This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
File:                     HN9pXb8nTSxpriwAwuTuF8mGqe0.mft (raw, json)
Hash identifier:          FYNBxkxFoOUlQvutZvxwbhxzk47UOyZyJ5sBomHhvGE=
Subject key identifier:   68:FC:B4:F9:C6:35:7B:AE:DB:5D:0F:EE:53:3A:31:DA:11:7A:54:EE
Authority key identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
Certificate issuer:       /CN=F3615533AF/serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Certificate serial:       0270
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
Manifest number:          026D
Signing time:             Fri 06 Feb 2026 04:25:14 +0000
Manifest this update:     Fri 06 Feb 2026 04:25:13 +0000
Manifest next update:     Sun 08 Feb 2026 04:25:13 +0000
Files and hashes:         1: HN9pXb8nTSxpriwAwuTuF8mGqe0.crl (hash: jthonOQjryHG4ZWXaWB226hRPD1XsLdr3A8tO1frCsM=)
                          2: 3F026DEC295911EF85667FFF7CDC24C2.roa (hash: UJYsWwlxlQmHxfZyQVF2D+4Hav01PXVdMWO+z82CBbg=)
                          3: 08F6F89E295911EFAEB4ADFB7CDC24C2.roa (hash: ISQZsHLWpfTcF1N56rrCqt5O7oqCjXKgBNZGt9pf+XI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615533AF, serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
        Validity
            Not Before: Feb  6 04:25:13 2026 GMT
            Not After : Feb  8 04:25:13 2026 GMT
        Subject: CN=69856d2a-099e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:bf:6a:3c:0a:0a:89:9b:eb:bc:12:c4:e5:
                    ac:ea:fc:85:b7:97:99:55:2f:de:db:cb:1f:11:31:
                    5a:be:8e:e2:7f:00:8a:fd:af:ba:a2:ae:38:46:dd:
                    da:80:04:99:c7:d7:63:6e:24:04:79:e0:1e:bd:88:
                    80:fa:94:97:ac:ab:80:41:32:44:c7:f0:fb:45:9f:
                    ac:5f:bc:0e:4f:47:40:a4:2e:61:4e:eb:b6:3d:51:
                    2e:52:3c:5e:9b:58:78:8f:6b:9c:d3:69:f5:56:5c:
                    2f:82:ac:b0:f9:00:4a:82:35:8e:c1:cc:16:e1:bd:
                    33:ba:b1:50:2d:03:60:78:01:b5:82:65:9a:9d:15:
                    5b:a2:17:24:40:15:1e:28:a7:16:dd:69:19:29:af:
                    d5:e5:c2:07:2b:0e:bd:fb:bc:5c:9d:19:e0:fd:22:
                    0b:da:8f:3f:2c:4e:c2:0f:aa:4f:93:3e:fe:56:4d:
                    ea:1a:58:a2:07:f2:ce:d2:fb:71:09:47:db:fb:a4:
                    5f:15:a8:d1:d5:8b:cd:30:90:3c:aa:11:47:d3:29:
                    25:b0:ab:5b:33:08:fb:59:38:71:3a:07:9b:4e:f1:
                    34:5c:dd:51:5f:f7:e3:37:4a:4c:c4:47:87:05:44:
                    bd:94:e8:a4:d2:67:b5:76:d5:e8:f1:8c:63:e9:17:
                    72:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FC:B4:F9:C6:35:7B:AE:DB:5D:0F:EE:53:3A:31:DA:11:7A:54:EE
            X509v3 Authority Key Identifier:
                keyid:1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:4e:99:96:1d:a2:0e:89:14:dc:d6:52:ad:a8:76:b8:21:
         38:c2:05:9e:81:88:6a:5a:e9:ad:42:61:a3:f1:cd:91:25:bf:
         f8:1a:52:f0:7f:c4:3f:d5:d0:13:75:7e:5b:ea:91:0c:ae:f3:
         32:7b:50:57:cd:63:36:17:c0:4d:ac:4a:c3:11:f0:60:b1:ba:
         2f:42:37:82:35:2b:08:e1:59:60:53:f6:09:27:22:64:f0:bc:
         62:65:2f:b7:75:cc:a9:b4:58:d4:7b:4a:1f:05:6c:b1:b5:3e:
         97:e7:b2:da:3c:b6:a9:2a:d6:9e:c4:00:2a:2c:0b:97:70:ec:
         a7:3b:9d:97:92:79:54:ae:e1:40:53:ba:d9:8d:21:9c:f1:3f:
         81:f2:1e:bf:a4:47:5d:ea:d0:ea:b7:28:09:e5:ed:fd:7a:a3:
         77:d3:45:06:85:5e:51:64:22:70:5a:db:2e:da:4e:8a:e6:db:
         c8:94:20:17:74:f7:d2:80:26:42:cd:23:37:f9:5d:1a:ff:c4:
         aa:db:a0:41:65:47:d1:e4:e0:4e:d3:9f:6f:b0:2a:21:a9:5c:
         4d:9d:c0:f9:c9:63:33:ac:94:e2:e4:80:be:39:d7:0f:e6:09:
         d0:83:0b:ad:1d:23:54:db:b9:7e:aa:8c:0d:db:fd:59:bf:96:
         f7:bb:51:16
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTU1MzNBRjExMC8GA1UEBRMoMUNERjY5NURCRjI3NEQyQzY5QUUyQzAwQzJFNEVF
MTdDOTg2QTlFRDAeFw0yNjAyMDYwNDI1MTNaFw0yNjAyMDgwNDI1MTNaMBgxFjAU
BgNVBAMTDTY5ODU2ZDJhLTA5OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXQr9qPAoKiZvrvBLE5azq/IW3l5lVL97byx8RMVq+juJ/AIr9r7qirjhG
3dqABJnH12NuJAR54B69iID6lJesq4BBMkTH8PtFn6xfvA5PR0CkLmFO67Y9US5S
PF6bWHiPa5zTafVWXC+CrLD5AEqCNY7BzBbhvTO6sVAtA2B4AbWCZZqdFVuiFyRA
FR4opxbdaRkpr9XlwgcrDr37vFydGeD9Igvajz8sTsIPqk+TPv5WTeoaWKIH8s7S
+3EJR9v7pF8VqNHVi80wkDyqEUfTKSWwq1szCPtZOHE6B5tO8TRc3VFf9+M3SkzE
R4cFRL2U6KTSZ7V21ejxjGPpF3L7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaPy0
+cY1e67bXQ/uUzox2hF6VO4wHwYDVR0jBBgwFoAUHN9pXb8nTSxpriwAwuTuF8mG
qe0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1NTMzL0Q4MEFGRTVDMjk1NzExRUZBNzk3MTdGNjdDREMyNEMyL0hOOXBY
YjhuVFN4cHJpd0F3dVR1RjhtR3FlMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hOOXBYYjhuVFN4cHJpd0F3dVR1RjhtR3FlMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTU1MzMvRDgwQUZFNUMyOTU3MTFFRkE3OTcxN0Y2N0NE
QzI0QzIvSE45cFhiOG5UU3hwcml3QXd1VHVGOG1HcWUwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYfU6Zlh2iDokU3NZSrah2uCE4wgWe
gYhqWumtQmGj8c2RJb/4GlLwf8Q/1dATdX5b6pEMrvMye1BXzWM2F8BNrErDEfBg
sbovQjeCNSsI4VlgU/YJJyJk8LxiZS+3dcyptFjUe0ofBWyxtT6X57LaPLapKtae
xAAqLAuXcOynO52XknlUruFAU7rZjSGc8T+B8h6/pEdd6tDqtygJ5e39eqN300UG
hV5RZCJwWtsu2k6K5tvIlCAXdPfSgCZCzSM3+V0a/8Sq26BBZUfR5OBO059vsCoh
qVxNncD5yWMzrJTi5IC+OdcP5gnQgwutHSNU27l+qowN2/1Zv5b3u1EW
-----END CERTIFICATE-----
Generated at Fri Feb 6 23:58:42 2026 by rpki-client