This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          H/cxKSzVSnNCKzUTE8sdi/Zr5F5VZDhV3L2O3oLvinQ=
Subject key identifier:   7D:8A:8B:97:9D:57:2B:54:55:2F:A3:F3:39:CF:5C:36:43:DC:3D:12
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       057A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          0572
Signing time:             Sun 25 Jan 2026 02:45:43 +0000
Manifest this update:     Sun 25 Jan 2026 02:45:42 +0000
Manifest next update:     Tue 27 Jan 2026 02:45:42 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: uSa+T3tDIc+JVB59DoQ4ikVU2Bw71+EIeoQbPyn2cc4=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Jan 25 02:45:42 2026 GMT
            Not After : Jan 27 02:45:42 2026 GMT
        Subject: CN=697583d7-27be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:9e:b3:26:52:f2:9c:9c:79:48:f5:0c:b7:
                    a4:d0:27:0d:3f:31:87:e5:de:9c:69:4a:45:d2:67:
                    31:45:99:f9:88:43:f4:4a:bd:18:89:7a:3e:11:ca:
                    98:fe:60:db:51:21:dc:e0:a6:cf:6b:eb:8c:8b:a3:
                    58:dd:97:99:41:85:c9:da:ac:5d:9a:d1:c7:d8:84:
                    7e:05:61:80:ca:c9:39:f5:48:a1:1b:64:46:6e:cf:
                    f0:63:f5:ad:7d:92:26:c3:87:8f:79:a0:a2:f7:4e:
                    6e:d9:37:f3:9e:90:67:89:b5:cb:11:0f:9b:3e:c7:
                    1c:20:58:7f:04:f7:9b:c3:f7:df:2e:76:d2:0e:46:
                    58:47:38:18:98:50:47:3b:d9:f8:d1:a4:19:de:d0:
                    c7:05:80:52:a8:5d:54:e3:61:ca:ee:40:98:74:15:
                    cf:6d:05:8f:e4:dc:fa:6b:88:68:e0:47:f4:a9:6c:
                    1f:dc:4b:5e:40:e7:84:4f:a3:2b:03:c7:2f:77:6f:
                    fb:66:d4:28:df:08:a8:e9:e1:cb:84:86:93:c0:ef:
                    25:55:44:fc:a0:66:19:4f:f8:a5:e5:0a:8c:53:52:
                    91:16:19:1b:a2:fa:a7:70:13:aa:6b:1e:e4:bc:a9:
                    7c:fe:45:b2:e8:5c:59:90:d0:ec:04:5a:8c:60:47:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8A:8B:97:9D:57:2B:54:55:2F:A3:F3:39:CF:5C:36:43:DC:3D:12
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:e3:72:c1:27:2c:46:cc:16:d6:be:13:a5:13:5c:2d:26:
         1f:2b:82:e0:8b:87:ac:68:58:2b:25:f7:9e:30:cf:90:a7:d8:
         a2:4e:0f:0f:51:b0:e7:d2:52:ca:f9:5e:ea:22:35:72:42:65:
         bb:ad:10:b9:c4:9b:05:85:ab:a9:5e:bd:24:bb:73:96:7d:d9:
         0a:55:d9:eb:22:66:43:44:6d:33:7d:b3:2d:76:58:c9:06:e1:
         c8:5c:1e:9a:07:51:b8:78:f6:ef:19:f0:a6:7e:70:25:d0:32:
         56:d8:2c:c7:09:94:a8:03:d5:0b:29:41:96:2f:69:1b:91:63:
         2b:4f:1e:36:e8:2a:41:95:3b:bd:58:c6:24:91:02:1e:d8:43:
         30:2b:a7:0d:d8:e8:25:da:de:ac:3a:d5:43:18:c3:51:c4:93:
         50:2b:28:49:88:d1:77:5c:82:1a:41:4a:d6:81:e6:dd:dc:64:
         9b:c8:87:9b:d9:7f:74:37:44:63:ce:26:b4:92:52:98:a7:cb:
         a8:5f:43:77:ca:64:cd:33:1f:4f:56:7e:81:7d:f3:ca:5f:1c:
         9a:24:79:c5:52:de:20:82:ab:69:f2:2d:e4:44:33:00:01:c8:
         ee:37:de:97:7c:2c:f6:40:ef:94:42:6a:ed:2a:11:bf:d7:71:
         f6:69:77:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:45 2026 by rpki-client