This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          E2QYf1u/W2PFBS+udeGa7Vxhh8o298vsKCBR49KMRfE=
Subject key identifier:   64:D9:6E:12:43:FD:7C:F6:72:E5:D1:F6:10:9D:40:FC:89:5A:BD:9E
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       02CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          02C8
Signing time:             Fri 06 Feb 2026 04:14:14 +0000
Manifest this update:     Fri 06 Feb 2026 04:14:13 +0000
Manifest next update:     Sun 08 Feb 2026 04:14:13 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: 4R/gFp9JwEuqQs2ohVFnw39YzKWa1VCU78udfSXDE5A=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Feb  6 04:14:13 2026 GMT
            Not After : Feb  8 04:14:13 2026 GMT
        Subject: CN=69856a96-fc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:96:68:0d:89:5b:bb:79:db:16:5e:01:b0:
                    e6:7c:70:e8:e9:4a:de:bb:2c:91:9b:d9:00:31:7f:
                    ff:8d:22:33:3a:af:be:f0:fd:e1:9b:7b:b6:aa:91:
                    b5:c2:c3:cf:42:d2:fb:8b:e4:f8:59:3f:fe:0a:21:
                    2f:09:0f:a1:a7:e6:70:9c:77:ff:4f:ee:43:47:b0:
                    58:94:7d:a8:52:48:f0:78:c2:6e:11:5e:a2:41:09:
                    23:d0:e9:6c:c5:cd:de:a3:7b:f2:ab:1f:6c:bd:fc:
                    5c:b9:77:7a:6d:2e:da:7f:96:a7:25:54:33:f5:33:
                    5f:aa:85:85:ab:09:4b:cb:25:86:8c:93:b0:13:61:
                    41:5e:d8:09:4a:81:e9:40:9c:00:25:aa:49:6f:22:
                    83:fe:7c:ce:6d:c3:5b:be:d7:46:2b:06:13:46:86:
                    ad:35:db:5e:8f:f4:4a:61:78:64:9a:e6:8d:b6:aa:
                    94:55:8b:54:90:2f:a7:47:67:da:6e:21:c3:81:da:
                    32:36:e6:25:a7:84:12:0a:0a:f6:8b:16:22:a1:d7:
                    a7:47:1c:14:61:eb:35:b9:a8:1b:ef:08:79:36:5e:
                    1e:88:fa:8b:6a:87:be:a9:38:2a:d9:0f:a1:bc:6a:
                    cf:2a:15:0e:24:ca:5c:c2:05:ba:8f:77:b6:98:10:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:6E:12:43:FD:7C:F6:72:E5:D1:F6:10:9D:40:FC:89:5A:BD:9E
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:df:46:89:2a:cf:ea:cc:c3:96:5a:d3:87:f2:cd:c5:80:7d:
         10:06:fc:5e:15:c6:90:bd:43:f1:38:8b:2c:f4:fe:d0:dc:78:
         9d:62:37:32:f9:f1:bb:47:99:5b:80:ad:e3:28:86:47:dd:12:
         a8:38:43:9e:18:31:e0:45:02:9d:f3:08:e9:66:89:37:80:63:
         69:bd:1e:4b:47:cf:91:28:9d:8e:22:20:34:4b:01:2a:0b:b8:
         67:be:cc:50:b2:81:dc:c4:f1:22:1f:b4:89:00:b7:a0:df:81:
         f0:5e:65:4f:76:75:b9:d4:b0:a9:5a:7b:e1:0c:33:6d:12:3e:
         ed:e7:d6:26:7e:4f:7e:83:b9:b2:82:cc:03:08:d9:e6:f2:2a:
         f1:a6:2f:f3:4d:93:5f:5e:78:58:7b:ea:16:70:ad:e8:e8:0e:
         9f:78:86:3d:ac:b0:5e:b4:a3:d1:a0:25:fb:7f:d3:f2:2e:1a:
         83:b3:e5:45:e8:14:c6:3c:cc:3d:4a:3f:4c:47:2a:2a:2d:0f:
         45:d7:08:7d:d7:9b:d3:1f:5d:88:aa:21:77:b9:0f:f8:e4:0b:
         5f:cb:48:48:34:af:b2:56:e5:2d:79:38:e1:af:22:4e:6a:78:
         1a:b5:78:41:db:cf:7c:3f:40:34:87:1f:4e:f8:67:c2:f0:1f:
         0b:c7:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 00:03:56 2026 by rpki-client