This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          olUweaWy8yRfhHzKh+MYZX2AqkpW4RVziUliX7OjqMU=
Subject key identifier:   66:ED:9D:6E:68:8C:84:E0:C8:AA:FF:6E:06:AA:EA:37:7E:01:E8:9F
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       CF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          CF
Signing time:             Mon 26 Jan 2026 05:04:11 +0000
Manifest this update:     Mon 26 Jan 2026 05:04:10 +0000
Manifest next update:     Wed 28 Jan 2026 05:04:10 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: a9vy9aGxFHc/GNusd8s1DMqVXTEwKzhuSsximFeOjGc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Jan 26 05:04:10 2026 GMT
            Not After : Jan 28 05:04:10 2026 GMT
        Subject: CN=6976f5ca-1b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:6d:98:7e:6d:81:d5:f3:ab:9b:d0:5f:31:
                    30:06:ee:ea:99:29:cf:e6:13:b1:bf:47:0a:c2:4c:
                    6b:8d:02:1f:52:8f:5a:3e:8e:d2:4e:44:aa:28:e7:
                    fd:9f:64:ce:c5:30:16:13:91:dd:36:b4:0c:5a:23:
                    ab:60:c5:49:7e:e9:07:8b:8b:0d:c3:2c:aa:2a:3e:
                    c9:3b:4b:25:c6:4c:15:21:48:9e:94:b4:29:73:90:
                    a1:9b:d3:40:47:45:cb:11:51:c4:b7:1b:4d:6c:e8:
                    54:b6:4f:f8:f1:6e:f9:e1:9b:fc:2c:cf:a1:60:d1:
                    76:e8:7c:69:96:be:41:02:44:cc:9d:46:f1:25:0c:
                    4c:50:08:33:65:a4:1a:67:3c:bf:f0:42:99:81:7a:
                    81:d5:8a:06:b3:46:e8:ab:d1:84:55:d0:7a:c6:1c:
                    85:30:8f:1b:61:df:9c:1e:0f:61:0f:db:05:9d:e2:
                    d8:7a:c4:da:e2:c1:ed:1d:32:09:b9:54:0f:fa:32:
                    4b:df:0d:92:8f:7c:05:bb:4a:8d:9c:2c:70:a6:be:
                    7c:b5:93:c5:3a:8e:a5:db:78:57:14:e8:4e:3a:1c:
                    3d:51:27:1d:13:9f:78:92:69:8b:a2:53:70:e5:59:
                    ae:18:53:69:b7:c6:0a:66:62:6e:8b:ec:ef:1a:2e:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:9D:6E:68:8C:84:E0:C8:AA:FF:6E:06:AA:EA:37:7E:01:E8:9F
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:db:3b:d2:18:e2:0e:4a:02:54:83:20:5f:8a:f0:de:cd:b8:
         be:b9:5a:4f:54:f3:35:59:f7:c1:5e:50:4c:cf:31:b9:d2:86:
         e8:cd:1b:a9:5a:e3:c2:ae:98:7c:cb:b4:81:7f:a7:ef:97:79:
         2f:3f:ab:18:bd:62:50:30:ac:36:58:63:3e:b6:7e:d7:7d:a4:
         fc:d8:be:38:7e:e8:b8:d2:68:f2:c3:08:fb:e9:61:69:39:b1:
         70:fd:04:5e:19:1c:c2:49:f2:ca:6f:51:c7:5a:08:a9:96:d8:
         77:b3:f6:05:da:2b:02:78:d0:56:ac:cd:ae:28:8f:9d:2e:1e:
         30:f5:ac:07:59:86:3c:dc:29:f2:d7:f2:82:63:44:b5:6f:fa:
         aa:78:d7:26:d7:32:0f:fc:b8:30:3c:32:b2:e0:9f:70:d6:82:
         a5:35:4b:2e:9f:30:a6:8b:cd:93:c0:06:f9:f3:6e:ba:ea:ef:
         c0:e2:e6:92:56:65:78:4e:c8:3d:2b:6d:6f:47:ec:83:96:01:
         f1:33:e6:72:e0:dc:ad:75:13:b3:90:eb:5e:cf:0d:a3:96:c5:
         53:5d:6e:e6:f5:74:fd:a3:2e:b1:75:47:6c:f5:be:2c:36:fa:
         70:dc:25:48:1c:1c:b2:ce:a0:c0:ba:00:28:95:b2:f5:9b:c2:
         31:e1:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:58:29 2026 by rpki-client