This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
File:                     8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft (raw, json)
Hash identifier:          iTm8OBKXADwq8Va7LgFc3mZD6usggJb6c65LpK+5j1g=
Subject key identifier:   C7:18:93:79:C0:19:53:53:99:3D:85:EF:75:93:12:D5:28:6C:9A:1D
Authority key identifier: F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
Certificate issuer:       /CN=F36952BDAF/serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
Certificate serial:       0438
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
Manifest number:          0434
Signing time:             Sun 25 Jan 2026 03:21:36 +0000
Manifest this update:     Sun 25 Jan 2026 03:21:35 +0000
Manifest next update:     Tue 27 Jan 2026 03:21:35 +0000
Files and hashes:         1: 8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl (hash: yTiECeEcYfjW9xMgmMF8CzWvIPx5hwr2w/zXAMSUIck=)
                          2: 093B0E90C8FB11ED98CB97FAF1222468.roa (hash: vpXXt/ow+0lo+USnVnwFlT861El/Od59M/k7eEJfBuw=)
                          3: 0FBDFAD2EBE711EF89D53E68762E951A.roa (hash: 6Dfy+9J8yBBKOweYOTc8ZUkbc7ToAul3fWIXBr+Dw4o=)
                          4: 2FE9EF56EADD11EFAC74BFAC762E951A.roa (hash: HLKkizSsB2c+O77nDgoWRtkYlhtLSST5s6FWSRZ6u9E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36952BDAF, serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
        Validity
            Not Before: Jan 25 03:21:35 2026 GMT
            Not After : Jan 27 03:21:35 2026 GMT
        Subject: CN=69758c40-3008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:a8:f7:ec:2e:83:a5:ff:84:ab:43:c9:87:
                    03:93:bf:8b:3d:94:92:e9:f8:92:4b:08:1e:2b:a5:
                    9c:8e:ab:48:5b:aa:37:7a:d8:51:8a:13:88:75:88:
                    b0:34:b0:4e:b5:48:db:b8:a7:0f:85:ef:3d:66:ec:
                    95:b5:d5:1c:20:58:f3:9a:45:6b:3d:16:40:ac:c4:
                    9c:67:f6:e0:8e:f8:21:94:0c:80:61:5a:38:39:3f:
                    4c:9c:28:6a:cf:69:69:95:9b:68:b0:15:ee:7b:1a:
                    fa:01:cb:ef:81:8a:7e:51:94:4e:9a:18:73:67:7b:
                    79:ed:32:56:74:d7:84:65:61:6b:c7:91:62:ad:df:
                    2d:10:3a:46:c6:10:1b:bd:b8:bc:c2:b7:e2:46:bc:
                    1e:d8:46:af:bd:89:45:d2:e6:e9:8e:48:7e:89:25:
                    4c:55:a3:3f:cc:75:86:24:32:63:67:63:23:69:a5:
                    7c:52:71:42:36:cc:f3:f4:71:c0:d1:79:58:36:0f:
                    2c:8b:3b:87:b8:79:ee:9b:e6:cc:4c:24:f6:90:51:
                    d1:e9:7a:95:d1:e3:a5:63:29:88:14:a9:57:9b:bd:
                    82:2f:fe:b6:7e:88:55:dd:ea:14:ff:4a:c0:f1:e6:
                    d9:d5:70:d7:be:fb:f3:ca:53:be:f9:9c:6a:c9:e1:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:18:93:79:C0:19:53:53:99:3D:85:EF:75:93:12:D5:28:6C:9A:1D
            X509v3 Authority Key Identifier:
                keyid:F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:bd:b0:8d:2e:25:9f:cb:48:44:03:54:0c:0c:70:7e:bc:
         bd:fc:89:5c:27:1c:e6:08:f2:b1:8a:c4:21:29:b9:00:a2:19:
         07:e5:c6:9f:2b:c9:99:7c:ef:91:09:59:ba:ea:5a:0d:28:9c:
         7f:b9:11:05:86:7f:01:ab:76:49:37:bd:95:10:fc:0e:33:82:
         bb:f9:e4:f4:ba:3c:44:ce:b8:fa:45:3a:eb:24:27:d1:7e:b9:
         b9:8d:fa:a8:e2:24:1c:ad:dc:c8:40:09:6b:86:9d:52:99:9f:
         7b:4b:5d:c1:27:e4:e7:9a:2b:ee:44:5e:c4:af:38:99:64:78:
         10:4c:a5:3e:f8:6e:14:e3:70:6a:1e:66:10:e4:66:5b:f4:a9:
         ea:ed:08:01:15:98:38:be:54:5b:2a:39:89:68:f4:26:9f:c1:
         d2:d5:8a:b8:cf:bb:73:35:5a:62:31:b2:fb:da:68:e0:d0:47:
         49:9b:3c:11:74:5e:b3:17:64:c6:74:d3:df:93:23:21:73:98:
         57:ee:1d:ba:74:6b:fc:b8:dc:05:bc:25:ff:b8:29:b5:c7:56:
         57:b9:d0:af:33:f2:75:82:ae:03:7c:fe:f2:c0:c9:6a:a7:94:
         4c:62:55:c5:d2:23:2e:e3:72:26:76:dc:a4:49:94:7e:22:d0:
         ca:2a:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:45 2026 by rpki-client