This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          nYPqvw7pwb+MwWPGq3kV0VIhjhBpG8k4FL1GAW7njMA=
Subject key identifier:   FC:C4:0B:91:8D:11:E0:6D:83:85:16:28:1E:19:29:86:A1:7F:91:23
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       07E2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          07E1
Signing time:             Sun 25 Jan 2026 01:54:32 +0000
Manifest this update:     Sun 25 Jan 2026 01:54:31 +0000
Manifest next update:     Tue 27 Jan 2026 01:54:31 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: tkDpziMNS3+HrOAVukqef1Ju3cvTrn1GkBLhnDWkmYY=)
                          2: 315816DECF5F11ECA89077C9F1222468.roa (hash: nXuxmOxMY30f7U13vd8vjgc0lhwJby8Cd+gymuJClmU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: Jan 25 01:54:31 2026 GMT
            Not After : Jan 27 01:54:31 2026 GMT
        Subject: CN=697577d8-5277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:d4:34:26:99:a7:1e:5c:03:4a:3a:c9:1b:
                    2e:0d:cc:1d:f1:d3:cc:f7:96:dc:2f:24:78:db:d3:
                    53:e1:b1:f2:e2:c6:71:67:62:74:5e:7f:c5:26:dd:
                    c9:a1:a0:6b:37:71:49:0c:76:b8:28:8e:4c:3a:c1:
                    02:af:cc:cf:7f:18:41:20:d2:01:f4:68:3b:79:32:
                    d1:9f:68:83:27:e0:7a:ef:10:49:42:37:ed:25:e7:
                    8b:34:b7:0a:2b:26:a8:24:16:cb:6d:16:68:d8:03:
                    32:93:a5:bf:60:a6:1e:2b:51:23:25:f0:7e:70:1f:
                    73:cb:d4:31:50:21:89:a2:fd:52:6b:cb:de:2d:96:
                    76:4e:8c:b9:4f:c2:d9:f0:95:ae:2a:b1:18:2e:8d:
                    23:b7:1e:95:80:93:cd:4f:ef:1b:59:06:e9:3b:aa:
                    0b:32:7d:e5:42:86:4a:f9:6d:18:6d:8e:79:15:6e:
                    ba:10:5a:5a:89:7f:07:dc:6d:e1:4b:46:a5:79:00:
                    15:09:9a:36:88:28:f3:71:02:cf:4e:f6:4f:57:24:
                    2a:e7:84:b6:8b:9f:b1:58:0a:6e:3e:76:b0:78:33:
                    0a:bf:c9:70:88:7d:f1:45:06:8a:af:5e:84:7e:9c:
                    9e:fb:1e:d5:b6:e8:b5:32:b3:23:9c:63:de:ed:6b:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C4:0B:91:8D:11:E0:6D:83:85:16:28:1E:19:29:86:A1:7F:91:23
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e5:ba:d9:b8:29:a6:30:2f:32:7a:6d:40:f3:f0:19:a3:12:
         df:14:37:4a:c1:48:74:27:c8:ad:87:ec:0c:2f:a8:41:bd:00:
         d6:83:7c:7a:fe:a8:0f:e2:7b:b5:75:c1:69:8d:7a:c5:1a:09:
         22:47:40:b4:7b:1b:aa:6d:e1:31:a9:dc:ef:33:5b:b6:7f:09:
         37:c5:3c:1f:22:7c:a6:9f:f1:69:a2:90:de:aa:16:dd:32:f9:
         d2:df:e5:29:24:fc:cc:dc:04:53:60:af:13:ef:72:ac:2a:78:
         36:2f:09:f4:21:05:df:56:91:42:eb:54:f9:75:ba:94:56:6d:
         6e:74:e7:2b:8b:eb:16:83:bd:c3:26:59:83:75:e0:aa:12:20:
         97:45:92:1d:f4:a6:e5:52:1f:92:31:2c:86:d0:2a:14:db:f5:
         84:45:4e:85:75:48:6a:3e:d7:9c:06:06:79:dd:cc:b8:b8:aa:
         87:76:2d:31:33:73:00:36:13:d4:1b:fd:b0:85:11:d8:0e:f6:
         56:ec:c4:88:95:a0:ea:d8:46:98:ac:0f:3f:47:10:39:29:50:
         7f:7d:9e:72:6b:69:dd:58:33:4e:4a:6d:ec:1b:12:c8:bf:b3:
         13:6d:f7:7d:cf:78:25:28:40:96:f8:e5:9d:80:0c:ab:3d:9e:
         3a:55:22:03
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM3MzhSSTExMC8GA1UEBRMoNzRGRDhBOTlCOThGN0M1OTgyNzI1NzhGNUVBMTRG
MTIxODk3QTk1QjAeFw0yNjAxMjUwMTU0MzFaFw0yNjAxMjcwMTU0MzFaMBgxFjAU
BgNVBAMTDTY5NzU3N2Q4LTUyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxiNQ0JpmnHlwDSjrJGy4NzB3x08z3ltwvJHjb01PhsfLixnFnYnRef8Um
3cmhoGs3cUkMdrgojkw6wQKvzM9/GEEg0gH0aDt5MtGfaIMn4HrvEElCN+0l54s0
tworJqgkFsttFmjYAzKTpb9gph4rUSMl8H5wH3PL1DFQIYmi/VJry94tlnZOjLlP
wtnwla4qsRgujSO3HpWAk81P7xtZBuk7qgsyfeVChkr5bRhtjnkVbroQWlqJfwfc
beFLRqV5ABUJmjaIKPNxAs9O9k9XJCrnhLaLn7FYCm4+drB4Mwq/yXCIffFFBoqv
XoR+nJ77HtW26LUysyOcY97ta0ZfAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU/MQL
kY0R4G2DhRYoHhkphqF/kSMwHwYDVR0jBBgwFoAUdP2KmbmPfFmCclePXqFPEhiX
qVswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNzM4Lzg5NkJFNzhBRUVBOTExRUE4RkRDRkIxQkY4QUVBMjI4L2RQMktt
Ym1QZkZtQ2NsZVBYcUZQRWhpWHFWcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2RQMkttYm1QZkZtQ2NsZVBYcUZQRWhpWHFWcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUM3MzgvODk2QkU3OEFFRUE5MTFFQThGRENGQjFCRjhBRUEy
MjgvZFAyS21ibVBmRm1DY2xlUFhxRlBFaGlYcVZzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD5brZuCmmMC8yem1A8/AZoxLfFDdKwUh0
J8ith+wML6hBvQDWg3x6/qgP4nu1dcFpjXrFGgkiR0C0exuqbeExqdzvM1u2fwk3
xTwfInymn/FpopDeqhbdMvnS3+UpJPzM3ARTYK8T73KsKng2Lwn0IQXfVpFC61T5
dbqUVm1udOcri+sWg73DJlmDdeCqEiCXRZId9KblUh+SMSyG0CoU2/WERU6FdUhq
PtecBgZ53cy4uKqHdi0xM3MANhPUG/2whRHYDvZW7MSIlaDq2EaYrA8/RxA5KVB/
fZ5ya2ndWDNOSm3sGxLIv7MTbfd9z3glKECW+OWdgAyrPZ46VSID
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:22 2026 by rpki-client