This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          meCc1meli8h4YtEKUFNpUGWnsqYbyHYW2bsLgfs1oi8=
Subject key identifier:   83:77:A3:F0:CD:FB:26:AF:95:20:1F:AD:97:2F:2D:34:0B:C0:FF:00
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       0281
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          0275
Signing time:             Sat 24 Jan 2026 04:17:01 +0000
Manifest this update:     Sat 24 Jan 2026 04:17:01 +0000
Manifest next update:     Mon 26 Jan 2026 04:17:01 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: RH88zttNaMjns4gSAPUu+CEwAB4N1Okvz6w/lnMg89w=)
                          2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
                          3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          6: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          7: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 04:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Jan 24 04:17:01 2026 GMT
            Not After : Jan 26 04:17:01 2026 GMT
        Subject: CN=697447bd-b37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:89:f7:15:35:4b:01:64:c5:00:fb:4c:86:0e:
                    71:56:ce:d0:23:77:8e:d3:fc:74:e6:97:9b:bc:95:
                    81:32:d7:46:a5:ec:b1:ca:c2:73:a6:2a:c9:e1:31:
                    c6:f8:38:d4:a9:81:bd:df:a9:29:69:c3:7f:9d:02:
                    49:c4:ce:a4:57:31:90:37:38:53:e1:bd:da:6b:83:
                    b2:87:d3:b1:fd:72:ed:49:ca:2d:bf:d0:5c:04:72:
                    65:4f:04:ff:aa:75:84:92:9a:21:99:8e:00:91:17:
                    8a:49:c3:7e:c6:d1:e5:36:a1:f1:ce:c0:7b:63:7c:
                    54:dc:d4:63:46:a9:c7:d6:91:27:ff:2a:30:0a:e4:
                    f9:bb:16:c1:82:f4:49:34:de:15:7a:af:78:55:6f:
                    9e:bd:0a:dc:79:4b:00:4f:9d:9f:eb:98:5c:df:6d:
                    cb:5e:41:8c:03:c0:c2:ed:69:c7:5c:49:18:12:6b:
                    46:bb:fd:7c:7d:28:31:af:94:f4:76:7a:61:87:05:
                    a7:65:d2:76:25:44:37:c1:5a:d0:f6:0a:2d:66:bf:
                    52:95:00:cb:cf:11:45:bd:f4:14:a4:7a:df:77:59:
                    9a:37:f4:36:4b:00:f2:83:2b:b1:6e:03:22:8f:bf:
                    8f:7a:a8:3e:40:73:f4:ef:04:e3:e2:38:10:0b:4e:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:A3:F0:CD:FB:26:AF:95:20:1F:AD:97:2F:2D:34:0B:C0:FF:00
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:f8:d2:70:63:78:57:49:72:99:e2:46:02:d1:ff:da:20:
         4e:04:fd:78:68:49:00:ee:ef:cf:d5:7e:9c:dd:93:fe:6e:75:
         76:c9:0c:fd:c9:32:5b:53:a2:f3:26:68:5e:c0:92:2d:80:89:
         65:96:6a:aa:7e:02:d1:37:8f:a1:4a:69:0f:c2:03:ed:46:76:
         5c:54:cb:91:ac:04:42:a5:4a:55:1d:6c:5f:83:3c:eb:0c:32:
         78:d2:00:ea:e2:99:d1:d8:4b:38:31:70:82:ab:2f:a6:7c:7e:
         85:6c:af:fc:d7:ba:07:f7:44:3e:c1:07:65:89:11:13:dd:21:
         dd:97:11:95:0a:d6:b9:34:de:5d:92:0e:33:44:06:d1:b3:64:
         bb:22:62:84:b6:8c:83:d6:1f:56:ff:d6:83:3e:05:a5:ca:46:
         16:a8:65:a2:37:84:d1:1b:34:4c:45:03:58:a1:9b:3d:82:ba:
         a1:74:29:e2:34:35:22:89:b0:f9:dd:86:92:44:67:69:33:bc:
         da:0e:ec:c5:e3:ca:f5:79:21:2d:06:2d:c3:6a:34:7a:08:a0:
         87:f7:0d:01:20:92:64:86:3d:2e:6e:a0:2b:a5:7b:8c:e0:8a:
         de:fd:bb:28:6c:12:01:e5:2e:47:3e:ae:af:e2:01:43:2e:af:
         e0:49:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:02 2026 by rpki-client