This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          dwqH3n3ylBJI3pwSCdMq2ZuRPkLHIZVO5tuQ0f6Ld2Y=
Subject key identifier:   82:63:EE:AF:00:BC:AE:F2:D6:FE:23:53:F5:15:FE:21:80:25:4D:04
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       025D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          025D
Signing time:             Sat 07 Feb 2026 04:19:19 +0000
Manifest this update:     Sat 07 Feb 2026 04:19:18 +0000
Manifest next update:     Mon 09 Feb 2026 04:19:18 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: 2iCwth7MK1VsZJiN+P3vohTRZa+JktN4g2A+OT/wDEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: Feb  7 04:19:18 2026 GMT
            Not After : Feb  9 04:19:18 2026 GMT
        Subject: CN=6986bd47-2c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:c8:20:57:ec:c7:be:ef:18:65:1f:47:68:
                    11:92:2c:49:3d:a9:f6:60:08:b5:ae:7d:e7:3f:12:
                    4c:25:0b:e6:39:1d:af:78:3b:dd:04:41:8e:af:3e:
                    42:91:0b:1c:44:6e:12:b7:a4:38:13:36:be:37:21:
                    a9:c4:6f:02:50:bc:f5:18:5c:87:fc:ea:a2:9f:3a:
                    b7:03:84:46:bc:e0:65:d6:a7:03:c5:80:a6:fb:96:
                    3d:cc:a0:b8:bd:fb:7a:42:1c:36:b5:a1:2c:14:69:
                    ab:46:91:b9:b1:43:e5:22:84:54:a0:a5:ca:f6:cb:
                    af:33:b7:3c:bc:2d:47:33:a8:8c:72:64:95:22:87:
                    d7:69:b6:32:96:00:b7:57:59:20:3c:e0:9c:4c:40:
                    38:3f:6b:21:49:b1:50:26:61:d1:0d:59:b8:6d:a6:
                    2a:3d:7d:f7:05:5a:70:b5:a8:90:30:cd:18:f2:aa:
                    80:35:94:78:34:7c:03:58:99:c1:5b:48:9b:03:ff:
                    ca:b3:d7:ef:99:77:72:f2:5c:4c:b5:fa:38:90:b4:
                    8f:4c:2a:56:74:03:0b:ae:62:d5:be:e6:30:29:ec:
                    48:1c:2e:9d:65:b0:db:d3:dc:46:17:ad:19:38:6a:
                    75:61:0d:5a:58:ea:49:7f:f1:c8:55:a6:0c:4d:49:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:EE:AF:00:BC:AE:F2:D6:FE:23:53:F5:15:FE:21:80:25:4D:04
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:24:5f:5b:51:91:dd:bb:9c:f8:21:5d:39:73:f6:d7:21:0b:
         6d:95:fb:69:48:bf:9c:fc:45:f4:60:d6:3a:e6:29:64:6a:c7:
         89:5e:b3:5e:73:ac:e5:60:4c:74:fb:78:66:5b:90:09:0e:09:
         74:9d:cb:3b:72:70:8f:ff:13:ed:53:55:3f:1c:99:82:47:96:
         f1:d2:fb:2d:f3:05:38:cc:ab:30:b4:98:61:29:3a:3e:84:89:
         1b:41:fd:24:3c:be:41:b2:fd:28:ac:57:40:b0:38:18:70:b0:
         ba:41:10:d8:77:63:54:84:69:55:c6:e5:8c:f5:27:8b:f0:3a:
         ad:e7:8a:03:4e:aa:4b:09:e9:9b:1f:d9:7a:4f:5c:4b:f0:04:
         26:e8:9b:1b:06:a4:e7:79:81:1f:6a:44:95:46:3a:10:d9:c1:
         61:2b:db:e2:f7:83:74:f9:d1:59:8e:29:6c:a2:e6:57:b7:a2:
         fa:72:fb:0f:c5:76:18:99:a9:bc:54:51:db:50:2f:81:ec:fc:
         c3:94:67:15:93:95:d3:a6:35:0c:65:2e:a9:99:5d:77:ec:31:
         29:66:3b:5a:50:f0:22:e7:6e:ee:0b:eb:70:c9:cd:31:46:2e:
         c7:ca:35:31:ce:8d:59:e1:6f:c7:7e:ae:95:02:af:49:d6:fc:
         af:69:3f:1a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDJDQjFBUjExMC8GA1UEBRMoQTZBMzQzQjI3RjlGNzYyQUU0MUNGN0M1QkM2QjUx
MTRDMjg4NUE3NzAeFw0yNjAyMDcwNDE5MThaFw0yNjAyMDkwNDE5MThaMBgxFjAU
BgNVBAMTDTY5ODZiZDQ3LTJjODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmGsggV+zHvu8YZR9HaBGSLEk9qfZgCLWufec/EkwlC+Y5Ha94O90EQY6v
PkKRCxxEbhK3pDgTNr43IanEbwJQvPUYXIf86qKfOrcDhEa84GXWpwPFgKb7lj3M
oLi9+3pCHDa1oSwUaatGkbmxQ+UihFSgpcr2y68ztzy8LUczqIxyZJUih9dptjKW
ALdXWSA84JxMQDg/ayFJsVAmYdENWbhtpio9ffcFWnC1qJAwzRjyqoA1lHg0fANY
mcFbSJsD/8qz1++Zd3LyXEy1+jiQtI9MKlZ0AwuuYtW+5jAp7EgcLp1lsNvT3EYX
rRk4anVhDVpY6kl/8chVpgxNSXOxAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUgmPu
rwC8rvLW/iNT9RX+IYAlTQQwHwYDVR0jBBgwFoAUpqNDsn+fdirkHPfFvGtRFMKI
WncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyQ0IxLzQyODBDRTYwMzQ4OTExRUZBQTE4NjZBMjc2MkU5NTFBL3BxTkRz
bi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3BxTkRzbi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDJDQjEvNDI4MENFNjAzNDg5MTFFRkFBMTg2NkEyNzYyRTk1
MUEvcHFORHNuLWZkaXJrSFBmRnZHdFJGTUtJV25jLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYJF9bUZHdu5z4IV05c/bXIQttlftpSL+c
/EX0YNY65ilkaseJXrNec6zlYEx0+3hmW5AJDgl0ncs7cnCP/xPtU1U/HJmCR5bx
0vst8wU4zKswtJhhKTo+hIkbQf0kPL5Bsv0orFdAsDgYcLC6QRDYd2NUhGlVxuWM
9SeL8Dqt54oDTqpLCembH9l6T1xL8AQm6JsbBqTneYEfakSVRjoQ2cFhK9vi94N0
+dFZjilsouZXt6L6cvsPxXYYmam8VFHbUC+B7PzDlGcVk5XTpjUMZS6pmV137DEp
ZjtaUPAi527uC+twyc0xRi7HyjUxzo1Z4W/Hfq6VAq9J1vyvaT8a
-----END CERTIFICATE-----
Generated at Sat Feb 7 08:45:46 2026 by rpki-client