This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          VLaXBj2xxc3UMp9nQZI5bzen9UvaBlmoNG8bqXVkPeU=
Subject key identifier:   B2:FE:8C:71:E3:2B:20:A6:85:60:DE:AD:C3:1F:E2:0C:0F:F9:D5:F1
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       0AE4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          0ADE
Signing time:             Sat 07 Feb 2026 01:15:38 +0000
Manifest this update:     Sat 07 Feb 2026 01:15:37 +0000
Manifest next update:     Mon 09 Feb 2026 01:15:37 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: mK+nJitNtV1zyDZJoYYebcuhson04xGo32hS1QE0DG4=)
                          2: 673C61B4A88611ED9FE7EDD4F1222468.roa (hash: m91FhF+zJneUBb3UfLyzUzRvHvpK/0b7/Z5lBS15Q2I=)
                          3: B03DD41482B211ED9ACDF2D8F1222468.roa (hash: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=)
                          4: 9C57BBCA514411E9819FB57FF8AEA228.roa (hash: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: Feb  7 01:15:37 2026 GMT
            Not After : Feb  9 01:15:37 2026 GMT
        Subject: CN=69869239-78a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:76:c0:bc:0e:ca:be:9e:84:0c:f0:15:2a:
                    1e:29:a7:6b:0f:61:49:7c:f9:7f:5e:36:66:ad:b8:
                    b3:bd:94:1c:5b:91:a8:a0:32:9b:12:b5:f9:64:eb:
                    68:71:f6:30:d9:c9:bc:8e:52:81:2a:78:e0:d0:1a:
                    5a:d7:6a:52:b1:ea:52:48:b2:df:5b:63:57:75:7d:
                    f0:ff:dc:15:ca:c9:d7:2f:1c:00:1a:55:07:cc:b4:
                    d6:7a:03:e9:77:90:7c:c2:19:03:34:83:54:7e:51:
                    53:d1:dc:52:fd:41:de:ac:0d:d4:71:70:17:3e:af:
                    c2:7c:f7:86:f6:95:e2:d8:6a:58:3b:c9:18:0b:1e:
                    51:43:25:e5:ac:99:9c:8b:a9:fd:16:8d:12:61:e8:
                    bd:dc:9f:0f:48:21:aa:b1:55:b8:2d:3d:15:ca:8d:
                    82:e3:15:ed:4f:08:f9:ee:ca:66:1a:dc:bb:d6:49:
                    51:be:14:7e:79:ee:28:d5:c2:3b:bc:bb:cb:12:e3:
                    10:63:5c:6f:17:20:f0:6c:7b:b6:1f:82:79:be:32:
                    2a:0e:e4:1e:f8:14:4e:08:71:d3:39:b7:01:8c:b0:
                    b6:48:ec:c1:9a:7b:dd:d5:40:b8:89:12:21:13:d0:
                    eb:b9:29:93:87:fd:85:17:8a:cf:3a:1e:a5:1b:95:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:8C:71:E3:2B:20:A6:85:60:DE:AD:C3:1F:E2:0C:0F:F9:D5:F1
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:78:22:a5:63:a7:5b:b4:67:2b:8a:f7:2f:7b:53:93:74:c7:
         bc:be:3d:cd:ac:ad:80:3a:54:54:0e:80:f1:be:73:97:8e:97:
         24:82:5c:a0:9a:1d:94:c9:06:63:1a:9e:c4:c2:5c:68:38:2e:
         d1:0d:b6:24:0f:13:23:cf:dc:2e:aa:71:b9:a0:9c:58:f3:f2:
         05:23:b1:b7:a5:ed:3a:57:1b:a4:c7:74:0a:fe:51:fe:13:ba:
         cc:8d:cd:3f:89:7f:3b:b2:f4:ec:41:3f:3b:e5:a9:7e:5f:96:
         f4:b6:36:03:58:56:30:5d:81:d2:23:17:5f:6a:93:19:0d:97:
         d0:ea:4e:d6:da:c7:28:c0:9c:62:a1:ae:b1:2b:3e:f9:f8:8e:
         ef:21:2c:05:c4:bb:17:e4:65:2f:43:84:8a:a9:9e:c9:23:8f:
         fd:f2:8d:fe:2f:8d:55:71:de:82:15:fb:8b:bc:cb:fa:61:20:
         b9:1d:97:97:9d:80:0f:6c:4e:4d:06:b8:07:d7:3d:07:d2:8a:
         fc:78:95:12:63:50:4c:4b:27:58:83:9a:fd:c3:7c:1f:81:a4:
         c7:4c:f2:05:e7:4c:ce:09:bf:fc:b7:97:eb:f7:9b:99:38:29:
         54:29:b8:13:79:29:9c:29:00:00:9a:cb:33:b6:09:dc:31:09:
         72:8f:2c:ca
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdBMDJBUjExMC8GA1UEBRMoRDZBNENFQjI1MEUxQjg5ODIzQzVBQzQzOTg3NEQz
NTFGOTBDNDJFNjAeFw0yNjAyMDcwMTE1MzdaFw0yNjAyMDkwMTE1MzdaMBgxFjAU
BgNVBAMTDTY5ODY5MjM5LTc4YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQmnbAvA7Kvp6EDPAVKh4pp2sPYUl8+X9eNmatuLO9lBxbkaigMpsStflk
62hx9jDZybyOUoEqeODQGlrXalKx6lJIst9bY1d1ffD/3BXKydcvHAAaVQfMtNZ6
A+l3kHzCGQM0g1R+UVPR3FL9Qd6sDdRxcBc+r8J894b2leLYalg7yRgLHlFDJeWs
mZyLqf0WjRJh6L3cnw9IIaqxVbgtPRXKjYLjFe1PCPnuymYa3LvWSVG+FH557ijV
wju8u8sS4xBjXG8XIPBse7Yfgnm+MioO5B74FE4IcdM5twGMsLZI7MGae93VQLiJ
EiET0Ou5KZOH/YUXis86HqUblejjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUsv6M
ceMrIKaFYN6twx/iDA/51fEwHwYDVR0jBBgwFoAU1qTOslDhuJgjxaxDmHTTUfkM
QuYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QTAyLzM5NTc3QjJBQjU4RTExRThCNjBBNDA2NEY4QUVBMjI4LzFxVE9z
bERodUpnanhheERtSFRUVWZrTVF1WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzFxVE9zbERodUpnanhheERtSFRUVWZrTVF1WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjdBMDIvMzk1NzdCMkFCNThFMTFFOEI2MEE0MDY0RjhBRUEy
MjgvMXFUT3NsRGh1SmdqeGF4RG1IVFRVZmtNUXVZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCeCKlY6dbtGcrivcve1OTdMe8vj3NrK2A
OlRUDoDxvnOXjpckglygmh2UyQZjGp7EwlxoOC7RDbYkDxMjz9wuqnG5oJxY8/IF
I7G3pe06Vxukx3QK/lH+E7rMjc0/iX87svTsQT875al+X5b0tjYDWFYwXYHSIxdf
apMZDZfQ6k7W2scowJxioa6xKz75+I7vISwFxLsX5GUvQ4SKqZ7JI4/98o3+L41V
cd6CFfuLvMv6YSC5HZeXnYAPbE5NBrgH1z0H0or8eJUSY1BMSydYg5r9w3wfgaTH
TPIF50zOCb/8t5fr95uZOClUKbgTeSmcKQAAmssztgncMQlyjyzK
-----END CERTIFICATE-----
Generated at Sat Feb 7 07:16:13 2026 by rpki-client