This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File:                     3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier:          BN37N69U/VMQuuG/bNx64a8TvZJLxHurBhmh4Fh/ClA=
Subject key identifier:   D2:67:82:EA:39:3C:C6:5E:F4:A2:84:1C:D7:13:53:46:DC:3D:3B:F8
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       0697
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number:          0695
Signing time:             Fri 06 Feb 2026 02:24:04 +0000
Manifest this update:     Fri 06 Feb 2026 02:24:03 +0000
Manifest next update:     Sun 08 Feb 2026 02:24:03 +0000
Files and hashes:         1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: Y4hMEuvpfwBVPgi1/Pkb+fE+fzTUxVmFrxmnizHW4wA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 02:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Feb  6 02:24:03 2026 GMT
            Not After : Feb  8 02:24:03 2026 GMT
        Subject: CN=698550c4-bbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:bf:5b:ae:23:7f:35:48:15:8e:0f:db:fd:
                    95:2b:05:1d:9e:1e:35:5a:4a:b8:b1:48:0a:da:3b:
                    d4:93:c1:f9:f1:b4:87:07:74:f0:7a:6e:a3:f6:33:
                    b3:a5:ed:c3:d1:20:f3:55:f1:3d:0c:6a:27:5f:3c:
                    df:ee:84:68:c2:47:ee:9a:78:ec:5d:76:51:08:5d:
                    bc:cc:d2:b4:34:fe:f3:56:03:96:c6:94:9b:c3:09:
                    9e:19:83:f4:c2:3f:17:be:59:69:92:f6:03:3a:9f:
                    2e:1d:6e:e4:57:d7:23:4b:33:44:45:9b:53:6b:6b:
                    82:27:48:62:de:cd:e6:6e:b7:db:ce:ab:16:21:9a:
                    a1:9f:e9:8f:ce:68:6a:be:21:93:45:53:21:5e:fe:
                    90:12:dd:98:e9:2d:2a:99:f1:32:01:f5:03:4c:60:
                    04:9e:7a:f8:3f:17:c9:f7:1e:c0:16:ff:fc:9d:66:
                    dd:69:5c:ab:b3:ee:66:ad:4f:d9:f9:de:6e:16:a0:
                    90:b3:fd:ed:d1:d5:1e:ad:00:ea:23:7d:7b:cb:f5:
                    54:88:75:cb:20:b9:0b:9e:e0:e3:1c:5f:f5:22:20:
                    21:28:0f:74:cf:00:12:9b:e9:01:08:bc:9b:23:2f:
                    90:5d:35:91:57:54:6f:2b:7d:93:a2:25:a3:88:5c:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:82:EA:39:3C:C6:5E:F4:A2:84:1C:D7:13:53:46:DC:3D:3B:F8
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:37:ef:88:9c:af:11:46:06:3d:7f:74:c1:86:f0:83:77:
         64:c1:dc:60:c6:29:db:6c:9f:cd:b0:61:5b:51:33:00:10:2d:
         25:b5:06:89:73:ab:4b:42:8a:ec:ec:c8:b9:8b:cc:40:2d:10:
         6c:67:b2:93:67:99:c9:5f:61:09:9f:5a:23:34:e3:12:95:8b:
         37:86:13:e5:72:74:45:99:39:d1:f2:f8:76:b1:3d:4b:14:99:
         b2:a8:29:ec:19:7f:b0:73:3c:66:fc:c6:3a:08:80:26:30:19:
         8b:d8:e9:c4:51:91:4e:a1:24:94:03:0a:6f:4c:89:b0:2d:74:
         61:3a:0d:d6:24:d8:77:08:91:33:b3:6f:65:2b:b3:df:ef:23:
         c1:0a:b6:29:11:63:d6:40:4c:57:45:a2:ae:88:18:ed:d4:02:
         aa:48:84:8c:65:3a:21:70:d6:f8:df:4b:a1:4b:19:d1:78:5f:
         fb:f6:5b:98:92:3e:28:e9:65:0b:22:40:38:a2:85:16:f6:60:
         de:2c:01:3a:37:66:33:a9:9f:7f:29:14:69:bc:eb:ec:a4:54:
         2f:eb:b7:15:b7:c6:c7:50:45:f2:f4:1d:39:62:34:72:fd:59:
         d3:f1:2e:dd:56:2c:24:03:9b:c0:a8:f3:ca:7c:6d:64:42:bf:
         ab:8a:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:23:56 2026 by rpki-client