This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          qUGC8YcP1P3Vs1YYnvCJfUZqMrkZRx4Xv8tfqBfKswk=
Subject key identifier:   23:49:CD:94:15:2A:EF:AF:BD:F1:F5:CD:A9:00:CA:F0:3C:EF:F7:0F
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       08B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          08AD
Signing time:             Sun 25 Jan 2026 01:42:25 +0000
Manifest this update:     Sun 25 Jan 2026 01:42:24 +0000
Manifest next update:     Tue 27 Jan 2026 01:42:24 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: HIAjmnFqF1tzfD08G/UaJcvSil2AG4f0vNE/BN+gWSU=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: Jan 25 01:42:24 2026 GMT
            Not After : Jan 27 01:42:24 2026 GMT
        Subject: CN=69757501-1143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:95:e9:f2:ef:3b:7e:ff:7d:cf:15:3b:b8:64:
                    4c:11:47:a9:ae:01:91:9d:d1:ca:a2:af:e5:ff:c0:
                    0a:1a:21:81:4d:c1:a4:a1:19:ff:b7:66:a2:22:3d:
                    c8:c9:7a:6e:10:34:f8:51:e8:a9:11:c6:fd:93:75:
                    85:9d:cc:29:e2:c8:cb:71:2c:f4:da:89:d4:87:67:
                    f1:9e:20:40:a1:df:ab:b6:5d:c0:29:c6:4d:bb:0c:
                    82:6f:e0:ff:5c:16:7a:48:01:30:5e:73:c0:e4:40:
                    2f:c5:83:af:e4:af:cd:a1:a3:67:23:ea:1d:c2:c4:
                    89:39:03:c4:8f:80:4f:46:db:c6:80:de:56:a2:ee:
                    08:e2:f0:54:ea:0d:67:01:7a:31:97:ea:7d:20:a8:
                    60:e7:7e:8e:e0:ad:92:68:05:d8:d3:6e:6e:f3:a5:
                    ef:0d:b2:15:21:3b:ed:9d:40:5d:b3:ae:dc:aa:1a:
                    c4:07:a9:1b:0a:06:c1:1d:b5:3c:b6:ec:68:46:62:
                    4e:b5:21:96:ff:80:31:c3:11:87:92:8d:9f:45:f6:
                    cc:d0:25:51:95:98:f4:06:06:b7:36:e4:bc:5a:0e:
                    34:ab:07:45:6f:c7:fb:13:52:54:2d:a5:13:34:39:
                    d9:6f:15:2e:bf:38:c2:91:ba:92:8b:4f:e5:3d:1d:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:49:CD:94:15:2A:EF:AF:BD:F1:F5:CD:A9:00:CA:F0:3C:EF:F7:0F
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:4d:2f:15:48:a7:74:16:02:88:51:ff:da:c5:69:c3:87:
         04:e3:fa:e8:65:c1:29:7f:01:b0:5a:eb:19:27:a8:48:a3:de:
         27:ff:74:07:fe:af:f7:2a:35:b8:91:c4:2e:49:c9:57:d6:7d:
         24:88:f8:06:7e:90:04:e0:3b:71:69:19:18:ef:55:62:70:c1:
         60:1e:fd:36:a3:6a:bd:e2:da:c8:8e:54:b2:d1:ae:44:20:b8:
         7f:32:47:b2:62:76:56:fe:1b:46:6d:5a:d1:ea:2d:7e:fa:1f:
         04:6c:29:cd:fd:8f:f6:73:a1:68:0d:09:25:e7:b8:77:16:50:
         65:dd:dc:28:ef:ce:23:83:5f:30:4d:d2:ca:9e:20:8a:aa:47:
         87:17:5f:20:c0:87:49:e5:24:9f:d6:2b:ab:51:70:24:3c:9e:
         df:6b:b7:17:df:ae:40:6e:83:6e:b9:44:6c:9f:63:76:54:1c:
         c4:f3:4b:39:7f:80:fc:6e:35:73:c1:ad:14:16:d4:d9:f1:a7:
         1e:26:81:57:3c:41:ac:76:75:01:e5:77:40:fe:65:d4:ca:d4:
         f4:10:a7:72:2e:5a:90:41:9d:18:d4:62:15:ae:d8:e9:44:e8:
         22:ab:2b:b4:58:70:bb:b6:6d:ff:2d:a1:06:0b:06:71:b0:8c:
         1d:02:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:02 2026 by rpki-client