This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
File:                     DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json)
Hash identifier:          F5p8Yj8cSiBAnjZ88OWkgCImmuWrfCOgDwfMD+l6l9A=
Subject key identifier:   DB:45:8C:EE:9D:F6:DC:F4:5B:58:12:EF:BE:24:1D:73:FE:61:D0:DD
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Certificate issuer:       /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial:       0530
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
Manifest number:          052D
Signing time:             Fri 06 Feb 2026 02:58:13 +0000
Manifest this update:     Fri 06 Feb 2026 02:58:12 +0000
Manifest next update:     Sun 08 Feb 2026 02:58:12 +0000
Files and hashes:         1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: +/kPpQT6vkw24wsYU+DVzCvidw4M8JYzYQEamKeqM1M=)
                          2: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (hash: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=)
                          3: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=)
                          4: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 02:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
        Validity
            Not Before: Feb  6 02:58:12 2026 GMT
            Not After : Feb  8 02:58:12 2026 GMT
        Subject: CN=698558c5-98f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:2e:05:5a:1e:ac:56:93:6b:ca:b8:e0:ea:
                    8c:d6:d8:ac:de:db:7c:d4:bf:c6:33:39:4b:15:8c:
                    1d:f8:76:b4:cb:f3:f5:51:f5:c9:90:c1:c6:43:c0:
                    99:ba:2f:74:e2:0f:eb:3a:aa:e4:e9:e2:c9:03:b0:
                    03:00:08:95:cb:7d:13:d6:54:b5:62:4e:56:53:aa:
                    87:5c:75:52:da:32:5b:05:c3:e1:65:71:6d:6e:49:
                    9c:b0:c2:8e:7c:dd:d3:90:d2:53:f6:82:60:cb:4f:
                    37:e7:3f:c1:e3:5c:c1:6d:20:ae:e3:f7:70:68:8b:
                    53:c6:e4:86:6b:03:ea:ed:a4:bd:e7:f8:f0:a9:0d:
                    eb:3c:c2:17:38:07:d7:5e:0e:f9:6e:d5:1c:8b:bd:
                    92:7a:9b:40:d8:6f:95:06:6e:1b:7e:6f:7f:22:0b:
                    19:f7:8c:90:4b:76:c4:b2:52:c9:6d:68:08:66:21:
                    bb:1e:f3:0f:be:95:48:93:4f:6b:e5:35:91:b9:27:
                    42:a0:b5:72:95:cc:c2:19:27:60:0e:12:c7:5d:3c:
                    8a:33:0f:73:7f:33:51:37:f2:0d:d3:c6:a2:88:f6:
                    53:af:a9:8d:58:2c:ca:da:38:d9:fc:18:f3:59:ed:
                    c9:47:a9:a8:99:bc:f6:82:ef:17:86:9e:2a:af:ee:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:8C:EE:9D:F6:DC:F4:5B:58:12:EF:BE:24:1D:73:FE:61:D0:DD
            X509v3 Authority Key Identifier:
                keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:10:4c:42:44:13:1f:65:9a:f2:0f:9f:71:35:77:56:6c:bb:
         e4:a6:66:26:24:b9:7c:c4:79:90:a9:1d:2f:90:c3:08:d7:18:
         c4:da:bd:c0:e1:7e:51:bf:ff:88:e7:20:c2:84:18:48:9f:76:
         e0:02:bc:c6:24:61:9e:d2:d1:a6:a0:39:6c:e8:0f:4d:4e:f5:
         a1:3a:fa:0f:c9:fe:be:55:b4:14:c7:c2:29:7d:fe:03:0c:6b:
         ce:58:c5:5a:7e:70:20:9f:09:9f:72:81:d5:7a:4c:99:c5:4e:
         71:d8:cb:a9:9d:ce:2c:49:33:a0:e1:f0:66:5a:8f:7f:80:56:
         88:bf:5b:9f:c1:14:06:58:52:1f:7d:a3:53:7f:ad:df:82:69:
         64:b9:8f:b4:ae:ac:83:2a:4c:e2:b3:f4:c2:e4:6a:7e:5d:64:
         8c:9f:87:63:4f:ab:de:d9:d2:2c:30:2a:ef:25:57:a8:86:21:
         f4:f4:50:75:24:37:ae:ec:48:96:5c:ef:b2:66:23:03:e4:92:
         a5:e1:f1:ce:38:41:3b:3d:01:8d:3b:09:e0:86:ed:4f:31:0e:
         c6:7a:49:64:f1:43:1f:b8:c9:9e:06:2b:30:b1:6a:e5:99:17:
         f2:b7:df:f3:f2:b6:51:17:87:b5:e0:e4:ce:d7:b4:00:c2:7e:
         bc:92:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:25:22 2026 by rpki-client