This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
File:                     2XFO6UZLDHro1GvxAWN4ShYPcXI.mft (raw, json)
Hash identifier:          gf+IcGZcZpI9RTU3VLdHZoZFzze1bYI1/BLqV4VkCh8=
Subject key identifier:   EE:9E:EF:7A:40:E3:80:F2:00:8C:9B:99:46:7C:12:C0:87:F8:EE:F3
Authority key identifier: D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
Certificate issuer:       /CN=F365461DAF/serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
Manifest number:          B0
Signing time:             Fri 06 Feb 2026 05:48:10 +0000
Manifest this update:     Fri 06 Feb 2026 05:48:10 +0000
Manifest next update:     Sun 08 Feb 2026 05:48:10 +0000
Files and hashes:         1: 2XFO6UZLDHro1GvxAWN4ShYPcXI.crl (hash: nBKPeXuEDeF4fVS7umPq+WFy/4Jvt6uh9j2MFPHF1ik=)
                          2: 68055F96FDD411F0BBB618B9DAE4EC9C.roa (hash: H2IBhkLDeEh8TsQusjlVvlGGweGQFU3ynG5IcXZXGpk=)
                          3: 100568547E5E11F0A78B849ADAE4EC9C.roa (hash: PvZoBj2A7ENispwmai6nCrzzAnKO2XiSPBgvLBIB2QA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 05:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365461DAF, serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
        Validity
            Not Before: Feb  6 05:48:10 2026 GMT
            Not After : Feb  8 05:48:10 2026 GMT
        Subject: CN=6985809a-b8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:ad:be:cf:89:97:33:2e:22:99:63:ac:4f:
                    1b:8c:19:40:47:b1:4b:b5:a2:82:89:2b:15:ee:cc:
                    69:ae:0e:34:8c:8a:92:05:e3:00:c8:aa:a0:09:38:
                    4e:4f:d7:ba:58:58:a3:18:25:c3:2b:33:ca:4d:88:
                    86:4d:9f:52:4a:7b:72:95:6e:91:be:2b:11:f8:27:
                    ee:54:31:22:5b:0d:da:c0:ae:a1:8d:1e:8b:b5:ff:
                    37:06:4d:e4:39:2c:da:cb:1b:b4:c1:7b:82:b9:20:
                    27:0d:cd:45:29:cf:61:c1:af:22:f5:28:d9:bc:0f:
                    ee:c1:a0:ca:11:89:32:3d:42:28:b2:fb:5a:87:48:
                    37:5a:42:0b:78:f9:cc:7b:0c:42:ee:8e:d5:e3:1c:
                    21:3a:ff:13:c4:db:ea:ae:bc:34:cc:0a:33:f2:a7:
                    a4:03:91:0e:77:cb:28:53:8f:25:e4:ba:92:93:b0:
                    39:18:c7:89:bc:8b:e9:a6:13:25:59:f0:7c:61:89:
                    f9:25:1e:cc:5d:b6:cb:2c:f9:8c:7d:ac:cd:2f:1e:
                    be:40:04:5d:f9:05:6d:81:51:6a:fb:93:a8:b3:9d:
                    31:62:d4:c0:c5:99:62:33:cf:0e:67:2a:19:d2:45:
                    e3:cc:f9:b5:a3:42:0a:1d:af:4a:7f:0d:3f:15:91:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:EF:7A:40:E3:80:F2:00:8C:9B:99:46:7C:12:C0:87:F8:EE:F3
            X509v3 Authority Key Identifier:
                keyid:D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:3c:c1:64:c4:e8:45:2f:74:8a:00:ce:c3:46:27:11:d1:
         79:1f:c8:9c:47:35:38:92:37:d1:1c:f6:94:0f:d5:66:36:a9:
         8b:f1:78:73:f9:9a:c2:fd:fb:cf:ee:16:1c:b8:66:aa:bd:0b:
         8f:39:bf:84:06:94:29:5e:08:8c:5b:61:76:9a:af:8c:b8:04:
         4c:ce:ec:7b:db:b6:62:72:52:53:f4:b8:96:90:2f:73:ab:34:
         5d:a2:0f:db:33:f0:5c:6e:b8:15:5f:18:a6:e2:0a:dc:cf:75:
         49:e2:67:48:20:51:e0:f3:d2:65:a3:b5:8c:1d:5b:59:f6:81:
         bd:54:a5:db:1a:72:f8:4d:28:7c:2d:c2:2a:6f:d6:d6:48:bb:
         f9:2e:bb:29:e2:d7:b4:2a:0d:7e:c7:20:fa:af:35:01:b2:d5:
         e1:23:a8:44:15:8a:7a:0d:2d:51:1c:88:98:96:c7:e9:ae:b4:
         22:51:c9:70:9d:79:26:93:44:a6:0f:2a:78:35:18:25:43:94:
         0c:b9:60:30:62:12:af:f3:b7:1b:8b:9c:4d:dd:20:c4:a9:12:
         07:41:bd:1a:0e:e3:dd:1b:02:c9:bc:be:5a:fb:aa:a9:72:0d:
         9f:eb:b5:45:7d:02:e8:41:4f:cf:8e:b3:0e:1f:37:76:16:14:
         b6:5e:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 23:59:34 2026 by rpki-client