This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          kjcUF2xU+qcR1nQtruq3MjnnL1LYYRCgXgdoW4a2Wz8=
Subject key identifier:   8C:B0:4A:53:BE:60:5C:0D:FC:C8:FC:23:23:9E:48:28:54:8B:9B:7E
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       09EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          09E4
Signing time:             Sun 25 Jan 2026 01:18:30 +0000
Manifest this update:     Sun 25 Jan 2026 01:18:29 +0000
Manifest next update:     Tue 27 Jan 2026 01:18:29 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: 69EMfgO/TdCP6UXfbZoyAPOXlg4LvFXWCdCWySG4k5w=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543 (0x9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Jan 25 01:18:29 2026 GMT
            Not After : Jan 27 01:18:29 2026 GMT
        Subject: CN=69756f66-97e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:ca:8d:2c:02:89:c0:ad:c5:dd:86:ad:27:
                    0e:ee:b3:ae:98:6c:cd:ae:0b:4a:63:2a:d3:65:21:
                    25:7b:30:24:88:bd:6f:eb:49:d5:f5:53:5f:35:76:
                    58:40:fd:05:ea:df:8a:6e:f9:68:c4:3a:cc:5e:96:
                    c8:85:34:61:36:f4:6b:16:1a:9d:87:7b:43:bf:ec:
                    87:91:7b:cb:4f:b5:81:b1:ea:a8:c4:fc:a7:04:9f:
                    4f:d7:17:f4:4a:cc:72:a2:40:d1:bb:a6:92:2f:35:
                    9a:7a:8f:fb:8d:fc:05:82:f7:59:48:52:a4:e8:da:
                    a5:b9:6e:e8:fe:14:71:d8:aa:63:1c:f5:7d:a8:13:
                    46:88:09:89:90:b8:ba:ae:05:24:f2:da:e3:24:b7:
                    96:01:cb:01:27:51:83:2a:f3:37:99:62:58:67:9c:
                    9d:ed:50:20:9d:7f:7c:cd:98:85:fa:c7:3c:74:9a:
                    4c:c3:21:be:f9:3c:77:3b:58:5d:52:04:cc:b4:c7:
                    a1:8e:1c:94:38:2c:a3:a0:ca:c1:53:40:3b:4d:4a:
                    ab:ee:69:c1:76:c5:59:99:10:ab:14:12:7c:10:28:
                    20:44:9f:ba:c4:eb:67:1f:ee:17:b6:24:fd:d3:da:
                    8f:4d:13:07:7f:fd:69:55:cb:64:d0:bf:60:d0:62:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:4A:53:BE:60:5C:0D:FC:C8:FC:23:23:9E:48:28:54:8B:9B:7E
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:97:10:c2:1b:0d:26:36:33:a2:4e:0e:1c:b5:80:68:42:
         51:d3:3d:60:3c:e7:3b:79:8a:43:00:bf:84:f7:43:e3:68:7d:
         d7:63:4a:44:62:1f:33:68:70:38:ba:2f:3d:af:05:b9:a1:b5:
         47:a4:0c:62:3e:40:4a:d5:7f:fd:18:24:13:fb:aa:ea:4e:c1:
         f0:65:7d:95:cc:dd:71:fa:28:05:9e:1e:f0:68:11:ec:48:45:
         9d:63:e1:f2:f6:7c:bb:25:87:ac:e2:49:92:62:f7:3d:1d:f6:
         85:4b:bf:f2:91:eb:4b:22:9d:c6:d7:a2:aa:bd:ec:c8:99:1a:
         29:17:42:d2:dc:e3:f7:c0:35:2d:a2:ad:9d:8e:20:89:9e:30:
         58:cd:f5:e4:f0:3e:3c:ca:1b:96:46:10:ae:be:cf:93:56:91:
         49:1c:8c:4a:6d:60:a2:2c:64:b0:78:20:62:08:38:61:84:ef:
         ba:ab:0c:d4:82:b4:30:26:11:91:72:c2:39:33:2b:72:f4:36:
         59:37:64:13:2e:33:fa:37:c4:21:8a:17:91:fb:e7:c5:90:ac:
         b1:83:4f:5e:13:3c:c0:a6:10:c1:41:04:31:34:07:bf:45:9b:
         93:be:91:6b:b1:b5:cc:06:ff:79:fb:f7:0a:11:b9:73:ae:96:
         da:39:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:02 2026 by rpki-client