This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          sDMJMUmZ9505Tdkew1akSnHl/wUGEaREP04vzcsNhls=
Subject key identifier:   C2:AA:85:8A:36:32:D5:AD:35:4F:FA:C2:73:B0:60:0E:77:DC:6A:3D
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       07BA
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          07B4
Signing time:             Sun 25 Jan 2026 01:56:10 +0000
Manifest this update:     Sun 25 Jan 2026 01:56:09 +0000
Manifest next update:     Tue 27 Jan 2026 01:56:09 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: 3fwaekj/b3akFfwS50DIIKr8C6aSkno3lt+EmTGdgpA=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 01:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Jan 25 01:56:09 2026 GMT
            Not After : Jan 27 01:56:09 2026 GMT
        Subject: CN=6975783a-5742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:09:68:d3:0f:ad:1b:22:6b:bb:cc:39:50:
                    83:b2:3d:87:84:ee:b1:fe:bf:b0:96:ce:10:2f:54:
                    8f:a1:3b:8a:54:1d:14:db:80:7c:32:99:99:4f:fd:
                    ef:01:95:ba:67:51:98:3a:a2:05:99:68:00:e5:41:
                    a9:2a:e2:38:c1:f3:01:af:03:8a:53:ec:06:69:08:
                    db:c6:c4:e5:68:5a:66:ac:d3:e2:0e:0c:8d:37:bf:
                    22:44:30:f4:5d:85:fc:bb:49:11:b9:fa:53:79:75:
                    f9:45:4d:b0:98:61:72:e7:25:30:ae:12:f0:b2:66:
                    2a:3d:ce:fb:1a:39:9b:bd:4e:fe:8c:eb:61:7c:cb:
                    82:3b:30:d6:09:ba:03:e0:51:22:83:b3:c7:ca:fe:
                    40:51:d5:89:c2:35:62:7d:c7:70:47:e9:06:7f:7e:
                    ee:ef:25:f7:50:68:db:1d:33:c1:d5:78:54:8c:b0:
                    19:5c:46:8a:35:40:1b:0c:67:9a:bb:2f:c2:f8:87:
                    65:93:c4:40:ed:51:ca:86:20:89:ae:5f:17:50:3a:
                    78:69:ea:e9:27:5e:c6:0a:e5:f6:c2:42:25:39:06:
                    f5:04:c7:e7:69:8e:54:5a:dd:d5:35:ac:01:b1:fd:
                    cf:39:46:f4:de:1b:af:bc:48:d4:a9:49:30:79:35:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AA:85:8A:36:32:D5:AD:35:4F:FA:C2:73:B0:60:0E:77:DC:6A:3D
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:4f:5c:c5:43:16:fa:4f:78:1b:d2:d9:c0:a8:00:0e:ed:
         03:c8:cf:9b:73:f0:8a:54:82:ee:b6:96:7d:1c:b7:07:aa:e2:
         0c:06:fa:7e:36:fb:d8:2c:78:b4:40:e7:9c:76:e3:bf:3b:68:
         b1:b8:a1:8e:4a:4f:7e:ce:78:5e:41:b5:ca:46:c1:6e:86:ee:
         25:0b:0a:04:8f:c7:41:36:af:e5:d3:e5:66:22:b6:aa:05:2a:
         67:e9:39:0c:37:af:3b:58:71:cd:77:1d:7b:c4:d7:12:dd:2b:
         8e:3e:44:15:4e:fb:01:98:67:16:ec:93:ad:eb:72:40:7e:bf:
         d6:4f:44:2d:02:54:61:8c:aa:bc:e9:9c:98:84:72:ca:c4:6f:
         17:e7:97:89:a0:e3:4b:ba:0f:7d:b0:06:0c:dd:53:7c:8e:80:
         bf:46:3f:f5:65:3a:ad:27:78:47:90:5b:1e:ab:81:c1:94:40:
         a4:61:9b:d6:04:ac:c7:52:f4:7f:0c:52:6a:7a:6b:e3:3f:87:
         46:3d:bc:f3:a7:1b:f6:61:62:1a:ab:51:2d:31:d1:e5:8c:da:
         72:32:2a:e0:ed:76:55:aa:99:96:59:cd:f8:f3:61:fe:e8:ff:
         17:5f:1c:b5:d8:b6:98:6b:f5:04:ce:d2:a3:52:17:74:d1:8f:
         d0:94:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:44 2026 by rpki-client