This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File:                     Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier:          zyzdhFm+hBKFLCU2KvOQ8zcrAIkBGs+3m7a0AYjAJz8=
Subject key identifier:   60:FB:F0:0E:96:86:28:08:C9:1F:19:95:6C:67:65:D1:5B:BE:8E:1E
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer:       /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number:          FD
Signing time:             Fri 06 Feb 2026 05:36:18 +0000
Manifest this update:     Fri 06 Feb 2026 05:36:17 +0000
Manifest next update:     Sun 08 Feb 2026 05:36:17 +0000
Files and hashes:         1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: CudD9IMntZ5ZFpLvnL5tKB3JEC3HfoHbFGNaalfNOMs=)
                          2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 05:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
        Validity
            Not Before: Feb  6 05:36:17 2026 GMT
            Not After : Feb  8 05:36:17 2026 GMT
        Subject: CN=69857dd2-85dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:97:37:81:9c:c7:0f:b4:df:8f:3a:77:56:
                    a7:95:0d:8e:90:1b:33:73:b5:22:3d:9a:e1:f9:25:
                    a6:2b:24:87:a9:69:6e:ca:37:b4:64:2d:2b:a5:90:
                    4c:df:b8:29:66:af:ad:7f:22:6f:4f:2a:63:95:26:
                    f6:82:53:2b:4e:42:a1:9b:aa:9a:52:50:1e:61:06:
                    69:af:3f:f0:9a:ac:e6:b7:eb:a9:a0:3f:a9:ed:9e:
                    27:e4:92:b5:90:f3:ef:51:33:05:cd:2c:5f:b9:6e:
                    d7:a0:1d:3b:0b:e5:a7:75:da:c1:ff:bb:dc:b6:37:
                    8a:ff:d8:4c:6a:f9:1c:7b:28:fd:d8:29:4c:88:6b:
                    b7:00:e7:63:e9:7b:5c:96:40:71:f6:26:93:5e:b6:
                    d1:9c:a7:0f:0c:92:7b:a4:6e:fc:4b:ba:1d:d1:9f:
                    81:4b:74:4d:d4:83:b0:1b:22:ae:5f:41:3d:fd:65:
                    18:99:fb:37:a3:1a:82:91:96:95:4b:46:4b:1f:49:
                    8d:80:72:f4:74:43:55:c7:65:e2:05:87:b0:17:9f:
                    af:45:8e:78:84:f0:08:e8:92:98:a3:81:c3:f2:26:
                    8b:0d:b6:4d:3d:3c:be:5a:d3:e9:54:01:52:e4:87:
                    13:e2:f1:0b:a1:1f:18:69:d0:04:ea:5a:47:73:b9:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FB:F0:0E:96:86:28:08:C9:1F:19:95:6C:67:65:D1:5B:BE:8E:1E
            X509v3 Authority Key Identifier:
                keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:08:3a:21:c5:ca:f7:73:f4:31:8a:ce:61:99:93:86:34:cb:
         06:f0:32:9d:a8:ff:95:48:a6:e6:e6:d8:ef:a8:9d:60:f6:e2:
         2a:b0:b0:26:5f:2f:29:7a:8f:a3:d8:eb:0b:43:0a:41:1f:a3:
         cc:ff:1b:c5:a6:d9:24:da:34:25:42:a1:57:a9:09:05:44:8d:
         00:ec:14:e7:25:2a:48:79:d1:5b:b6:56:6a:55:40:c7:1e:cd:
         53:45:a0:35:a6:29:87:1e:98:8d:e0:db:44:7c:67:69:87:13:
         64:f9:9b:54:82:13:2e:6f:fe:cd:d0:fe:5b:ba:29:18:4c:8c:
         53:ab:84:31:e1:d6:69:f5:ed:f2:81:13:94:4b:cf:68:24:96:
         5d:93:bf:64:20:5e:9a:bb:31:51:9e:54:52:57:8e:05:11:00:
         4f:86:74:e1:ca:3e:d4:1b:45:ab:af:ac:83:e1:b8:7c:2e:f2:
         7d:ef:0e:c5:f7:76:a5:5d:8d:a1:70:d3:df:14:3b:12:95:d4:
         aa:dd:c9:1f:4f:13:39:f5:27:9e:65:91:cd:13:5a:3c:aa:dc:
         04:9a:19:ae:5c:45:97:0b:92:a4:af:7b:f7:1a:70:63:10:21:
         7f:35:09:42:6e:44:08:f5:7c:c6:77:08:2a:1c:88:5f:24:50:
         17:b8:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 23:59:29 2026 by rpki-client