This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File:                     DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier:          R0nuT4AJC7ODYX71jiTU+wGf5yphyQmxeWDLDZvRK/0=
Subject key identifier:   75:11:92:3D:8D:7F:2E:6D:B1:3F:8E:7E:99:BA:0E:57:56:75:53:52
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer:       /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial:       0326
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number:          0325
Signing time:             Sun 25 Jan 2026 03:55:57 +0000
Manifest this update:     Sun 25 Jan 2026 03:55:56 +0000
Manifest next update:     Tue 27 Jan 2026 03:55:56 +0000
Files and hashes:         1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: cobOnWPGxY6t+XcbPQgJdvKWzDYomjEOsA69USbxSwg=)
                          2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369CA26AF, serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
        Validity
            Not Before: Jan 25 03:55:56 2026 GMT
            Not After : Jan 27 03:55:56 2026 GMT
        Subject: CN=6975944d-00ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:02:56:b8:e3:19:c7:5f:b1:b5:57:55:a9:
                    83:ee:c4:ad:3e:ad:51:b5:64:c2:fb:78:07:26:16:
                    62:9b:de:0d:b8:1b:d8:27:76:ca:45:39:5f:37:fa:
                    c3:76:72:69:da:0c:e3:5a:90:e6:b4:54:f6:de:cd:
                    9e:26:b2:42:da:6c:f3:b8:8c:91:1d:ee:35:d2:21:
                    48:06:de:72:63:82:92:fd:0e:27:d4:a2:2d:66:12:
                    df:a6:a8:97:e3:37:59:87:17:1f:98:cc:6e:82:30:
                    60:e6:f9:75:f9:09:a8:e8:f1:e0:e8:73:66:a1:42:
                    6d:7b:a6:c2:13:a2:c1:8a:2a:55:f9:b7:ca:a0:d7:
                    67:2a:39:a9:e5:4a:da:3b:d0:72:2a:d6:10:bf:a1:
                    a8:77:a1:8c:b2:46:b4:df:a1:ca:4a:bb:b2:89:2a:
                    2e:3e:80:74:ea:87:8f:13:42:3f:3c:db:d6:60:cb:
                    52:c3:fe:7e:f1:02:1c:a1:74:24:b9:57:97:7b:ac:
                    36:ef:86:c1:06:04:a1:5d:13:a9:3d:42:67:ed:e5:
                    ba:01:43:81:54:76:cb:11:2b:32:8c:d2:8c:ac:70:
                    cf:ba:98:b8:80:b2:43:81:bc:5d:d1:10:a3:9b:6f:
                    56:6c:e2:b8:fd:ab:3e:2a:f5:2f:bc:ee:69:45:84:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:11:92:3D:8D:7F:2E:6D:B1:3F:8E:7E:99:BA:0E:57:56:75:53:52
            X509v3 Authority Key Identifier:
                keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:54:c4:dd:fe:29:d6:6b:c1:2a:b6:86:8f:3f:6d:4d:89:
         4d:90:4f:48:ee:88:d9:82:b3:7a:20:b1:0a:0b:5b:7f:46:9f:
         9c:d1:be:d1:85:f7:fe:5e:c9:3e:14:a0:33:69:ff:51:1b:8d:
         25:42:c0:cc:e6:8e:59:67:c8:14:62:d6:a0:0a:f8:0f:da:45:
         57:f9:2e:93:58:7e:b1:a9:88:62:00:21:6f:db:72:49:f9:4e:
         7a:f5:61:14:cd:6c:5a:2c:27:2e:35:a2:f8:a5:8a:08:ab:56:
         05:03:8e:1a:b6:2c:e5:90:d7:cd:49:5b:45:c9:dd:62:33:33:
         b6:8a:5b:55:a9:b0:e3:ec:cc:41:04:9e:a6:7d:32:03:08:88:
         b3:22:93:93:55:2b:06:53:9b:0a:d6:cf:2b:5a:9b:65:bd:7e:
         89:f1:fa:b5:bf:3f:39:7e:6e:02:ee:07:ab:da:b5:bf:56:63:
         8a:5f:01:c4:88:b7:e6:40:1f:72:0b:39:67:bc:32:9b:cb:fa:
         79:ab:a8:2e:c6:ec:17:7d:af:2a:b3:5f:b0:f2:7a:d1:d7:b7:
         e0:87:c8:a5:fc:9f:61:98:ab:1c:a6:0a:4a:a9:f0:c2:fd:eb:
         a1:cb:79:a9:ee:7a:78:1d:44:4b:ff:11:43:32:fa:9d:a7:94:
         d0:60:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:17:54 2026 by rpki-client