This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
File:                     eJra0zjCDXJE3Hvm0PRKklP8jxM.mft (raw, json)
Hash identifier:          rt88AsiNmnzoAVI4NCfCOT34+El8JCW8juT5Mvy2NxM=
Subject key identifier:   95:E5:EA:E8:CA:CE:C2:CC:6C:33:8E:A6:0B:C9:6D:13:D5:B2:9A:AB
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Certificate issuer:       /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial:       014F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
Manifest number:          014D
Signing time:             Sun 25 Jan 2026 04:52:46 +0000
Manifest this update:     Sun 25 Jan 2026 04:52:45 +0000
Manifest next update:     Tue 27 Jan 2026 04:52:45 +0000
Files and hashes:         1: eJra0zjCDXJE3Hvm0PRKklP8jxM.crl (hash: 5rex2lwz4Kzps+cVH9KJAWlQYuxcK15o+L9cjc4YKJM=)
                          2: 3F9659F6FA5711EFA9433954762E951A.roa (hash: qKiDyS4k3Pb0vrru4mPYqluJ2Rx/UxF8Iobn+ms5BiI=)
                          3: DC0411CAFA5711EFA0C15158762E951A.roa (hash: 3eW9DvSOVij5SdKc0NclAvUK7jyKsaBWMt4dydb1suk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE687AF, serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
        Validity
            Not Before: Jan 25 04:52:45 2026 GMT
            Not After : Jan 27 04:52:45 2026 GMT
        Subject: CN=6975a19e-a012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:3a:fe:46:33:e2:5b:f8:34:4c:26:b5:ef:
                    37:10:bc:d5:1d:b2:6f:c3:5b:f2:ac:bd:16:eb:3c:
                    1e:dd:39:50:30:7b:f6:3b:ac:e8:63:b0:3f:70:87:
                    32:f8:e2:c0:c6:c8:50:7e:a9:2b:f7:2c:55:1e:a0:
                    f8:0e:9d:7c:88:b1:1f:f9:42:a4:e0:fe:f3:09:ac:
                    69:a7:4a:6e:d9:e4:a4:e2:09:de:83:29:ca:d6:62:
                    a1:2c:89:41:fb:1a:97:cc:63:69:fe:62:2b:d1:6b:
                    0c:92:b6:30:f7:13:73:0f:54:e1:89:93:e1:c9:15:
                    e6:89:24:f3:5f:0e:77:be:0d:3c:03:bc:d9:94:b8:
                    7d:9c:f1:ae:f0:cd:1c:9b:a0:44:9d:97:9a:98:96:
                    32:b9:c9:06:fd:d8:fd:d7:6a:f5:df:2e:92:b2:92:
                    f9:34:11:d7:64:18:a9:49:87:c5:59:56:51:d9:72:
                    e2:62:e8:80:3a:6e:d1:cc:89:f1:b7:ab:03:63:b4:
                    4a:91:97:15:25:5a:70:db:82:bc:b9:23:81:2a:71:
                    8e:f3:be:ed:3b:d1:e7:eb:04:91:0e:65:dd:f6:61:
                    23:3f:bf:aa:a9:e5:f3:5b:6c:9f:b8:fc:8a:55:ee:
                    7f:36:99:43:d3:32:6c:1a:3f:d2:b2:58:5a:d8:17:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:EA:E8:CA:CE:C2:CC:6C:33:8E:A6:0B:C9:6D:13:D5:B2:9A:AB
            X509v3 Authority Key Identifier:
                keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:df:73:93:84:50:ca:5d:ec:4a:54:57:de:c4:d1:c0:6d:
         80:a8:f0:a8:ae:69:74:03:2e:69:88:87:2b:28:6b:96:98:12:
         cc:97:5d:71:84:fb:6c:d0:29:7a:28:41:89:ad:12:a6:3a:53:
         b3:b4:13:cc:86:75:af:4a:64:46:35:74:a7:29:95:f3:d2:b5:
         c3:e6:5d:21:26:5d:bb:b4:cd:ad:94:e0:83:20:25:58:bd:06:
         09:a8:c7:2a:fd:89:ac:73:06:7a:7c:56:6b:75:67:cc:f7:94:
         17:33:ed:25:d3:ab:e4:fd:b5:55:46:90:93:a6:83:da:fb:9b:
         16:60:4f:eb:aa:2c:e5:c7:6e:51:c0:24:7c:b5:e1:f0:74:16:
         8c:11:48:d9:0d:43:4f:5a:de:ec:17:7e:da:d4:12:b8:3a:3f:
         05:77:9a:82:41:20:29:3c:13:a6:6a:52:8c:98:cc:38:76:6d:
         f0:62:17:81:68:69:56:59:41:92:c4:35:32:60:8b:bd:43:20:
         5c:bc:2b:4f:73:d7:54:9a:c9:22:ab:94:c7:47:97:a6:38:10:
         88:0c:28:39:5d:84:10:2e:0d:f3:79:c3:17:e8:9a:75:7c:5e:
         d6:0b:f6:14:16:f0:a8:cb:27:97:85:4a:53:87:00:bf:67:53:
         1b:88:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:45:55 2026 by rpki-client