This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
File:                     8qncFw2PMqBEwa8QUgRdbU4kIus.mft (raw, json)
Hash identifier:          72J8iUZK2SOexPICiWc3Im9s0BzI4c0tG0r3THhYOQc=
Subject key identifier:   39:70:93:38:0B:58:70:AA:FC:E5:4B:D0:1C:86:7A:02:DE:08:50:E8
Authority key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Certificate issuer:       /CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Certificate serial:       024E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
Manifest number:          0249
Signing time:             Sat 07 Feb 2026 04:24:10 +0000
Manifest this update:     Sat 07 Feb 2026 04:24:10 +0000
Manifest next update:     Mon 09 Feb 2026 04:24:10 +0000
Files and hashes:         1: 8qncFw2PMqBEwa8QUgRdbU4kIus.crl (hash: to2bKkbWMKmmOI28rs63CEqQ9N/3AKb9vwdYpRM5DCw=)
                          2: FC4A2F76AE5411F0845735D4DAE4EC9C.roa (hash: SMRY+pIlsouKJZTIiIZKkMn4t/uSvGmP4BPbjx27UP0=)
                          3: 6943C2245A1C11EF8AD3AB9F762E951A.roa (hash: 4I82hmzIVlcUSpjIKbPk3aHDkUVJd1jgQcDFX1IaaAM=)
                          4: E0539FCE5A1211EF8F707262762E951A.roa (hash: bcfZ/95PQQlS2eDlkdUzWliC6UA2tyCBDeR/FA3hgqE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                          rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65RI, serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
        Validity
            Not Before: Feb  7 04:24:10 2026 GMT
            Not After : Feb  9 04:24:10 2026 GMT
        Subject: CN=6986be6a-8b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:2b:de:28:2d:25:f9:52:c6:17:8c:df:be:
                    33:f2:a4:c2:ab:11:02:a9:49:3b:40:49:b5:b1:08:
                    1a:83:a7:e8:29:e5:61:56:4c:5f:de:48:06:ad:00:
                    03:59:fa:a0:cf:77:c3:ba:25:91:84:98:b9:61:a7:
                    51:33:a6:5f:50:2f:68:99:11:d5:57:93:83:1e:b3:
                    80:64:56:fc:23:65:18:3d:ad:52:24:8c:a0:94:eb:
                    19:c8:a7:4b:05:77:df:bb:62:e7:e0:96:75:e6:91:
                    51:04:82:9f:79:84:f8:d1:09:a4:54:56:3c:9b:91:
                    52:d9:a1:54:e4:2b:94:d5:92:a8:80:1b:12:df:8d:
                    d0:08:79:75:2e:23:99:50:e4:44:76:e9:02:83:93:
                    c9:47:05:15:8f:f2:75:d6:1f:fd:e7:5d:08:10:c8:
                    3f:5c:99:59:79:cc:d7:2b:8c:cc:76:44:36:a1:66:
                    b5:5c:59:c7:43:6e:86:5a:0d:8f:cf:87:25:25:7e:
                    d9:4a:65:49:9b:98:20:74:21:6b:35:c7:7b:e0:7f:
                    ff:64:99:ff:d3:26:07:6c:e6:e7:ab:49:89:f9:65:
                    5d:c0:ce:0f:35:4e:91:82:2b:8c:c6:8c:7d:98:85:
                    b2:9f:eb:2f:5a:fc:f9:cd:30:0d:75:55:ca:74:3c:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:93:38:0B:58:70:AA:FC:E5:4B:D0:1C:86:7A:02:DE:08:50:E8
            X509v3 Authority Key Identifier:
                keyid:F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:93:9e:ad:93:db:c9:9d:22:eb:8f:e9:2a:2d:0e:1c:a0:6f:
         f9:d5:33:0b:2a:b6:3a:4a:ee:d4:ea:f5:4b:03:12:62:c3:c9:
         0d:44:91:37:29:3b:90:e9:59:0d:db:b7:66:16:2b:ab:ee:22:
         25:8a:a1:09:c0:bf:59:05:0f:67:02:78:e2:69:0b:90:ff:22:
         a2:ee:78:f7:8e:10:91:96:9a:a2:3f:4e:54:7a:3b:38:3b:29:
         02:78:e8:58:af:f5:91:4d:e7:22:c8:33:03:ca:f1:b6:97:f2:
         c8:cb:1c:cc:3f:16:2f:0f:62:99:ce:de:16:69:0a:36:e7:25:
         b6:99:2f:24:44:15:25:2c:1a:af:ef:0c:75:c9:4b:ba:5a:be:
         7b:e4:e4:61:ae:40:15:fc:ba:7b:22:e9:94:8b:37:c2:f2:b5:
         2d:9a:a9:d0:f7:2c:09:a0:ab:eb:da:ff:57:9f:47:6e:0f:64:
         f7:de:66:a9:30:60:81:52:ea:b2:e2:e8:fc:bb:07:95:90:1b:
         8c:3f:90:42:93:a4:4e:95:f5:1a:ae:fd:09:38:19:4a:2b:6f:
         71:6f:f0:59:54:d3:a3:6e:99:85:db:58:32:92:7d:38:d5:d1:
         ae:d9:44:a0:12:e3:4b:a4:4c:48:5e:b9:39:0c:db:72:f0:1c:
         2c:c4:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:17:16 2026 by rpki-client