This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          NW8agMtIokP/LbmvwKp0aXtx4a+S6uFD35/sGbBGuwg=
Subject key identifier:   76:8A:55:82:64:F3:C8:66:AF:64:21:29:BC:55:32:60:2B:C5:DF:CB
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       02A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          029E
Signing time:             Sun 25 Jan 2026 04:12:31 +0000
Manifest this update:     Sun 25 Jan 2026 04:12:30 +0000
Manifest next update:     Tue 27 Jan 2026 04:12:30 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: yt7onBiuq3u0r/g9SHBTQxnW45i43/DKxayB7q+9XZc=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Jan 25 04:12:30 2026 GMT
            Not After : Jan 27 04:12:30 2026 GMT
        Subject: CN=6975982e-ae6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:5d:1b:07:c9:41:4e:0b:b1:45:7f:f6:74:
                    28:bc:d1:b4:93:6f:32:77:73:71:d0:fd:39:12:cd:
                    02:4f:65:e3:17:5a:cc:61:4c:33:9d:e9:ef:49:ad:
                    fe:f0:d7:c6:7d:4c:e3:98:79:d3:b2:36:87:66:9b:
                    00:c8:db:15:17:47:55:66:9d:8d:cc:d1:0c:79:95:
                    e0:59:ac:dc:86:76:40:7a:7f:46:22:45:74:e5:56:
                    96:3b:09:c9:b5:65:71:15:05:62:8e:1e:19:e7:53:
                    9a:5b:a1:87:85:77:c4:8d:d8:36:5e:ce:4d:2d:6e:
                    66:23:9b:61:14:e0:8a:8c:e5:96:d3:d1:2e:43:75:
                    14:7b:b8:a8:8b:ff:2e:28:d3:d6:78:d7:51:89:b0:
                    98:6e:25:5d:cf:11:61:ca:1d:71:46:55:72:94:ac:
                    91:56:c8:e6:b9:46:a1:c9:80:d7:d3:52:fb:a9:d7:
                    ce:15:4d:90:a4:6b:d8:11:95:be:fe:00:3f:53:c1:
                    30:49:8d:64:78:4c:58:94:0d:f3:f5:c3:cc:2c:a7:
                    ab:4d:f3:ca:cf:bf:e3:30:2a:9e:48:73:c2:99:d7:
                    f6:20:a3:66:86:d3:5b:e0:b3:9f:76:13:39:dd:da:
                    f3:ba:21:74:2d:a1:f3:21:18:0e:4f:d1:98:64:34:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:55:82:64:F3:C8:66:AF:64:21:29:BC:55:32:60:2B:C5:DF:CB
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:0e:5a:08:ba:c0:42:b1:fa:02:ca:d4:4b:48:bf:8e:e0:
         e2:b1:16:cc:75:c7:a3:4e:2f:42:4d:01:84:2f:85:4c:9c:42:
         1b:a9:82:4d:14:b2:02:c5:4d:8c:79:82:7a:8b:6b:a0:3c:b0:
         8a:e7:8f:1c:ff:a7:46:59:30:00:b4:ad:3a:b4:9f:35:fc:83:
         8b:4c:ca:f6:2e:12:47:35:31:3f:34:b1:78:44:7f:41:23:6a:
         08:46:b1:6f:10:6b:8a:97:c6:b8:6d:e9:55:c6:c2:26:56:84:
         29:ee:9f:92:a6:db:85:d4:8e:e9:9e:97:27:21:ec:ae:a1:f8:
         f2:dd:42:4d:f0:ac:b6:90:ff:8c:ef:28:63:9d:09:50:81:bf:
         fe:67:06:ca:75:98:36:0a:73:1e:0d:15:dc:3d:dd:fb:6c:4a:
         cf:ec:4e:d5:80:2b:2a:c6:d1:11:f8:1b:93:1e:31:d5:4b:4c:
         43:09:e3:07:a2:81:7e:38:d8:65:33:1b:f7:77:59:51:5b:55:
         36:f5:90:e0:c1:9d:f6:71:cd:8e:6e:6d:2a:8e:19:3f:54:b3:
         e8:6a:09:21:b4:dd:0a:68:16:d3:c4:f2:3c:0f:7f:2f:cf:69:
         98:74:49:4d:d5:0c:86:af:bb:58:56:9f:74:db:88:9c:1e:ca:
         a1:cd:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:21:54 2026 by rpki-client