This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          lblmKRGsT5lJU2AYP/n9ccIQxXpF+tMIQiLiXSJzQH0=
Subject key identifier:   BB:4F:D9:5A:DE:72:B5:AD:76:32:C0:73:FC:E2:C6:84:2A:CA:86:9C
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       050F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          0508
Signing time:             Sun 25 Jan 2026 02:58:04 +0000
Manifest this update:     Sun 25 Jan 2026 02:58:03 +0000
Manifest next update:     Tue 27 Jan 2026 02:58:03 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: 67e5mmwEAHQ57kn1Tg402IRBpuQpe6HtjVUnIsPhm5E=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Jan 25 02:58:03 2026 GMT
            Not After : Jan 27 02:58:03 2026 GMT
        Subject: CN=697586bc-d8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:3a:7a:51:e0:65:2c:d9:ca:a9:df:32:27:
                    88:c1:42:eb:f5:94:38:c6:5e:b6:2e:57:4f:1b:ce:
                    f6:22:29:e1:e4:ed:d6:6b:34:32:52:05:87:76:72:
                    71:dd:38:12:80:46:cb:a9:bd:ef:71:df:71:27:59:
                    11:70:e2:b9:25:d7:4b:a0:34:dc:19:2b:c0:16:13:
                    62:51:df:d3:21:e2:f7:db:ef:91:17:f9:36:92:02:
                    f6:c6:19:26:99:48:1a:2a:7c:8a:f8:5a:36:71:8d:
                    22:a2:bb:d2:20:c5:11:c3:ac:83:a0:61:d5:0c:6a:
                    1c:9e:c6:00:99:97:18:08:ad:35:97:b3:24:2e:29:
                    b3:96:9f:ed:27:96:e8:8c:d7:fb:28:ca:a2:10:01:
                    66:0d:11:f3:92:d0:f3:ed:ff:c5:ef:a8:bf:d4:86:
                    08:a1:2e:0f:a1:ef:3d:27:21:d8:38:99:e0:04:70:
                    c1:e4:96:8c:81:eb:c2:d0:f3:aa:03:4a:74:cd:69:
                    f0:92:81:d8:98:0a:6b:33:d1:2f:e6:cd:e4:62:b1:
                    53:7c:70:bc:e4:03:8b:cb:8c:c9:89:1f:44:e0:7b:
                    5c:1b:66:cd:b0:51:9e:43:06:29:ad:c7:1d:a6:73:
                    da:e8:f6:d1:38:2e:82:93:e0:0a:b0:05:22:5b:51:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4F:D9:5A:DE:72:B5:AD:76:32:C0:73:FC:E2:C6:84:2A:CA:86:9C
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:55:f8:38:75:d5:78:c6:28:a1:41:55:1b:9a:8c:d7:64:60:
         cf:3d:cb:50:7a:1e:84:9e:cc:a6:4e:34:ba:2b:29:06:07:a8:
         8d:68:7f:b4:9d:b4:49:98:e0:5d:c2:72:ab:cc:58:d6:ac:10:
         93:2e:98:dd:00:41:ce:8c:43:32:7d:92:ed:44:f1:81:46:e9:
         ff:fb:f3:44:39:02:a6:7d:43:89:d3:b1:4b:dc:31:00:8b:07:
         6c:66:3d:57:fe:41:13:a5:20:41:4f:cf:58:11:17:09:8f:e2:
         f4:46:ed:70:09:05:92:10:02:d0:dd:be:99:25:ff:94:3a:7d:
         b6:03:50:87:76:d3:11:17:e4:c7:6d:3c:ca:1c:14:00:44:4a:
         32:4b:00:63:a1:42:c7:6a:af:21:02:b6:8c:b5:30:c9:af:41:
         b3:b1:a9:67:66:c6:d9:5e:23:55:9d:48:b1:f9:9d:60:e3:e8:
         4e:9c:44:45:f7:4d:6a:53:2e:2d:41:44:de:fa:d7:d5:e5:99:
         17:e1:13:69:6a:c1:bb:ed:2a:8a:bd:8f:9c:33:05:f3:aa:98:
         48:89:42:bb:82:74:8a:47:11:d4:26:07:f4:2f:7f:52:58:d2:
         c3:3d:a9:77:3c:d7:de:02:0d:05:33:16:5f:17:ae:0e:55:ba:
         fe:ae:c3:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBRjExMC8GA1UEBRMoODRCQzIyQTE0QkI1Rjg4OUJDMTBBMjJDRjE3QzlD
MTlCNTE5QjI4ODAeFw0yNjAxMjUwMjU4MDNaFw0yNjAxMjcwMjU4MDNaMBgxFjAU
BgNVBAMTDTY5NzU4NmJjLWQ4ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMqDp6UeBlLNnKqd8yJ4jBQuv1lDjGXrYuV08bzvYiKeHk7dZrNDJSBYd2
cnHdOBKARsupve9x33EnWRFw4rkl10ugNNwZK8AWE2JR39Mh4vfb75EX+TaSAvbG
GSaZSBoqfIr4WjZxjSKiu9IgxRHDrIOgYdUMahyexgCZlxgIrTWXsyQuKbOWn+0n
luiM1/soyqIQAWYNEfOS0PPt/8XvqL/UhgihLg+h7z0nIdg4meAEcMHkloyB68LQ
86oDSnTNafCSgdiYCmsz0S/mzeRisVN8cLzkA4vLjMmJH0Tge1wbZs2wUZ5DBimt
xx2mc9ro9tE4LoKT4AqwBSJbUc7PAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUu0/Z
Wt5yta12MsBz/OLGhCrKhpwwHwYDVR0jBBgwFoAUhLwioUu1+Im8EKIs8XycGbUZ
sogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYxMjIyNDY4L2hMd2lv
VXUxLUltOEVLSXM4WHljR2JVWnNvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hMd2lvVXUxLUltOEVLSXM4WHljR2JVWnNvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQ0NTkvQ0RENzRENzYyRDFCMTFFREJFMDA4ODhCRjEy
MjI0NjgvaEx3aW9VdTEtSW04RUtJczhYeWNHYlVac29nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZVfg4ddV4xiihQVUbmozXZGDPPctQ
eh6EnsymTjS6KykGB6iNaH+0nbRJmOBdwnKrzFjWrBCTLpjdAEHOjEMyfZLtRPGB
Run/+/NEOQKmfUOJ07FL3DEAiwdsZj1X/kETpSBBT89YERcJj+L0Ru1wCQWSEALQ
3b6ZJf+UOn22A1CHdtMRF+THbTzKHBQAREoySwBjoULHaq8hAraMtTDJr0Gzsaln
ZsbZXiNVnUix+Z1g4+hOnERF901qUy4tQUTe+tfV5ZkX4RNpasG77SqKvY+cMwXz
qphIiUK7gnSKRxHUJgf0L39SWNLDPal3PNfeAg0FMxZfF64OVbr+rsM1
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:38 2026 by rpki-client