This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
File:                     SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft (raw, json)
Hash identifier:          qQ/I+xD8Sn1c6pFG39egwOxI6cJk1ANjciJC7zZBA8o=
Subject key identifier:   04:1D:42:19:C5:F0:E7:47:29:E9:D2:3B:3A:65:A8:47:89:93:F9:00
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Certificate issuer:       /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial:       028A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
Manifest number:          0271
Signing time:             Mon 26 Jan 2026 04:18:34 +0000
Manifest this update:     Mon 26 Jan 2026 04:18:33 +0000
Manifest next update:     Wed 28 Jan 2026 04:18:33 +0000
Files and hashes:         1: SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl (hash: UQi7eGxgZvYoFwrIIwRIyfm9qcHCUYJwvJHSZpgnVqk=)
                          2: FA56183C4A2E11EF935CD441762E951A.roa (hash: qasmLn0THzKUXPfZdrwuy9yINB8A6qwmZTMMTYcCuGE=)
                          3: 7A3144EE4A2211EFB67B7D60762E951A.roa (hash: j3JAykS4OQX/hDoFdEl316HNecziqAF0XC9NdGRUFKs=)
                          4: ACA70A7E4A1F11EFB750724B762E951A.roa (hash: jJTJnCCr3s4j/KC7iphB3k6ogrQ8G2LscLSFEQgVdg0=)
                          5: 9C73B5384A2611EF8F9A1380762E951A.roa (hash: nRAl69sp6vxHIEfCOCmW9Tz389R1auBc2Q7TENAtRGg=)
                          6: 148FD532495611EFAF07166C762E951A.roa (hash: ceOINoEGaKZPmp9jQxtF1qPs3DuclWxOvdxTt3Kbm/Q=)
                          7: B8A021FA4A2211EF8E185461762E951A.roa (hash: REvrDWvDpOLHYskkTXn9T4RA7HGDSP4fR+NvvGDn1uM=)
                          8: 6C108DB64A3611EF92C1C272762E951A.roa (hash: 3LWWxZduhASOp99bwc0yFeC4A2HSLl0PaRIJhKGmd80=)
                          9: 3CBFED64495411EFB6814C5D762E951A.roa (hash: rYrqlqO0kH8b1oM3UkYuWQ0BlyjcbnvQAaOtL36BdpY=)
                          10: 5452C2DA495911EFB60F9885762E951A.roa (hash: jm5I0TsEDHwv7ouFvepzTDlWJcMqPxPV2YIxH7RtI10=)
                          11: 498D37264A2711EFA1894F85762E951A.roa (hash: VQjB7QxkyWPW6zXkuLfk+fW9phqSykjKICBVdLaBH3M=)
                          12: BFD83C124A2E11EFB4893BBC762E951A.roa (hash: f5W6wC5Z6Pqj371DpiEXu2jOcFA6/nWQTPbxHnSrCKQ=)
                          13: A8B9E3A0D23211EFA0D093AD762E951A.roa (hash: TwodjfSPJtOum7H0x8fQ1+YqsoDP0TA/A3LbvBR8fR0=)
                          14: 0489B53CA44E11F0AC16C09CDAE4EC9C.roa (hash: a2XOlsngKOqqGq1EHjARQHyDrpnuVCxetumHZtqolnw=)
                          15: B5F67940495A11EFBD9D1F91762E951A.roa (hash: Fxf/e9tt77VXipQwVutTjXDkhsLGh3QnCmbowhMJuac=)
                          16: 6D2E74EC495A11EF8DD0F68C762E951A.roa (hash: Tx9oqh45dbtkEF/evkOGPsO3I8D+e6jKaajVRCuI6SI=)
                          17: 36179DCE456511EFB6170CA4762E951A.roa (hash: fW31+smtFp89q7DbRmjBn7koBQzEeA4McjXb/UoaZ+8=)
                          18: CD63089443D511EFBF754787762E951A.roa (hash: rXdaal/ApEINvTRYPpslBerAIR2l4UEEtidE419g51Q=)
                          19: 335AE6084A2F11EF9F06A342762E951A.roa (hash: +Jag2XtPaReW28LLYskeApEkdXybNuIZuhATM6amnqA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AF, serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
        Validity
            Not Before: Jan 26 04:18:33 2026 GMT
            Not After : Jan 28 04:18:33 2026 GMT
        Subject: CN=6976eb1a-3130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:ae:a7:45:fd:4e:b2:64:26:53:d4:7a:2f:
                    ce:30:d8:12:2e:de:bf:c1:97:ec:c7:e0:04:af:09:
                    1d:7b:f7:7f:f6:a3:15:cd:d6:97:55:06:ad:4e:d1:
                    9b:e1:3d:78:d6:ea:75:a6:de:cf:72:55:5d:b7:11:
                    1f:ef:23:4b:0d:13:a1:8f:cb:6e:5f:98:d7:11:67:
                    88:63:68:2e:f8:0d:6a:d7:f1:b4:bf:3e:08:a3:81:
                    40:35:b1:89:b4:13:22:42:ec:5c:ce:e3:2e:af:32:
                    85:0f:a2:38:a4:13:e1:ed:50:ba:0d:bb:3c:63:84:
                    fa:93:3f:2a:61:98:5d:2b:f9:c9:91:44:1d:87:f1:
                    da:ac:2b:64:39:45:62:66:23:a7:82:a5:e5:be:9c:
                    bc:f1:cb:5f:f0:fe:e1:e2:75:73:f9:d2:00:82:db:
                    61:94:0f:52:a7:57:21:58:7d:ab:83:af:a4:54:eb:
                    59:c6:6c:c6:68:81:7d:3c:f8:9c:a0:96:61:09:4f:
                    cd:ee:e4:c3:42:54:a4:dd:04:cf:52:c5:50:ab:ff:
                    af:eb:a6:76:50:28:1b:f6:14:db:18:34:22:14:4c:
                    56:48:81:08:80:64:d0:9b:b4:bb:91:51:be:68:92:
                    ee:ba:82:5a:1e:f9:5c:51:5c:fe:71:22:fe:17:bb:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1D:42:19:C5:F0:E7:47:29:E9:D2:3B:3A:65:A8:47:89:93:F9:00
            X509v3 Authority Key Identifier:
                keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:a9:5c:67:67:14:5f:86:3f:78:4f:c1:fd:23:3b:4b:27:
         0d:c4:3d:5a:00:59:60:6c:a2:c7:b3:27:2e:34:82:ff:58:c4:
         6a:77:47:c6:05:ce:33:1a:30:ba:ab:6d:cc:40:b4:13:fa:b9:
         66:87:b5:4c:b2:38:47:fd:4d:b6:95:fb:75:1d:bc:06:4f:29:
         26:49:a0:71:1b:b2:4f:36:39:21:93:b4:7a:ff:e7:f4:31:5a:
         13:27:93:f2:e8:72:47:64:d2:32:42:a2:75:87:25:c9:36:89:
         92:65:ed:ea:5c:17:b6:31:38:8c:7f:88:cf:fe:98:b8:58:6e:
         ef:da:77:f4:31:f2:16:26:7b:6a:4a:06:4a:b8:4a:49:d3:b2:
         d5:e4:54:ae:19:15:91:5d:ff:c3:a1:59:c9:fb:8d:e2:ba:98:
         a7:44:d6:82:c0:d1:66:7b:20:9b:aa:c1:6a:fc:f0:b7:16:29:
         1c:7a:e8:52:db:7a:b4:ee:02:a1:11:54:d1:e0:34:a4:74:c1:
         aa:57:ff:7c:d2:33:d8:48:52:b6:1d:90:4a:a4:9f:0f:ec:15:
         e4:85:60:88:e8:a8:e6:b0:4f:66:f7:85:20:95:fc:7e:4c:39:
         5a:2a:ab:29:f2:cb:23:61:df:e5:f4:c8:27:3f:6e:ff:f3:49:
         71:e7:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:39:43 2026 by rpki-client