This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          +T6mqE5/FlKojufzUql0xjt8QAHSWrb4/sQQ7ai1pLM=
Subject key identifier:   AF:38:82:D3:0C:15:1F:10:C9:A2:53:63:44:31:27:53:76:E5:71:5C
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       043A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          043A
Signing time:             Fri 06 Feb 2026 03:25:55 +0000
Manifest this update:     Fri 06 Feb 2026 03:25:54 +0000
Manifest next update:     Sun 08 Feb 2026 03:25:54 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: CWnPrVJjOz2IBqXKkZMamQ0ADKsa7rVTRrdvCOp9UfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: Feb  6 03:25:54 2026 GMT
            Not After : Feb  8 03:25:54 2026 GMT
        Subject: CN=69855f43-fef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:48:82:79:c4:aa:1b:ea:bf:35:b3:37:e1:
                    95:9b:61:da:64:d0:9a:14:83:d2:b7:5d:c3:8b:d2:
                    78:c3:f6:7b:6b:bb:75:10:b1:05:9b:8b:6b:8f:48:
                    ff:47:47:1c:8c:2e:ae:9f:5f:b3:fa:3d:89:2c:28:
                    f7:59:8d:9f:45:a6:35:2a:d4:8d:5d:ec:7c:91:46:
                    f6:ae:25:4f:38:b5:54:59:bf:f2:4f:1f:ac:18:d5:
                    06:b0:b0:80:3b:1d:b2:bf:67:79:12:54:61:5b:81:
                    15:df:ff:f2:d2:9a:cb:c6:27:21:79:1b:6a:d2:12:
                    12:76:6f:54:fc:2d:57:0a:65:19:a7:2a:c5:0e:c2:
                    25:02:ad:94:1d:37:fa:89:43:38:53:90:28:8f:e3:
                    59:ba:93:4b:11:dc:26:a5:e4:23:03:f3:9d:98:2d:
                    34:ca:12:50:72:34:97:e4:46:ce:0c:13:d6:3a:05:
                    57:3c:f6:39:b3:f8:bb:47:ec:43:b1:f1:1f:70:09:
                    53:01:cd:d3:89:47:42:2e:99:9e:d4:b7:3d:ad:60:
                    77:bf:00:11:5d:72:d1:a8:97:82:0c:69:03:5e:be:
                    56:cc:59:ca:d0:b2:6d:5d:ac:aa:34:36:ec:cd:09:
                    2f:c9:9a:d8:4c:15:33:8e:a7:14:a2:35:21:46:14:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:38:82:D3:0C:15:1F:10:C9:A2:53:63:44:31:27:53:76:E5:71:5C
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:94:64:72:01:52:bc:22:c0:f0:0e:45:07:88:7d:45:62:c9:
         5b:06:98:df:d8:f6:ee:72:9e:87:63:38:d1:83:9a:51:bc:a4:
         a6:26:cf:68:e6:18:39:3e:7a:71:3e:4c:26:40:77:55:3e:31:
         4e:0e:d2:d4:db:5b:bf:2e:76:67:75:aa:4a:cb:93:56:ec:2f:
         15:2b:95:6c:16:7b:68:a7:70:8a:fb:dc:00:2c:8e:9b:a4:a0:
         97:2e:f2:84:c0:66:04:47:f9:e6:ad:b0:bd:d2:b9:7d:d6:33:
         09:ee:29:88:c9:5f:78:76:ad:8c:f0:72:7a:80:50:42:24:ae:
         c9:20:7f:e3:7f:e4:2d:13:d7:35:a3:52:fa:50:5b:5d:38:3e:
         75:5d:34:e0:92:1d:18:1c:f2:f8:63:ae:0c:9d:75:c8:4a:b7:
         a4:e4:19:c2:bb:cb:65:69:c9:85:89:46:41:95:8a:fa:20:4f:
         95:f3:62:34:98:2b:ca:77:c4:3e:b4:c9:b8:81:ab:9e:be:7a:
         8e:88:4d:36:9c:16:f4:ff:f6:60:ac:ec:a2:ec:2d:9d:ee:87:
         9a:3f:a3:40:14:27:d7:4b:19:75:0a:fa:21:57:ea:c8:47:5f:
         61:7f:48:aa:e3:df:a8:38:44:0b:72:28:2a:4e:6a:17:62:af:
         3d:9a:c3:cd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBDowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTZCOTVBRjExMC8GA1UEBRMoQUUxMjhCMjJGNTFEQzY1OEQ1NUUyMTU2RUJBRjcz
RDZDNkFENzYyQTAeFw0yNjAyMDYwMzI1NTRaFw0yNjAyMDgwMzI1NTRaMBgxFjAU
BgNVBAMTDTY5ODU1ZjQzLWZlZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsKEiCecSqG+q/NbM34ZWbYdpk0JoUg9K3XcOL0njD9ntru3UQsQWbi2uP
SP9HRxyMLq6fX7P6PYksKPdZjZ9FpjUq1I1d7HyRRvauJU84tVRZv/JPH6wY1Qaw
sIA7HbK/Z3kSVGFbgRXf//LSmsvGJyF5G2rSEhJ2b1T8LVcKZRmnKsUOwiUCrZQd
N/qJQzhTkCiP41m6k0sR3Cal5CMD852YLTTKElByNJfkRs4ME9Y6BVc89jmz+LtH
7EOx8R9wCVMBzdOJR0IumZ7Utz2tYHe/ABFdctGol4IMaQNevlbMWcrQsm1drKo0
NuzNCS/JmthMFTOOpxSiNSFGFE8NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrziC
0wwVHxDJolNjRDEnU3blcVwwHwYDVR0jBBgwFoAUrhKLIvUdxljVXiFW669z1sat
diowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2Qjk1LzYyNDEyQUMwQ0EyNjExRUQ5MkU5Qzk4RkYxMjIyNDY4L3JoS0xJ
dlVkeGxqVlhpRlc2Njl6MXNhdGRpby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JoS0xJdlVkeGxqVlhpRlc2Njl6MXNhdGRpby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTZCOTUvNjI0MTJBQzBDQTI2MTFFRDkyRTlDOThGRjEy
MjI0NjgvcmhLTEl2VWR4bGpWWGlGVzY2OXoxc2F0ZGlvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHlGRyAVK8IsDwDkUHiH1FYslbBpjf
2Pbucp6HYzjRg5pRvKSmJs9o5hg5PnpxPkwmQHdVPjFODtLU21u/LnZndapKy5NW
7C8VK5VsFntop3CK+9wALI6bpKCXLvKEwGYER/nmrbC90rl91jMJ7imIyV94dq2M
8HJ6gFBCJK7JIH/jf+QtE9c1o1L6UFtdOD51XTTgkh0YHPL4Y64MnXXISrek5BnC
u8tlacmFiUZBlYr6IE+V82I0mCvKd8Q+tMm4gauevnqOiE02nBb0//ZgrOyi7C2d
7oeaP6NAFCfXSxl1CvohV+rIR19hf0iq49+oOEQLcigqTmoXYq89msPN
-----END CERTIFICATE-----
Generated at Fri Feb 6 23:59:33 2026 by rpki-client