This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
File:                     e5XIh1o9qSB6rcxUQDFzjYpiLas.mft (raw, json)
Hash identifier:          ob73UQFxFFGtCNriWlRzEQGuXcPAQk4lIMZMm/iIkUc=
Subject key identifier:   FF:47:21:A5:5F:32:BA:E5:BE:C9:82:5F:A8:10:91:31:12:68:04:24
Authority key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
Certificate issuer:       /CN=F36E38E5AF/serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Certificate serial:       04CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
Manifest number:          04CB
Signing time:             Sun 25 Jan 2026 03:06:03 +0000
Manifest this update:     Sun 25 Jan 2026 03:06:03 +0000
Manifest next update:     Tue 27 Jan 2026 03:06:03 +0000
Files and hashes:         1: e5XIh1o9qSB6rcxUQDFzjYpiLas.crl (hash: t4g3rrvcoBU41heWiZF7GO4guGRCQ6nGVp/NGXP0OW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
        Validity
            Not Before: Jan 25 03:06:03 2026 GMT
            Not After : Jan 27 03:06:03 2026 GMT
        Subject: CN=6975889b-1c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:fd:ed:cc:82:13:c3:65:ec:1f:ed:65:61:
                    62:7c:0e:e5:f7:56:5b:d4:94:2f:ad:2a:0d:39:bc:
                    5e:60:01:3e:d3:d0:f5:0e:55:e6:a9:32:66:20:d7:
                    dd:04:08:fc:39:bd:be:38:e5:4b:2e:2c:e6:3a:2f:
                    b0:07:9e:46:a4:49:d6:0c:83:42:c9:7e:a3:ba:ca:
                    77:52:dd:8c:47:32:2e:a5:e0:fd:c6:3d:f1:eb:eb:
                    15:f7:44:d6:2e:53:8e:29:80:ee:55:71:fd:da:be:
                    ff:a5:60:fd:a1:24:66:b0:a1:07:22:2c:31:c1:83:
                    e9:2b:2c:5c:14:e6:00:ea:e1:ae:00:98:e2:bb:67:
                    02:ae:2c:76:c2:8b:1b:75:24:ff:14:0b:0c:c1:d9:
                    38:ba:0d:70:2d:52:93:f3:8c:b2:8d:a1:fb:6b:be:
                    33:3b:30:81:5a:07:88:8b:73:17:d3:88:f4:fc:27:
                    b2:d1:39:a5:7a:84:4f:5b:94:e2:3e:6e:d8:b6:b1:
                    7d:dc:9d:b8:dc:b1:c1:45:a4:a9:50:8a:3a:c6:c5:
                    06:62:63:92:75:7e:9e:b2:e8:54:b5:2d:77:00:ed:
                    5a:77:d1:39:83:c0:14:09:6c:23:fc:0f:46:68:75:
                    07:1b:69:c9:ac:ca:44:bf:3b:68:f3:61:e4:5f:d1:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:21:A5:5F:32:BA:E5:BE:C9:82:5F:A8:10:91:31:12:68:04:24
            X509v3 Authority Key Identifier:
                keyid:7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:18:d9:cd:3b:85:db:72:68:f1:15:7c:33:ae:e1:ab:16:4d:
         07:a4:79:2a:6f:e4:cc:b8:a8:c3:d2:ed:d1:93:19:7e:e2:50:
         87:76:7a:99:23:04:38:c8:bb:8a:78:f6:c2:fb:e9:0a:11:48:
         90:6a:83:36:3e:eb:9f:61:e2:d0:0d:70:86:d6:03:d1:55:36:
         d2:49:27:37:5d:d0:0f:07:cd:92:5e:a3:08:2f:47:0a:20:9b:
         63:1b:98:76:c0:40:1f:90:5b:3b:93:1f:a8:23:9d:bf:1c:29:
         3a:ab:ce:bf:2c:ca:cb:7f:7d:18:59:2d:99:2b:4a:2c:b5:07:
         cb:26:fe:ed:a6:a3:c7:2a:b1:d3:3c:f1:18:20:84:56:81:32:
         38:03:0d:16:bc:ca:8d:fd:d2:bc:d1:08:6a:62:7e:03:78:c4:
         38:ac:12:68:30:36:0f:b1:47:6f:4a:85:49:1b:2a:eb:5d:7b:
         fe:a3:eb:ee:c9:41:ae:b1:df:6d:de:86:6e:38:6d:e7:ac:65:
         2a:f2:c0:3e:5e:0b:06:f6:0a:0b:64:40:59:56:1f:b7:21:31:
         f0:06:d0:d5:0a:30:a3:76:9b:c9:ed:ff:86:0b:79:2e:72:1c:
         9b:45:73:a2:bf:9e:9e:b5:cc:db:a1:ce:9b:8b:9f:d6:a0:87:
         43:0d:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:10 2026 by rpki-client