This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
File:                     k4vok1GoGkLfhHvzkxNy0JgwREY.mft (raw, json)
Hash identifier:          x5YtIN21wWMJQzONeXCqzbiTapjFOIiDdwa0IywvUSU=
Subject key identifier:   DB:86:64:5F:21:5B:80:9F:58:95:2F:B7:9C:B9:CB:19:E7:34:D5:B8
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Certificate issuer:       /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial:       0910
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
Manifest number:          0908
Signing time:             Sun 25 Jan 2026 01:40:35 +0000
Manifest this update:     Sun 25 Jan 2026 01:40:34 +0000
Manifest next update:     Tue 27 Jan 2026 01:40:34 +0000
Files and hashes:         1: k4vok1GoGkLfhHvzkxNy0JgwREY.crl (hash: +SeMAThkZzR5WC059ETN1viG9fGHsWSGXR+w0X8S7fk=)
                          2: F9B24804FDF611EDB9858F624AD9E6FC.roa (hash: XgiYHOYx4wcOXrZza9zqvfH5aFmrwXDAfxqyTM9D+GI=)
                          3: 3455CE3C6B3911ED8B33D1C3F1222468.roa (hash: toOai8ZBR3vTvdHeg3LaLL6gpVJazukKbGn3v/cuk0k=)
                          4: 4C042A44496311ED9930A0F9F1222468.roa (hash: e9ujQQYc0OEqAyhghA9cLn0dfJy3UKXs4mNrpCrPXck=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3412AF, serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Validity
            Not Before: Jan 25 01:40:34 2026 GMT
            Not After : Jan 27 01:40:34 2026 GMT
        Subject: CN=69757493-4997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:01:29:f0:a9:5b:28:ae:c9:d2:72:f9:8f:
                    d1:78:77:8b:d0:37:0b:2a:ee:78:f4:ef:15:a3:0b:
                    29:95:36:21:82:eb:79:62:ea:30:60:50:5e:17:92:
                    4b:2d:c8:d4:6e:da:65:1c:f1:e3:5f:c5:b2:a2:c1:
                    77:30:d6:1b:fe:3b:46:e1:f8:13:37:06:8e:c5:12:
                    14:51:55:96:d2:02:6d:a4:b1:72:8a:cc:cd:ba:f1:
                    f8:eb:69:80:79:c7:f4:4f:eb:5a:6f:df:68:d1:aa:
                    04:01:69:2b:44:51:51:80:38:05:cc:d7:8b:89:6d:
                    c2:b6:4f:d6:35:1d:ac:38:01:14:04:f3:ab:a3:b6:
                    4c:be:52:c1:c0:dd:02:30:27:c2:a0:f9:ab:1f:a8:
                    2f:51:ac:df:56:59:60:8b:a5:85:65:8b:d4:6e:5a:
                    9a:f9:1e:90:b7:2c:4d:d6:e2:9b:5f:30:aa:5c:7b:
                    60:7d:41:0a:11:67:b7:da:12:f6:25:27:3a:fa:7b:
                    f0:a2:c0:bf:ef:1a:cd:c7:2f:e1:0b:85:88:90:d2:
                    55:8f:16:2b:96:33:52:68:19:2f:25:cb:3c:e0:e1:
                    bb:ce:91:df:ff:ea:10:06:5f:6c:b9:9b:62:3a:eb:
                    e4:7b:45:77:41:ba:76:1b:3d:6f:65:96:05:76:20:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:86:64:5F:21:5B:80:9F:58:95:2F:B7:9C:B9:CB:19:E7:34:D5:B8
            X509v3 Authority Key Identifier:
                keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:3e:72:79:33:c3:38:d4:94:60:9a:4d:e0:b8:22:90:8f:
         f2:31:50:12:fe:78:86:65:f6:25:40:16:e3:f3:5e:22:31:78:
         ab:98:62:dd:49:47:e6:18:1c:ee:b4:39:77:9f:a9:1c:9f:92:
         f9:73:72:38:52:82:80:8f:f2:49:77:dd:fc:ab:0d:2c:ef:c4:
         7c:5d:f4:a7:69:55:57:bc:62:b0:1e:b2:25:cf:51:9f:02:42:
         f2:f8:88:03:2f:de:22:8a:11:fd:17:e2:ac:02:11:fd:05:6e:
         6b:53:06:43:b8:76:f1:91:58:45:cc:ec:21:53:63:d8:0f:d5:
         50:e2:46:5f:b2:4d:61:44:89:8a:de:44:fb:50:2d:9e:c6:b8:
         72:fd:84:2d:c9:a2:55:59:d4:08:cb:35:32:b8:ad:2e:54:af:
         0f:21:e4:20:41:8d:7a:a9:83:94:69:54:52:5a:7c:99:95:e9:
         6a:fa:fd:9a:58:74:71:d6:fc:93:5c:6b:b6:de:c6:71:ec:52:
         16:56:5d:c2:b2:da:33:f5:18:c3:70:8d:59:15:69:21:18:f1:
         99:b7:db:49:d3:03:93:1d:e2:47:5a:11:23:e6:56:16:53:32:
         88:6e:7b:2e:5a:82:61:47:a1:d8:0e:35:dd:a8:fc:5b:3b:fc:
         9f:b3:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:03 2026 by rpki-client