This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
File:                     FU_bBWSxN90ijzXfSvbkB4DvENY.mft (raw, json)
Hash identifier:          zwwp97tTA0HjcmM90LM6woU7E87b3FBFFc9b2KvJAh4=
Subject key identifier:   5C:69:05:AB:EF:FD:CB:9B:8E:CF:32:60:F8:AF:D4:10:BE:B4:75:2A
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Certificate issuer:       /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial:       087C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
Manifest number:          087A
Signing time:             Sun 25 Jan 2026 01:45:32 +0000
Manifest this update:     Sun 25 Jan 2026 01:45:31 +0000
Manifest next update:     Tue 27 Jan 2026 01:45:31 +0000
Files and hashes:         1: FU_bBWSxN90ijzXfSvbkB4DvENY.crl (hash: 90jmPrnRNOUaOewGizcV0XyvVc1r+GUO7LHpVAfojfo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683ABDAF, serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
        Validity
            Not Before: Jan 25 01:45:31 2026 GMT
            Not After : Jan 27 01:45:31 2026 GMT
        Subject: CN=697575bc-ecb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:64:76:9b:e5:1c:85:5b:a9:a6:01:a9:d4:
                    b2:e2:1c:a6:da:2d:f8:e8:84:f3:b1:10:71:58:1b:
                    1f:e6:73:74:4b:9c:52:64:23:29:10:38:cd:21:9f:
                    8d:f7:c3:d9:34:7c:90:e8:71:34:fb:03:73:c5:7d:
                    a9:39:38:31:21:7d:c6:51:79:1b:18:b0:88:78:c3:
                    12:ae:30:02:d0:bd:0d:1a:9f:cb:3b:7c:a4:66:06:
                    02:72:c6:74:95:6e:42:10:39:41:55:e1:59:35:25:
                    cd:bb:58:86:e0:99:90:44:a1:fc:13:e2:dd:45:76:
                    85:9b:54:13:85:29:71:af:c7:3e:71:02:03:96:06:
                    fb:3b:d3:a4:cd:dd:95:8b:03:77:ee:45:a0:7d:16:
                    98:4f:83:71:f5:16:fc:0d:db:35:fe:46:5b:be:1b:
                    38:88:b6:31:44:c3:f3:b3:e8:8a:40:b6:d2:74:be:
                    ef:eb:17:0c:1a:ca:fb:e8:19:e8:c3:50:2f:b0:f3:
                    0a:af:ab:8e:79:6b:3f:dc:75:e9:1b:2b:8d:92:c1:
                    17:6e:a7:58:e5:02:31:79:a1:16:42:46:0c:23:32:
                    74:d1:c1:95:33:50:6d:1a:85:da:8c:e9:ad:cc:bc:
                    cd:89:d1:f7:17:0a:fe:5d:a2:eb:5c:dc:05:1d:e4:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:69:05:AB:EF:FD:CB:9B:8E:CF:32:60:F8:AF:D4:10:BE:B4:75:2A
            X509v3 Authority Key Identifier:
                keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:64:18:04:6a:34:92:62:f5:ce:8e:58:bf:46:6a:e5:86:f4:
         74:0f:fa:d0:eb:26:e4:22:9a:04:05:59:3f:76:89:6a:11:98:
         c5:7c:b9:91:bd:df:bd:88:29:57:ed:3e:13:a8:1a:c7:d5:a3:
         91:30:a4:a4:62:12:10:47:3b:d7:72:66:07:01:a7:5e:38:0c:
         6c:58:9c:25:ce:2c:03:24:f4:10:0d:b4:75:b7:15:ce:c6:00:
         da:05:c0:e6:f2:88:f5:d7:27:5c:2b:5c:b2:28:0c:39:f7:81:
         89:3b:68:65:40:12:b0:74:61:d1:36:0f:a7:75:f1:50:52:4e:
         fe:0a:ae:79:84:83:8d:f9:af:47:05:a9:f0:fa:30:c8:d7:a5:
         6d:b9:b5:02:29:a6:1c:70:2e:1a:bd:4f:30:4a:9a:a3:ae:ff:
         b0:e3:7f:5c:a5:5d:86:20:76:9a:8f:c6:ce:e9:83:96:4f:33:
         e8:be:af:fe:c3:a9:0b:03:e8:2e:ac:d0:db:da:4f:44:e6:05:
         91:62:a7:5e:e4:ce:a3:e4:82:dd:92:2f:c1:7c:45:a7:86:4b:
         f4:f8:52:8c:c9:34:8d:b8:ff:a3:27:d8:0d:87:02:ca:1f:ab:
         54:78:ea:35:a5:45:47:b3:4d:76:e4:64:7d:14:7e:62:2c:4d:
         fb:dd:ac:63
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODNBQkRBRjExMC8GA1UEBRMoMTU0RkRCMDU2NEIxMzdERDIyOEYzNURGNEFGNkU0
MDc4MEVGMTBENjAeFw0yNjAxMjUwMTQ1MzFaFw0yNjAxMjcwMTQ1MzFaMBgxFjAU
BgNVBAMTDTY5NzU3NWJjLWVjYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTkGR2m+UchVuppgGp1LLiHKbaLfjohPOxEHFYGx/mc3RLnFJkIykQOM0h
n433w9k0fJDocTT7A3PFfak5ODEhfcZReRsYsIh4wxKuMALQvQ0an8s7fKRmBgJy
xnSVbkIQOUFV4Vk1Jc27WIbgmZBEofwT4t1FdoWbVBOFKXGvxz5xAgOWBvs706TN
3ZWLA3fuRaB9FphPg3H1FvwN2zX+Rlu+GziItjFEw/Oz6IpAttJ0vu/rFwwayvvo
GejDUC+w8wqvq455az/cdekbK42SwRdup1jlAjF5oRZCRgwjMnTRwZUzUG0ahdqM
6a3MvM2J0fcXCv5doutc3AUd5G9HAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXGkF
q+/9y5uOzzJg+K/UEL60dSowHwYDVR0jBBgwFoAUFU/bBWSxN90ijzXfSvbkB4Dv
ENYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzQUJELzRFRThDNzQ2N0Q0QzExRUFCQjIwMTY0Q0Y4QUVBMjI4L0ZVX2JC
V1N4TjkwaWp6WGZTdmJrQjREdkVOWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZVX2JCV1N4TjkwaWp6WGZTdmJrQjREdkVOWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODNBQkQvNEVFOEM3NDY3RDRDMTFFQUJCMjAxNjRDRjhB
RUEyMjgvRlVfYkJXU3hOOTBpanpYZlN2YmtCNER2RU5ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWZBgEajSSYvXOjli/RmrlhvR0D/rQ
6ybkIpoEBVk/dolqEZjFfLmRvd+9iClX7T4TqBrH1aORMKSkYhIQRzvXcmYHAade
OAxsWJwlziwDJPQQDbR1txXOxgDaBcDm8oj11ydcK1yyKAw594GJO2hlQBKwdGHR
Ng+ndfFQUk7+Cq55hION+a9HBanw+jDI16VtubUCKaYccC4avU8wSpqjrv+w439c
pV2GIHaaj8bO6YOWTzPovq/+w6kLA+gurNDb2k9E5gWRYqde5M6j5ILdki/BfEWn
hkv0+FKMyTSNuP+jJ9gNhwLKH6tUeOo1pUVHs0125GR9FH5iLE373axj
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:36 2026 by rpki-client