3:97:0F:54:D2:6C:08:3D:9C:EF:F0:AC
            X509v3 Authority Key Identifier:
                keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:75:23:12:6b:16:3f:7e:42:b2:93:a0:0c:0e:63:c8:22:6b:
         5a:79:fe:be:77:18:dd:9c:1b:43:f6:cd:68:ea:33:fc:3d:1d:
         39:c8:94:c6:d3:02:90:84:1b:67:aa:d9:f3:f7:e8:df:0e:9c:
         09:71:0f:80:94:db:1a:90:c9:25:b0:64:74:40:eb:c7:2b:fe:
         2b:f7:a6:4b:8e:77:0a:d6:ba:48:b2:cd:eb:14:c2:1c:e4:cb:
         14:77:7e:ae:9a:27:b7:f7:0c:ac:a7:20:0c:ac:58:de:df:57:
         96:e9:e6:62:ee:c3:90:df:56:6c:41:b1:1c:b7:1b:3b:53:4b:
         33:ea:a7:a7:94:3a:51:17:34:32:f7:42:8b:8a:5f:b7:5b:37:
         58:ae:ab:b8:2e:6b:f4:f7:9d:ef:ae:0e:f2:92:95:88:62:fd:
         a8:37:00:38:55:06:4b:e1:88:2c:db:6b:73:3e:63:44:5a:7c:
         f3:27:c0:ea:20:61:55:fb:a2:e7:57:ca:76:df:ae:e0:c9:7b:
         53:3c:d0:49:d1:44:bd:f3:d1:a7:b9:7a:09:2c:8f:ec:91:63:
         59:71:70:0b:eb:a3:43:4b:8b:9d:c9:a5:0c:72:9d:7f:73:e8:
         9b:a3:da:c2:ec:ba:60:5b:11:ef:f9:66:58:5f:a4:9a:59:d8:
         64:e4:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:37 2026 by rpki-client