This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
File:                     wDEb4pGTolThzVxYy7dlalArlVo.mft (raw, json)
Hash identifier:          aLUcK/uQ5FTRG/7binxK+invUUL+TjIVTqmHx0zx1EU=
Subject key identifier:   CA:B3:0F:F0:43:4E:78:2A:CD:52:A6:BF:5F:4B:6B:1E:19:B0:D9:45
Authority key identifier: C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Certificate issuer:       /CN=F36C2FCAAF/serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
Certificate serial:       79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
Manifest number:          79
Signing time:             Sun 25 Jan 2026 05:14:59 +0000
Manifest this update:     Sun 25 Jan 2026 05:14:58 +0000
Manifest next update:     Tue 27 Jan 2026 05:14:58 +0000
Files and hashes:         1: wDEb4pGTolThzVxYy7dlalArlVo.crl (hash: LqEAHk7T5N/P8cpA0qTwyCYJfcfB6+UVDOPJwi0rj4U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Validity
            Not Before: Jan 25 05:14:58 2026 GMT
            Not After : Jan 27 05:14:58 2026 GMT
        Subject: CN=6975a6d3-4e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:89:1d:76:ae:a0:c0:24:75:31:8c:bd:d2:
                    e2:39:e3:f5:2a:a6:78:e1:48:13:8e:09:33:c8:96:
                    1b:6b:24:c9:37:c1:70:b9:44:e8:c1:1f:d5:bb:51:
                    e4:67:e2:27:ce:8b:3a:2c:56:0e:77:f6:79:e1:93:
                    9d:11:59:e0:85:63:0b:f1:dd:9e:71:18:fe:07:86:
                    ce:b5:ca:0e:08:e2:78:5b:80:1e:5e:55:62:7e:23:
                    80:22:97:76:2f:8c:dc:c9:ad:26:28:dc:e5:ce:a1:
                    31:83:98:bd:ce:65:dc:c4:a9:49:eb:0a:a8:77:52:
                    60:d4:ca:2c:42:04:b6:09:43:68:b3:d9:95:92:5a:
                    70:0c:3f:bc:57:a4:75:78:3b:08:96:91:02:38:40:
                    d0:10:b1:22:98:4a:dd:18:ef:20:5e:cd:2c:f6:06:
                    26:fd:bb:18:15:f4:0a:7a:d5:49:b1:e5:79:83:0b:
                    94:22:91:a5:58:49:ba:b0:a3:6d:ad:c4:3b:f9:dc:
                    57:96:96:e4:e4:01:d7:ea:94:58:c8:e6:09:46:de:
                    96:da:ad:91:e1:00:f7:cd:3a:32:26:19:e5:db:ae:
                    f7:fc:b6:9d:e1:b6:8c:89:86:04:a7:6e:9f:0e:4a:
                    71:eb:0d:ec:c2:e2:ca:b5:79:9b:ec:b6:96:3e:d0:
                    62:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B3:0F:F0:43:4E:78:2A:CD:52:A6:BF:5F:4B:6B:1E:19:B0:D9:45
            X509v3 Authority Key Identifier:
                keyid:C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:73:06:46:4f:5c:eb:b9:fb:74:56:4c:c5:0f:ef:8f:87:3a:
         a1:7d:48:77:a0:f8:89:a7:4e:1e:be:77:48:96:46:93:b2:70:
         2b:6f:8f:fa:62:37:0b:c4:a1:7d:fe:8d:65:37:9a:51:04:72:
         07:fc:1d:a4:f2:cb:6d:91:28:14:36:6e:17:71:c8:a6:09:dc:
         36:55:65:a8:8e:6b:19:6e:79:7c:6a:32:df:09:4b:db:49:82:
         90:a4:f7:b2:62:5b:b2:9c:22:b9:3b:05:66:f0:35:b4:14:f2:
         9e:18:04:dd:c2:4f:64:53:03:47:de:5f:3a:90:95:a8:b6:1a:
         09:c4:2d:b4:7a:08:b7:1e:ab:93:c7:eb:77:74:70:6c:aa:08:
         81:a9:50:1f:42:51:38:6b:91:73:54:ed:73:a8:1a:9d:4c:c2:
         e2:ca:cb:e1:05:27:cf:cb:55:7f:eb:75:af:94:f9:d2:09:35:
         0f:65:6c:99:81:71:9f:f7:9f:78:93:60:c4:b9:9c:5c:d9:13:
         62:81:43:84:bb:27:ba:93:79:02:1e:89:3b:93:77:93:b5:a2:
         0f:bc:b7:d1:2d:3c:45:3d:27:65:6b:51:60:f3:73:8b:84:43:
         04:f8:d2:ea:19:ba:2a:9f:36:f8:24:27:2b:d5:1a:2f:af:80:
         e7:77:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:50 2026 by rpki-client