This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          ZbRWUW8WxN8LWhWZXAKYHmKqgT4QO6PMTPtSmfMJ71Y=
Subject key identifier:   6E:C3:B3:BF:C4:52:C6:F2:AB:EA:88:EE:C2:89:CC:B7:2C:17:D9:29
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       0200
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          01FC
Signing time:             Thu 29 Jan 2026 03:48:43 +0000
Manifest this update:     Thu 29 Jan 2026 03:48:42 +0000
Manifest next update:     Sat 31 Jan 2026 03:48:42 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: NMkHjN0lg7310519V1KreB0nvLy7/JnX/5LBcYt0nDM=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)
                          4: 077D2872950A11EF882E6662762E951A.roa (hash: FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Jan 2026 03:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF, serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Jan 29 03:48:42 2026 GMT
            Not After : Jan 31 03:48:42 2026 GMT
        Subject: CN=697ad89b-be3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:86:07:07:59:9a:10:7d:24:a5:b5:fc:22:2b:
                    c2:63:fa:15:ad:01:f5:dd:29:f8:f2:be:d1:19:f5:
                    4c:db:4a:07:8d:fe:71:44:53:dd:0c:51:e1:d2:9d:
                    46:61:89:89:2f:f2:bc:74:20:3a:94:68:1c:f3:b3:
                    ba:af:11:86:9a:08:de:0c:e5:c1:ad:c3:ca:42:f7:
                    6d:88:c7:fc:7a:c8:d5:8f:cb:eb:9f:ee:10:98:d1:
                    8a:70:50:72:42:6d:24:63:16:20:3d:1f:96:ea:ac:
                    aa:60:e7:52:2c:da:39:0b:5f:2f:c7:41:a8:4f:4e:
                    5e:a8:6f:4a:6d:ad:f8:be:f8:34:d7:35:36:3e:17:
                    d1:d9:0b:c1:73:81:c2:4f:40:93:09:21:7c:18:7a:
                    83:ba:4f:ef:ea:20:94:fa:2c:13:5a:9b:ff:e9:47:
                    09:16:4c:c5:32:f1:04:cf:31:71:81:1c:e0:c8:ba:
                    d7:0b:3a:a0:b7:eb:c3:3a:27:de:05:a0:1e:2c:b3:
                    52:ad:58:84:f1:b7:41:20:40:c2:c8:74:b2:4b:0e:
                    ca:18:bc:f9:0d:38:ce:4c:88:69:71:9c:0c:60:3c:
                    b6:a2:12:0a:44:0b:6d:d7:78:ba:06:68:ea:c9:44:
                    7c:4d:fb:c8:4a:71:27:b6:42:20:43:17:10:ba:a3:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C3:B3:BF:C4:52:C6:F2:AB:EA:88:EE:C2:89:CC:B7:2C:17:D9:29
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:77:f3:72:6e:6a:19:2a:87:51:db:ad:ec:ee:dc:47:b9:db:
         e0:b5:b2:f8:25:d2:4c:b8:c5:aa:47:ba:11:db:3c:b4:f4:a0:
         9c:54:9e:5f:fd:13:34:a3:c7:e8:05:f3:08:eb:05:de:f7:77:
         cd:e9:2a:41:18:42:00:b1:e8:2a:e3:d1:6c:2b:55:b2:6f:08:
         d5:32:ee:9e:78:c5:ed:2d:c6:c0:07:4a:27:1b:03:0b:eb:0d:
         8a:7c:93:e4:ee:3e:f5:06:9c:f7:fb:0d:64:83:c4:4b:4c:d9:
         0d:17:42:76:04:ca:16:bd:90:99:8f:ae:fb:6e:1d:c5:04:5d:
         af:d4:01:0e:10:81:19:21:a7:7b:19:28:64:52:1e:22:a1:ca:
         aa:84:a9:54:71:6b:43:ec:1c:a3:77:2e:33:e8:f5:d0:91:90:
         88:69:73:91:2c:82:8a:71:e0:b3:7b:51:ef:31:0a:3f:13:c8:
         34:03:c5:92:93:d3:db:2f:fd:38:78:04:5f:0a:a8:f4:1f:6a:
         58:17:06:52:7f:d4:31:5e:99:87:99:a3:86:fc:09:7c:3c:4e:
         4b:f3:95:03:d8:a3:69:94:f4:ca:dc:ba:df:15:80:b0:32:9a:
         59:2b:44:5b:6b:91:cf:9b:c1:80:d7:0b:09:26:17:0a:7a:81:
         0c:00:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 19:27:22 2026 by rpki-client