This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File:                     jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier:          x0nd60DIq20Y2vptlSyZUEphnW74jeOgW9gGp4hGwCY=
Subject key identifier:   55:97:B3:BE:62:8E:4F:8D:39:55:CD:34:12:3E:FF:9C:FE:C7:E6:F3
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer:       /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial:       04E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number:          04E6
Signing time:             Fri 06 Feb 2026 03:06:51 +0000
Manifest this update:     Fri 06 Feb 2026 03:06:50 +0000
Manifest next update:     Sun 08 Feb 2026 03:06:50 +0000
Files and hashes:         1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: MrSx2DPx6scr/WGr6vi2epBU8K2BetdDB2lKVHrtW10=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
        Validity
            Not Before: Feb  6 03:06:50 2026 GMT
            Not After : Feb  8 03:06:50 2026 GMT
        Subject: CN=69855aca-edbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:59:cd:d6:ab:7b:8e:47:ac:d2:4f:6a:06:
                    9b:1c:51:00:64:64:11:48:37:f9:4b:9d:3a:3c:20:
                    bd:8b:b0:51:4c:d7:b9:91:84:f1:d4:ae:dc:bd:77:
                    d1:9b:9d:c1:72:a9:44:ff:f5:b0:15:2c:02:3e:1d:
                    24:2a:e7:d7:ac:75:da:39:b8:97:c6:bc:09:01:8b:
                    20:3a:ea:c0:b8:d6:1b:a6:6a:d2:a8:11:de:64:c0:
                    ec:6f:ca:61:52:0f:16:b6:f1:c7:33:5f:c8:36:80:
                    04:2d:7d:fb:61:d8:c5:86:20:6d:ba:40:f0:65:41:
                    4e:1a:1c:f8:5a:30:7d:7d:39:7f:fb:dc:90:6c:7a:
                    a7:f1:e8:57:9a:65:11:15:fe:57:67:4b:cf:7d:2a:
                    5e:34:56:b7:ac:ae:8d:1b:61:d9:e6:aa:73:84:7b:
                    3f:05:55:fb:46:cf:c1:4a:17:81:34:d9:7d:56:ab:
                    26:4d:41:5e:b5:5c:b7:79:86:11:76:4a:2f:d1:10:
                    81:3b:2b:03:73:0d:61:ed:a9:30:d7:a8:14:b1:ff:
                    4b:e3:1e:c6:0b:b9:b0:3a:6c:64:d0:cf:88:82:b1:
                    e3:74:73:90:fe:a5:ab:c2:e9:24:f4:c8:55:c9:f5:
                    43:16:77:b9:64:ff:f6:b1:4f:1d:5e:49:f1:77:d6:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:B3:BE:62:8E:4F:8D:39:55:CD:34:12:3E:FF:9C:FE:C7:E6:F3
            X509v3 Authority Key Identifier:
                keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:be:1c:2d:80:0e:74:fa:c8:cd:45:38:95:8d:0f:8f:d0:b4:
         6b:eb:03:5a:47:22:30:63:53:89:7a:a6:c6:eb:dd:05:58:88:
         6c:a9:cd:dd:8c:df:67:fd:8c:28:c2:34:fc:d6:bb:a2:25:d3:
         1b:30:0e:98:3d:ad:e6:1b:db:cb:af:b4:d8:eb:8f:de:b3:57:
         19:62:c3:c5:d1:73:bf:25:7e:1f:88:b6:e8:7b:d2:72:99:4f:
         80:cf:17:a5:22:8f:de:20:63:c9:06:82:97:17:f3:78:a6:bd:
         df:13:78:b9:b4:18:1d:a0:a3:74:29:3a:86:7a:d9:f3:e2:4b:
         d7:98:8e:a6:90:fe:4e:d4:1e:b0:43:34:3e:65:2a:7e:79:16:
         8b:d3:8f:30:c9:a0:41:17:73:e1:84:45:c8:c6:a5:3b:ff:dd:
         67:50:69:2a:28:45:eb:11:59:bd:97:a2:8b:41:53:b2:3f:30:
         33:ba:b1:8d:4d:a3:d9:73:9b:92:3c:a7:aa:bf:a4:2c:ee:e1:
         e8:ad:d7:10:98:b7:a3:70:5a:a2:84:34:3a:e4:d9:64:f6:b0:
         31:89:53:0c:8c:63:26:f3:7e:4f:08:90:bf:6f:91:ee:98:e3:
         84:72:7f:61:ef:83:48:ab:28:d3:09:32:90:71:33:6f:60:5b:
         59:6c:57:1f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDI4MThBRjExMC8GA1UEBRMoOEVBRDRCOTE0QjZGN0M5MjhFMTJGRTM4RDFDNDQw
QkM1MzA5QzEzMzAeFw0yNjAyMDYwMzA2NTBaFw0yNjAyMDgwMzA2NTBaMBgxFjAU
BgNVBAMTDTY5ODU1YWNhLWVkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiQVnN1qt7jkes0k9qBpscUQBkZBFIN/lLnTo8IL2LsFFM17mRhPHUrty9
d9GbncFyqUT/9bAVLAI+HSQq59esddo5uJfGvAkBiyA66sC41humatKoEd5kwOxv
ymFSDxa28cczX8g2gAQtffth2MWGIG26QPBlQU4aHPhaMH19OX/73JBseqfx6Fea
ZREV/ldnS899Kl40Vresro0bYdnmqnOEez8FVftGz8FKF4E02X1WqyZNQV61XLd5
hhF2Si/REIE7KwNzDWHtqTDXqBSx/0vjHsYLubA6bGTQz4iCseN0c5D+pavC6ST0
yFXJ9UMWd7lk//axTx1eSfF31kZ5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVZez
vmKOT405Vc00Ej7/nP7H5vMwHwYDVR0jBBgwFoAUjq1LkUtvfJKOEv440cRAvFMJ
wTMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyODE4LzkyMjRCMzBBNDlGRDExRUQ4NjkwMTk5MUYxMjIyNDY4L2pxMUxr
VXR2ZkpLT0V2NDQwY1JBdkZNSndUTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pxMUxrVXR2ZkpLT0V2NDQwY1JBdkZNSndUTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDI4MTgvOTIyNEIzMEE0OUZEMTFFRDg2OTAxOTkxRjEy
MjI0NjgvanExTGtVdHZmSktPRXY0NDBjUkF2Rk1Kd1RNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRvhwtgA50+sjNRTiVjQ+P0LRr6wNa
RyIwY1OJeqbG690FWIhsqc3djN9n/YwowjT81ruiJdMbMA6YPa3mG9vLr7TY64/e
s1cZYsPF0XO/JX4fiLboe9JymU+AzxelIo/eIGPJBoKXF/N4pr3fE3i5tBgdoKN0
KTqGetnz4kvXmI6mkP5O1B6wQzQ+ZSp+eRaL048wyaBBF3PhhEXIxqU7/91nUGkq
KEXrEVm9l6KLQVOyPzAzurGNTaPZc5uSPKeqv6Qs7uHordcQmLejcFqihDQ65Nlk
9rAxiVMMjGMm835PCJC/b5HumOOEcn9h74NIqyjTCTKQcTNvYFtZbFcf
-----END CERTIFICATE-----
Generated at Sat Feb 7 00:13:44 2026 by rpki-client