This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          o9S2K1toy6mhvcvgdlkVh77zQdgcCuWEgTO2zDgT0ZM=
Subject key identifier:   B0:E0:25:57:77:77:CC:AF:1A:E2:2A:C3:17:22:59:A2:B2:C9:EA:51
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       089C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          07D7
Signing time:             Wed 21 Jan 2026 02:04:53 +0000
Manifest this update:     Wed 21 Jan 2026 02:04:52 +0000
Manifest next update:     Fri 23 Jan 2026 02:04:52 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: o+6F/iULsfwZ9oWoP0G3BLfH4hhg/tu3ks4iGBDqeH0=)
                          2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          3: D5C59B1EF5D611F0816E3F9BDAE4EC9C.roa (hash: jyuPjboBoVexWxf0ZsE8ekpoZRroMA+3X24xDaumWJM=)
                          4: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          5: 5A8C7874784411F0BE639EBDDAE4EC9C.roa (hash: Tso2x+6Cusvv7XHczF8aF240Wh6DYRs6taSZ6HxpTbM=)
                          6: 170EEC96E17911F0A70AAA9CDAE4EC9C.roa (hash: AiaGvNvjsjRtFxzwb4dbr25W4k76Al2Ssgz+au5plps=)
                          7: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          8: D86BD134E17D11F08C120CBADAE4EC9C.roa (hash: 1Sw5H3m7p8yXSbJ/UEvOV37iMrCHxaPDGqCI+HItdGA=)
                          9: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=)
                          10: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
                          11: BB4214A4E17A11F0A38890A5DAE4EC9C.roa (hash: gnwhw0y9GnNMb5tp6TBRryHETWJmn9WcL9AT9hRzoIc=)
                          12: 951B9DB2781711F0AAD136A0DAE4EC9C.roa (hash: rxo13RQJNN4g4AsDSu+eErcokD2GEDR1Waq9IZ5O/Qw=)
                          13: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=)
                          14: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          15: FD789148F5D611F084B7699BDAE4EC9C.roa (hash: fIRoatuQ6D/gRpkt5UWxQOS+1idWetKduPMR/8hjyAk=)
                          16: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=)
                          17: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          18: DE82545CE17911F09698F6A0DAE4EC9C.roa (hash: uQKRAXzpWgszEU1rQJjVoYz0BB/GHwZ7xmHE63RRA9k=)
                          19: 937D7B6CDE4011F088E342E1DAE4EC9C.roa (hash: Ga+AAtZUCu9cCouDE+2cH/k2Q0SF0ljuZCjuweSrnSs=)
                          20: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
                          21: 6A43A0C8C14E11F096DC248FDAE4EC9C.roa (hash: sqRGI3qv4ncoLvEEm2EaksIQyKcekb2edaC2J3zEusw=)
                          22: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          23: BA1C2FD6E17C11F0864204B2DAE4EC9C.roa (hash: PXUNQUd4KtTTf5tfPtSi6r+XwhIXlCkmO1zBL9Hi5bo=)
                          24: 435ED2CAE17911F084BC019DDAE4EC9C.roa (hash: vNhsZp/zDkpr67H4ibJLept1kdXINL2xycl2Qp9adbA=)
                          25: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          26: 3AD8C49EDE4011F0AFD4DFDEDAE4EC9C.roa (hash: G87flQpVZziyxR4HUQfs9iisrBLn87SHIeY2KFzvxOM=)
                          27: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          28: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          29: 6D3ADA34E17A11F0B68119A5DAE4EC9C.roa (hash: n7ZwiWUXLUWfBM9YTb0+GUJFl5kJwPyo5slJJaf+jq0=)
                          30: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          31: C4BD9946DE4011F0B3D30EE3DAE4EC9C.roa (hash: IynpIQ2TCBGeHsxQeJe2nc8SVtPLWQNJT7vG46EnWyQ=)
                          32: 17DC67C8E17B11F0BADD52A9DAE4EC9C.roa (hash: JQRflh1oPfdh49FWSkDPoahgRmcVQ9j9YXCKMRcv9rc=)
                          33: A8DCB2D6F5D611F0AD1D1899DAE4EC9C.roa (hash: xuDzrskunqYVH4U0S2fSxwzf8V3rfmchxZP2lfpPieU=)
                          34: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=)
                          35: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jan 21 02:04:52 2026 GMT
            Not After : Jan 23 02:04:52 2026 GMT
        Subject: CN=69703445-d0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:4e:ce:e3:86:95:06:88:49:d3:93:a8:79:
                    17:66:29:eb:3e:77:26:e0:b2:be:bc:83:5d:7b:98:
                    19:cd:4a:27:a4:44:84:3e:3d:ef:78:9a:b0:a4:f0:
                    a6:cd:5d:51:99:ac:d3:bd:c1:2e:f5:a8:ec:70:10:
                    d8:cc:95:e4:39:5b:36:17:6e:a0:a1:b4:43:9e:89:
                    de:d4:82:59:d7:25:e7:79:70:de:01:f7:34:0f:3c:
                    ac:76:55:3f:8d:52:5c:bb:08:74:cd:7b:0b:96:dd:
                    48:b9:80:f0:5a:b5:b6:81:ae:fb:37:a6:9e:7f:95:
                    f3:15:cf:33:6c:b3:0e:cf:f8:bb:7c:08:e2:37:bd:
                    26:b4:6b:92:09:e9:ad:52:7b:1c:53:fb:6f:15:00:
                    88:5a:68:87:b5:5e:5c:36:2f:15:33:2a:62:90:4a:
                    9e:b2:e1:98:ac:8e:93:6c:d7:10:65:76:41:0c:b9:
                    f1:54:c4:e6:00:22:67:14:11:fb:41:d1:a3:a5:7f:
                    7e:7d:ba:67:74:db:88:70:5e:44:e6:58:3c:f2:11:
                    95:3c:29:fa:ae:40:f3:57:bf:f4:37:7c:74:70:2f:
                    1e:0d:e6:79:78:3a:f7:0c:de:3b:1f:58:07:82:af:
                    96:73:4e:98:2a:66:93:b4:c5:9f:2c:9a:64:08:4f:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E0:25:57:77:77:CC:AF:1A:E2:2A:C3:17:22:59:A2:B2:C9:EA:51
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:77:ce:78:3b:8b:5c:5b:f2:f8:1e:77:dc:92:2d:46:4a:3c:
         d3:15:23:0f:22:76:f9:b7:30:20:e6:87:43:18:46:27:7c:d8:
         42:cb:a0:f5:41:6f:30:6e:4b:d6:a0:a7:02:e7:c1:76:0e:a0:
         4c:fe:05:33:85:39:eb:66:4c:4b:05:06:c3:e9:26:06:b8:69:
         32:40:c3:75:f9:6b:5d:82:e5:99:a6:c6:52:f3:6e:65:72:4a:
         55:2e:e4:bd:c3:5b:28:86:4d:13:bb:9d:01:f4:c7:41:dc:a8:
         fe:04:0a:de:80:44:2c:bf:eb:cf:e3:58:f4:0b:9c:26:bf:d0:
         2f:0d:13:28:6f:88:e1:a4:f6:58:1e:3a:aa:02:82:b0:03:a7:
         77:08:35:ff:fe:de:aa:de:ef:06:72:89:01:c2:40:83:dd:5d:
         8d:b1:66:53:cc:e3:38:13:65:59:81:15:6e:5b:8b:23:78:86:
         9c:80:d2:12:a5:11:61:d5:98:76:25:b0:dd:17:8c:c0:38:96:
         8f:67:bc:c7:a0:8d:ab:49:ad:7a:50:63:e2:84:b4:71:af:60:
         42:2c:79:da:d0:08:19:8d:34:f2:5d:85:46:ac:13:3e:d3:13:
         f1:28:19:e8:02:b1:0c:fa:3c:c1:7c:14:9a:e7:44:87:ac:c7:
         54:38:72:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:50 2026 by rpki-client