This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
File:                     5OfkzwUGmYE4HGusKKJrtmmU0rc.mft (raw, json)
Hash identifier:          UHOrwUz0mz7TtklsMvOWWPQ15pSTUxeHcE3b/KSXeQ0=
Subject key identifier:   5D:85:16:B8:F2:67:64:45:5D:FE:BB:5B:7E:A6:D2:C0:5C:85:D6:86
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
Manifest number:          3C
Signing time:             Sun 25 Jan 2026 05:22:20 +0000
Manifest this update:     Sun 25 Jan 2026 05:22:19 +0000
Manifest next update:     Tue 27 Jan 2026 05:22:19 +0000
Files and hashes:         1: 5OfkzwUGmYE4HGusKKJrtmmU0rc.crl (hash: 8IcNqDLd3XWuKwhXwI4mIBgESBEAPzkSZCyF/Z1TFpU=)
                          2: F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (hash: dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=)
                          3: 2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (hash: lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=)
                          4: 1811E4B2D34C11F0A34F27AEDAE4EC9C.roa (hash: 5J5kKxxmT3AitlgzrzKNAptdmk4cbkC8tOUOxsnY+GM=)
                          5: AFCDD206D34D11F0ADCD4EB7DAE4EC9C.roa (hash: Wushw/sA+miTMHcjq5BUALTuvax/UDlZ5uswbKq6gbc=)
                          6: B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (hash: EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=)
                          7: 216C2206D34D11F081CE2AB4DAE4EC9C.roa (hash: wmcnwC3N1n68tZ025Jzu1Yi8vDKdizTOQUqWDI3JT4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Jan 25 05:22:19 2026 GMT
            Not After : Jan 27 05:22:19 2026 GMT
        Subject: CN=6975a88b-00ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:c9:ce:8e:7b:9f:4a:7b:79:df:33:2e:fe:
                    e3:47:86:82:80:c4:c3:2a:f0:36:fe:3c:a3:7f:56:
                    6d:28:4f:3f:6f:67:3e:34:55:e9:8d:aa:ff:7f:98:
                    fd:f7:3d:0b:79:2a:52:6a:3b:2b:0d:50:fb:2b:42:
                    82:11:0b:ea:c7:19:0c:69:93:48:0c:75:d5:01:0c:
                    d8:e7:4c:f4:d8:a8:ae:ad:3f:80:0a:d2:f6:37:6e:
                    bb:c7:07:12:c0:85:c0:07:19:08:4c:f0:b3:8e:fc:
                    7d:8e:4d:5f:96:f2:b5:e8:db:bc:26:f6:f5:bb:bd:
                    3c:95:d4:54:24:65:d9:d7:40:ac:c1:1b:32:e3:08:
                    fc:12:a7:98:65:98:86:10:00:e4:1d:b4:ba:ab:5c:
                    b5:62:50:16:98:e5:03:92:65:a6:65:49:be:1e:0e:
                    a5:5d:28:b4:97:0b:c7:2b:13:e2:1e:71:8d:48:67:
                    ab:95:ae:92:90:c1:42:35:c3:31:5d:f4:93:56:9e:
                    9c:30:0e:6b:1e:04:79:76:26:55:f7:58:93:a3:60:
                    f2:a3:9e:45:03:e3:4c:5e:7d:b1:ba:73:c1:67:bc:
                    3f:dd:44:6b:1f:42:6b:e2:91:28:fd:b4:aa:af:d1:
                    fb:1a:24:8d:77:f5:5b:7b:cc:19:f6:cc:e9:31:28:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:16:B8:F2:67:64:45:5D:FE:BB:5B:7E:A6:D2:C0:5C:85:D6:86
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:03:bf:c3:b6:2e:5d:bf:7d:ef:0a:bd:37:42:e0:6f:cb:04:
         27:ab:7b:9c:0c:97:c7:9e:c5:91:ff:63:a5:7e:d9:7c:98:9e:
         75:21:ac:93:fd:f0:73:45:9c:51:5f:c7:12:69:e8:92:a4:fe:
         9b:11:e8:d0:fa:c0:4a:12:c8:e3:be:94:3d:2f:c5:2c:b9:f1:
         ea:49:83:0c:20:b0:29:b3:c0:5a:27:89:39:51:8f:1f:a5:69:
         a3:4d:85:95:63:10:b4:43:91:cb:a7:27:24:25:35:f8:5c:b6:
         b0:09:c5:fa:df:2e:81:fb:eb:49:91:1c:00:a1:78:0a:69:84:
         04:86:75:41:68:3b:5f:e9:05:e5:b9:47:bf:ea:c2:83:40:71:
         05:23:01:09:be:7f:a3:0a:d6:6a:fd:c0:c4:ff:37:4f:96:82:
         32:0f:0a:08:a7:0d:e8:8b:c6:a0:b4:3d:a9:5e:ac:fa:cf:7f:
         4a:b4:4e:29:da:70:74:70:c2:3a:44:2d:ff:d8:16:7e:33:6e:
         34:97:78:85:3f:d7:e2:d3:7f:9b:dc:f1:ca:e0:ab:39:1f:b5:
         4d:2a:67:58:a7:5c:80:74:df:58:4e:ad:dd:d2:ce:e8:1d:13:
         7c:54:2c:91:18:cf:ad:9f:0d:cd:30:37:ed:2b:20:58:5a:b4:
         3d:3e:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:51 2026 by rpki-client