This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          UsmtbkjzGonjxlgj7SzKHnb8/yfsxYq1G7l4cPHagBU=
Subject key identifier:   68:54:A3:DB:85:40:97:03:06:F1:D6:D6:3B:2B:0D:30:63:2B:59:A9
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       0392
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          0391
Signing time:             Sun 25 Jan 2026 03:44:19 +0000
Manifest this update:     Sun 25 Jan 2026 03:44:18 +0000
Manifest next update:     Tue 27 Jan 2026 03:44:18 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: IN8WXHmrqF4BAwq4rZQE5VzT3viL2Gh9EMwP2GCfvOY=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Jan 25 03:44:18 2026 GMT
            Not After : Jan 27 03:44:18 2026 GMT
        Subject: CN=69759193-5368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:55:ae:6c:ee:a4:89:bd:ec:0f:dd:ec:2c:
                    14:36:d2:66:20:b8:41:dc:45:60:93:c2:cd:c8:6c:
                    23:78:0a:f1:61:8c:6f:f9:75:ac:2a:ee:5b:45:81:
                    8a:24:83:56:87:a3:2c:c9:a2:18:11:97:59:d9:36:
                    cf:2f:f4:8f:89:24:86:c9:b3:f8:ca:2c:09:78:22:
                    5a:2e:9d:d3:18:03:98:94:fb:d7:c7:be:27:56:55:
                    09:b9:70:40:e8:98:93:53:d2:4e:ab:e5:9e:c0:3d:
                    5b:63:1a:b6:30:e0:34:81:68:43:fe:c1:91:e1:c6:
                    ab:55:6e:56:f6:a5:08:f6:8d:07:67:91:ad:4a:7e:
                    ca:37:ed:d6:55:eb:17:c4:a9:42:c0:7a:d6:0f:83:
                    b7:26:a9:fd:16:34:47:02:65:f5:65:39:f6:b2:72:
                    65:57:2a:1a:7f:85:34:94:e6:a5:9d:2c:11:f9:90:
                    59:a5:9a:95:12:6a:62:57:30:95:f9:1e:ba:31:5b:
                    25:bb:16:8e:4e:54:ad:bf:d4:72:de:8d:47:28:fa:
                    ff:63:e2:d3:c3:a0:1b:f1:33:54:3f:9c:46:54:28:
                    25:fe:7e:d4:81:f1:fd:47:fd:18:c1:e1:35:66:29:
                    97:06:ca:5e:e4:2c:e1:9b:00:56:cd:08:2b:33:a1:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:54:A3:DB:85:40:97:03:06:F1:D6:D6:3B:2B:0D:30:63:2B:59:A9
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:5a:d3:39:be:bf:a1:08:08:23:94:78:fe:5b:86:53:88:
         56:d7:47:df:97:fd:2c:a6:85:d8:4f:e2:bc:40:44:6b:e7:85:
         2c:b6:af:71:be:d5:fa:80:d8:f8:16:af:f2:09:4d:0e:b1:95:
         85:94:e2:e1:e6:21:56:64:fd:dc:1d:a7:68:a6:4c:f4:b7:4a:
         4c:ca:ba:0a:e0:bd:5b:41:cd:36:24:91:f8:6e:2d:15:4c:fa:
         43:a3:8d:03:04:21:97:ce:48:57:67:26:b7:bb:9e:1b:10:63:
         71:47:53:d9:ed:58:c5:9e:aa:9e:17:91:28:24:04:3a:05:00:
         1d:8a:f3:00:1b:d3:f9:18:cc:89:65:64:45:13:a8:be:ad:e4:
         6a:e1:76:33:b1:9c:09:84:54:41:a0:b0:0d:f7:87:eb:6c:f0:
         fc:8b:fb:f2:f0:ee:ea:42:05:0c:19:90:bd:4d:3b:b9:b7:84:
         14:91:a2:4d:8d:b2:2c:a7:5e:65:31:f7:bd:e9:94:5e:f5:b4:
         ca:8e:3e:c2:b7:52:e3:b0:04:2e:69:af:47:1d:e8:b7:14:19:
         e4:3f:15:e1:08:0a:89:b8:cb:25:21:5c:3d:8e:21:c4:fa:96:
         1a:4f:a4:91:66:13:f7:4c:95:4e:29:f2:79:74:1d:ee:d4:d7:
         88:3d:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:55 2026 by rpki-client