This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
File:                     rwNfxJBpXa-3lvnHN19zijES_Ds.mft (raw, json)
Hash identifier:          rdAX34YQm6g9STGy7hucu/nEtOYkiRMQn6p4EgQ4RAk=
Subject key identifier:   7C:D4:F4:62:3B:66:13:5E:B9:82:B7:AD:F7:14:D5:0E:85:5E:C0:48
Authority key identifier: AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
Certificate issuer:       /CN=F36A2303AR/serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Certificate serial:       08C0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
Manifest number:          08B8
Signing time:             Sun 25 Jan 2026 01:42:50 +0000
Manifest this update:     Sun 25 Jan 2026 01:42:49 +0000
Manifest next update:     Tue 27 Jan 2026 01:42:49 +0000
Files and hashes:         1: rwNfxJBpXa-3lvnHN19zijES_Ds.crl (hash: pEnXwkUdhazLEL0R3Lio4Gf8JAYbnrMsb6SLpNnKYCU=)
                          2: 21886F0EB6A911EA91807C30F8AEA228.roa (hash: TV2ABY5r46tKbY4VJ67UTwENeFi5pRfNFMuvJZMh1Ig=)
                          3: F9049C56B6A811EAB7AD5330F8AEA228.roa (hash: puJnHm1yKIQzNnKozYu1/czI3lgLvuYWXkZKSjpCIAg=)
                          4: 66014E80B6A911EA8CCCD130F8AEA228.roa (hash: Acfk0sMfwafASajx4yozyWp5SI9yDQ3iqQnRyzzNIjk=)
                          5: C826A9BACBE011EA8AB11F1BF8AEA228.roa (hash: S2bChUKGsfQAiJQ183YhdQy2q5jddxkEYopSyi4QCaQ=)
                          6: 443B4FD0B6A911EA8BB19A30F8AEA228.roa (hash: DtlptNQu9HFFByv5u/iYfT6/AVvlDXCMfH1RWr1fnig=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                          rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AR, serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
        Validity
            Not Before: Jan 25 01:42:49 2026 GMT
            Not After : Jan 27 01:42:49 2026 GMT
        Subject: CN=6975751a-23d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:50:4c:50:6c:36:48:62:a9:d2:2c:0e:ae:
                    e8:c8:cd:df:e5:1c:e0:bc:ce:ff:ca:32:d5:c1:91:
                    dc:ce:a9:02:7d:02:1d:8b:5d:31:7e:0d:f0:7d:97:
                    22:be:b2:6e:15:1d:af:8c:c3:0d:1b:39:86:32:b4:
                    a9:d2:d0:b3:94:0a:80:a5:8d:67:66:64:9a:35:b1:
                    f3:a1:a3:ef:c4:42:99:9a:ed:84:fc:f9:c3:6e:7a:
                    15:ca:07:6c:12:56:5a:93:dd:bc:21:74:dc:53:a5:
                    cc:4a:cc:2d:db:7a:10:3b:bf:4a:24:73:8b:b1:9f:
                    47:fd:0b:11:0e:b9:30:3f:aa:03:d7:51:e6:7c:7a:
                    f9:3e:64:b0:4f:e9:f3:73:61:1a:69:63:1d:04:cc:
                    10:b6:f9:bf:00:94:e8:43:07:21:5a:22:a6:bc:8b:
                    95:14:d3:ee:89:72:3a:e9:21:9f:5d:77:bb:e6:b2:
                    03:15:db:37:6a:c1:ea:29:84:27:66:68:14:08:50:
                    08:51:da:8f:d6:2d:ef:c9:09:13:5c:ba:af:30:56:
                    22:87:e3:84:54:95:8f:9c:d4:08:d4:6c:b2:e7:d5:
                    40:b6:2f:86:5e:6b:a3:29:53:c7:59:51:2b:c4:10:
                    a3:45:2c:ee:9d:14:52:dd:70:7c:b7:2d:99:a9:97:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D4:F4:62:3B:66:13:5E:B9:82:B7:AD:F7:14:D5:0E:85:5E:C0:48
            X509v3 Authority Key Identifier:
                keyid:AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:6e:87:f7:fa:28:b7:8c:c8:f3:f5:2e:e9:d2:89:53:db:
         0b:70:6e:cd:59:b8:e2:ce:7d:35:72:b2:e6:5d:81:7e:b2:e3:
         a8:48:fe:2b:b3:b1:7f:f8:f5:7d:79:6c:05:55:3b:fa:05:80:
         2b:2b:87:b0:b0:b6:18:7a:49:1f:49:29:f7:a6:83:2e:56:de:
         1f:0e:2f:21:63:26:a6:31:94:93:ed:fa:f5:a6:48:0e:cf:68:
         a2:f5:73:5d:d8:db:89:c6:4b:e4:c6:0d:fc:92:1e:8b:23:58:
         cf:e9:0b:82:6e:a5:f7:04:76:9b:10:59:b6:96:e9:d6:e6:05:
         bd:a2:d1:d9:6d:ea:98:1b:2e:b3:e2:97:16:c8:53:a9:1d:d2:
         be:58:9a:c5:38:18:0c:9f:dd:32:4b:ec:51:b5:d1:bc:08:da:
         ab:fe:70:5e:7d:42:f9:2b:86:8e:80:b7:47:c3:47:37:ee:9f:
         a8:4e:28:bc:be:2d:c5:eb:c4:eb:93:11:f9:9f:71:56:fa:de:
         aa:ec:37:2c:08:a9:25:fb:0c:bd:71:52:e2:e0:ad:f6:43:4d:
         ce:40:cb:b1:4b:03:2c:02:b0:e5:74:07:58:dd:23:64:78:89:
         07:eb:68:89:90:39:3a:eb:6a:9a:83:0d:c7:68:99:12:01:f4:
         b3:75:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:27:28 2026 by rpki-client