This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          /Lg2kZFrDSIzYzOxsCi0eSH03aKtV6ZIdOLg4mWHwXY=
Subject key identifier:   59:ED:BF:55:21:7E:8D:91:5E:35:EF:E7:49:FD:59:19:FE:DE:65:52
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0DD4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0DCF
Signing time:             Fri 06 Feb 2026 01:04:27 +0000
Manifest this update:     Fri 06 Feb 2026 01:04:26 +0000
Manifest next update:     Sun 08 Feb 2026 01:04:26 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: seCZN9td/HmiJIH1JB24rOLYbwI/R13LzAgzmh5+5S8=)
                          2: B1757762C48911F0B5A12AF6DAE4EC9C.roa (hash: b5Wcnn4AFWyn401Xj8s2haIgucvxNhp1qnKFpV0Gekw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 01:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3540 (0xdd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: Feb  6 01:04:26 2026 GMT
            Not After : Feb  8 01:04:26 2026 GMT
        Subject: CN=69853e1b-2707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:5a:05:a7:31:66:74:0c:d8:d0:ac:68:4e:
                    cd:5a:4f:5e:54:1d:cc:bc:46:85:fa:fc:c3:4f:34:
                    ea:87:a3:0e:47:eb:d8:76:c1:ac:0d:13:64:61:fd:
                    f0:7d:44:31:49:1c:98:a3:e5:93:88:b6:ac:f9:db:
                    9c:43:15:67:8f:9f:b5:2a:f0:fc:0f:14:3a:e7:7f:
                    2d:64:06:ff:0f:5b:12:22:b6:20:67:eb:5f:93:70:
                    bf:6e:45:a4:4f:cd:b3:d6:c7:ed:ab:e2:ec:a8:9c:
                    08:4b:c2:18:29:a4:2e:36:11:45:f5:21:25:53:43:
                    c6:98:3c:04:b8:77:98:c2:e3:a2:16:18:ff:d3:e4:
                    4b:8b:a5:d1:27:b6:5b:ac:2c:71:dd:1f:e2:c3:ba:
                    7a:2e:88:f5:ec:75:8a:d7:bc:1c:62:5f:5c:ba:2d:
                    42:60:48:25:8e:06:1a:cd:4d:a1:66:6c:57:87:03:
                    27:bf:26:b4:30:3e:6e:08:bd:73:6e:96:08:b0:90:
                    1a:11:d2:92:82:7f:00:84:3c:20:c5:17:bb:6f:21:
                    22:00:49:af:a8:56:e0:d8:c5:a0:b2:21:2d:5b:dc:
                    dd:5b:14:1d:18:50:02:1e:a4:12:6d:f3:37:6e:bc:
                    48:1e:38:55:37:96:a3:10:74:07:77:a7:f9:a1:06:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:ED:BF:55:21:7E:8D:91:5E:35:EF:E7:49:FD:59:19:FE:DE:65:52
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:29:00:e0:19:ee:27:e2:48:7e:c3:f2:bd:70:9e:57:d6:5b:
         ce:75:80:05:77:4b:d8:7f:f9:e5:04:91:4f:03:9d:43:a5:b9:
         8b:70:90:5a:3a:dd:39:18:16:c8:75:c0:55:59:46:16:39:68:
         3c:36:e3:01:c7:bb:69:a5:63:81:60:e3:ab:5b:f7:83:db:0d:
         36:25:3b:1c:07:24:d2:df:91:ae:2c:24:52:21:d9:be:5c:96:
         34:e6:a7:3b:ce:74:a5:4b:66:1c:b3:03:7f:90:ea:b7:a5:f0:
         83:d9:5a:d5:c3:90:c7:f5:cd:f7:2b:59:37:66:eb:f0:93:19:
         54:27:94:6e:26:bf:a8:c9:3c:fa:ec:08:0f:5c:d3:5b:cd:12:
         aa:d7:a3:e5:7e:a1:da:90:d0:7c:8e:9b:74:1f:dd:34:b4:7f:
         b1:aa:a7:89:a9:b2:5e:da:58:ec:37:e5:56:ed:a6:5e:b2:9d:
         04:aa:68:82:2e:53:de:19:7d:df:78:a6:7c:de:59:fe:a7:fc:
         c7:0d:d8:36:29:cd:d2:3e:2b:cb:c3:49:c5:86:4b:44:98:57:
         97:d6:61:24:df:39:bd:3f:c0:6f:05:37:b7:1f:34:75:ae:28:
         54:bf:8e:f5:60:d2:5f:4c:ab:af:0a:58:3f:85:ec:07:94:86:
         46:b6:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:29:05 2026 by rpki-client