This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          RbZslh1+JsNm87tfXg2N+VAJLQQBi83WLiM00/uUu9w=
Subject key identifier:   02:E4:02:FF:8E:7B:B1:6B:E5:7E:24:AB:4D:C7:2F:88:AF:64:C8:24
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0298
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0296
Signing time:             Sun 25 Jan 2026 04:12:18 +0000
Manifest this update:     Sun 25 Jan 2026 04:12:17 +0000
Manifest next update:     Tue 27 Jan 2026 04:12:17 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: dGNnQJ99d5hnL1DXQW4kgphOdXQKsmlRkyVf3Nku8kE=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Jan 25 04:12:17 2026 GMT
            Not After : Jan 27 04:12:17 2026 GMT
        Subject: CN=69759822-6946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:75:b9:46:f5:fa:21:36:78:cc:13:dc:f8:dc:
                    c0:71:82:99:30:38:90:04:6e:d6:c1:96:40:8d:37:
                    20:c2:fd:0a:86:c4:ef:ac:d7:d3:8e:31:0d:9e:2b:
                    21:c5:46:a3:e4:75:59:21:81:47:c4:79:d1:5c:f6:
                    ff:18:5c:ae:32:4c:ae:71:ea:3c:4f:79:2d:45:aa:
                    7a:34:5f:56:38:39:7e:33:75:07:63:2f:a9:0e:57:
                    f2:a5:8d:ff:db:69:2d:34:2d:bb:5a:ac:6c:2b:7a:
                    32:c7:a1:64:56:2d:1a:16:74:19:73:30:c5:20:2a:
                    a1:86:d8:7b:0f:b5:44:74:73:42:d9:cd:60:2c:43:
                    93:ca:d0:ff:4e:25:40:c5:cf:75:d5:29:f7:fa:bd:
                    94:15:0b:f5:e2:1c:c9:ca:70:f8:6a:e3:cf:54:e0:
                    08:75:45:27:21:84:ac:5f:88:3b:e3:3f:9e:2e:1f:
                    18:d6:3b:ce:e2:8a:fa:81:4e:8d:36:32:e7:c5:ba:
                    ec:5b:75:ff:17:dc:9e:5a:e9:35:83:b8:97:74:ef:
                    2b:c0:49:af:a7:4f:12:30:14:af:87:1d:54:35:06:
                    e8:bf:2e:c5:da:80:d3:d7:e2:60:71:03:b6:99:4d:
                    e1:91:3a:79:0e:c7:93:79:7b:be:18:e2:1a:0f:94:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E4:02:FF:8E:7B:B1:6B:E5:7E:24:AB:4D:C7:2F:88:AF:64:C8:24
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:78:61:ec:a3:7a:8f:df:9e:f9:74:0b:60:03:e5:b4:98:4e:
         66:3a:1b:3d:e9:be:8f:b4:89:1d:99:dd:94:94:90:31:62:e9:
         38:a1:63:c8:67:d0:6e:cd:52:c4:02:70:64:07:ee:1e:74:46:
         13:8a:87:02:53:74:69:16:37:a2:55:5e:50:c4:19:75:c8:8a:
         d8:6c:c2:ed:9c:50:fd:d3:98:40:5a:f8:bf:db:d2:46:f7:ec:
         ae:e8:b3:8a:bf:95:62:87:02:bc:b0:5b:dd:e5:ee:b8:6a:e4:
         bc:28:d4:76:19:80:98:d7:fb:f5:10:78:ca:41:b4:8a:14:c3:
         27:22:43:74:49:89:5b:92:bc:51:65:0e:fd:35:64:76:1b:32:
         7e:c9:51:73:f4:15:b8:ca:68:9f:9f:bd:8d:a2:f1:42:7a:6d:
         7d:6a:61:d8:99:d0:fa:88:8d:3a:e6:d2:6c:cc:f1:e4:b3:66:
         3c:a8:f1:41:76:34:7c:51:74:6c:2a:ad:20:2a:6d:28:f5:ca:
         e1:58:3d:25:01:7f:59:51:56:60:d3:14:60:19:c1:22:b8:30:
         88:e9:c3:75:fb:33:06:23:32:1c:72:fd:bb:a1:f1:55:79:c9:
         ed:5f:d5:e3:84:b7:07:23:48:3f:14:a8:8f:4e:14:b6:24:87:
         84:60:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:59 2026 by rpki-client