This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
File:                     sOuFTcDYmjIzySVR0W0U1DjPVR8.mft (raw, json)
Hash identifier:          H2uhKV4JSB080IFbVJRuSct1bMek1ZRas8/GMeQ5Haw=
Subject key identifier:   13:61:C6:6D:77:0E:5C:59:22:F8:3C:D0:17:69:55:AA:3A:A7:95:36
Authority key identifier: B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Certificate issuer:       /CN=F36B5EE7RI/serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Certificate serial:       BC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
Manifest number:          BB
Signing time:             Sun 25 Jan 2026 05:06:39 +0000
Manifest this update:     Sun 25 Jan 2026 05:06:38 +0000
Manifest next update:     Tue 27 Jan 2026 05:06:38 +0000
Files and hashes:         1: sOuFTcDYmjIzySVR0W0U1DjPVR8.crl (hash: ybLwTy0wU/AEVYsrmZKE0Of3v3nnJCNIyKwG1v+w0ZU=)
                          2: 2CED30A26B9211F0B55B648ADAE4EC9C.roa (hash: 8FK7+AonagW3DFNpcFJhHjfYGIQ/QIt42K+ERVsqWds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                          rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
        Validity
            Not Before: Jan 25 05:06:38 2026 GMT
            Not After : Jan 27 05:06:38 2026 GMT
        Subject: CN=6975a4de-a870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:25:9a:2e:6a:ab:67:b8:ae:c0:47:58:29:
                    ad:2c:b5:65:fc:62:d4:37:87:b5:36:b0:f8:06:6d:
                    7d:88:4b:4c:0a:dc:fe:84:60:f0:df:9b:fe:0a:87:
                    36:dc:dd:1e:67:99:f6:6f:cc:be:f1:50:87:ee:4a:
                    11:1c:07:57:cd:ea:a4:06:e1:5a:4a:6b:4f:22:f4:
                    6f:a2:bf:73:8b:31:02:68:f8:9f:05:29:79:70:15:
                    74:8a:4f:80:fd:50:8b:3e:43:93:fd:a4:3c:5c:23:
                    b0:57:01:aa:77:53:a5:8e:73:53:27:42:03:74:8b:
                    61:4d:0b:15:f8:33:ba:00:70:ff:bd:01:0c:ad:9a:
                    78:05:2e:e2:9c:ca:55:33:3e:1e:81:ae:88:ed:ca:
                    51:cf:9d:a5:0e:30:83:ad:8a:2a:c2:c5:b4:35:22:
                    26:ad:6f:71:24:32:9c:d3:60:9c:a3:40:0b:e2:83:
                    47:ec:31:08:62:59:85:e7:34:cc:b4:22:70:f0:5a:
                    5c:17:ca:34:58:1c:df:e2:ec:6b:1a:7a:fb:c9:0c:
                    48:7c:39:76:c1:6e:71:cb:64:c1:8c:fa:da:ae:2d:
                    62:78:d6:96:8d:4b:0b:49:ce:4c:74:b6:a5:22:10:
                    4f:1b:6a:56:f6:0a:2f:be:d0:39:4d:3e:f1:7e:13:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:C6:6D:77:0E:5C:59:22:F8:3C:D0:17:69:55:AA:3A:A7:95:36
            X509v3 Authority Key Identifier:
                keyid:B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:d2:69:0f:ef:5b:35:76:f9:1e:36:c9:14:a7:eb:58:db:
         99:b9:2a:d7:13:b1:e4:f0:e8:5c:a1:f0:19:ad:e2:c4:de:ff:
         2a:91:63:d4:35:3b:01:35:19:06:0e:45:8c:97:a7:00:15:3e:
         f5:a0:60:33:7d:79:7f:75:0b:30:13:d0:90:7e:05:e8:42:fa:
         c9:3b:b4:d9:c1:40:f6:9d:db:4d:50:a1:0b:cd:6a:56:cb:9f:
         dc:f1:87:ee:f1:eb:a0:b4:21:e7:28:f4:e4:cf:11:4b:be:ec:
         ab:5c:cc:b0:83:ee:d9:6b:80:2f:33:bc:5f:7b:84:00:fd:5a:
         44:43:29:a3:dd:fb:9b:da:91:1f:ba:3a:bc:85:d3:7d:c7:84:
         bb:92:30:12:4e:a5:66:d1:f0:08:94:4a:7f:aa:8c:37:6e:ba:
         1b:6e:3c:a7:1d:3f:a8:6b:64:42:aa:a0:dd:28:40:65:5f:3c:
         e3:c7:42:3b:cc:52:6a:9e:dc:da:a0:29:21:73:66:52:62:72:
         95:17:13:07:0c:e4:f1:ad:8f:e8:43:07:13:30:3e:7d:ba:59:
         80:e7:49:25:7c:08:77:8f:8f:0f:b1:7b:a6:58:32:67:68:8c:
         e3:50:10:b2:6d:07:9c:9f:e4:55:36:47:73:f3:4d:15:97:bc:
         a2:41:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:22 2026 by rpki-client