This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
File:                     8hDREntBqAZ-iuVwf0PSLggdxmU.mft (raw, json)
Hash identifier:          I+Jv+s9UAM/mOzvJH4dxrjtXBI2L8nydMY5dafADGrQ=
Subject key identifier:   6E:27:FE:D2:B0:59:92:77:46:8B:FD:89:44:10:7E:A0:8F:B8:F3:25
Authority key identifier: F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
Certificate issuer:       /CN=F36828EEAF/serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Certificate serial:       0237
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
Manifest number:          0236
Signing time:             Fri 06 Feb 2026 04:34:34 +0000
Manifest this update:     Fri 06 Feb 2026 04:34:32 +0000
Manifest next update:     Sun 08 Feb 2026 04:34:32 +0000
Files and hashes:         1: 8hDREntBqAZ-iuVwf0PSLggdxmU.crl (hash: T2VkPCoZRTuuCikfUTFCWxNnGAsX9fADcObGgKY6bZE=)
                          2: 43556232564A11EF9942095B762E951A.roa (hash: k0gU6QmfsEjV/HHlrAtYyJc8G8bTw7CikYjZpypK4Wk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36828EEAF, serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
        Validity
            Not Before: Feb  6 04:34:32 2026 GMT
            Not After : Feb  8 04:34:32 2026 GMT
        Subject: CN=69856f59-0fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:9c:c1:b3:31:e6:de:85:e5:c4:a7:66:6c:
                    1e:bb:04:ab:4f:45:ab:f1:ef:71:35:a2:59:47:b0:
                    1e:7f:6b:4d:5c:58:ce:58:a9:53:b2:b4:44:df:dd:
                    fb:ee:77:52:ab:b3:d0:ef:d2:47:6b:6d:ad:2d:a3:
                    c2:77:77:ec:1f:20:10:d3:ed:ba:7d:cb:b8:36:62:
                    04:be:c8:ca:8e:de:2c:d8:ff:a8:1a:67:05:84:88:
                    52:77:94:91:31:96:b0:1e:6f:ca:86:6e:a9:bc:cc:
                    71:57:59:e9:f4:e0:7c:48:04:9c:c7:c4:20:f5:e8:
                    74:7d:65:2f:f8:fd:d1:38:00:47:f5:23:84:18:b5:
                    1a:18:89:50:cb:69:b5:eb:dd:2a:21:aa:36:5f:f5:
                    59:60:75:4d:11:8d:31:e4:69:82:89:de:12:2f:16:
                    3c:01:f2:eb:a4:a1:d2:6a:32:7b:cb:95:d3:b9:2b:
                    31:20:9d:6e:09:02:00:ee:10:1e:bd:e8:cc:25:85:
                    c6:ae:50:13:93:aa:d0:65:bf:bf:99:4a:32:2b:94:
                    9a:0f:af:f2:58:f5:d6:82:a4:ea:d8:ee:51:2a:69:
                    44:30:27:49:1e:9a:67:0a:4d:11:55:bf:b4:24:09:
                    7b:e2:2a:a5:36:60:9a:2a:22:6f:c3:ee:ac:6d:4b:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:27:FE:D2:B0:59:92:77:46:8B:FD:89:44:10:7E:A0:8F:B8:F3:25
            X509v3 Authority Key Identifier:
                keyid:F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d2:97:d1:6e:6e:5a:77:90:53:71:4c:ce:f8:66:65:12:42:
         6a:72:d9:0a:9c:f6:28:1e:78:b2:70:2e:40:ae:7c:0c:cd:5e:
         2c:e5:3d:38:2e:1b:e3:52:72:8c:54:6b:85:5f:08:79:6e:ac:
         31:62:73:7e:01:98:7b:e1:4b:e2:38:81:7f:08:10:c7:0a:28:
         ff:bd:62:36:68:5b:65:2e:29:2e:8a:ef:65:fb:c1:4d:ef:33:
         82:d9:21:49:39:1c:f2:8e:55:e1:ce:3c:da:d7:33:78:5c:37:
         51:85:27:40:54:5c:7f:16:4c:31:0f:2c:16:f5:98:73:21:ca:
         33:5c:93:aa:e4:6c:40:f6:f4:40:af:78:9f:89:af:6e:13:4f:
         d4:75:46:91:61:ba:84:57:b5:aa:2a:d3:08:15:c5:16:57:ac:
         96:5b:57:70:2a:6a:49:93:c2:27:f1:7e:ce:af:50:cb:85:db:
         b9:38:43:41:fb:02:f3:98:63:95:ab:d4:96:d9:7d:fb:8c:86:
         5e:d0:19:5a:6b:10:0b:4a:45:7c:dd:37:fe:ce:6c:5a:dd:af:
         d3:42:98:66:9e:45:9e:0b:e8:e8:ec:81:3f:dc:11:5a:19:43:
         32:f6:2d:34:d0:25:13:33:19:74:7a:f7:f6:33:68:db:fe:2a:
         84:0a:e8:82
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODI4RUVBRjExMC8GA1UEBRMoRjIxMEQxMTI3QjQxQTgwNjdFOEFFNTcwN0Y0M0Qy
MkUwODFEQzY2NTAeFw0yNjAyMDYwNDM0MzJaFw0yNjAyMDgwNDM0MzJaMBgxFjAU
BgNVBAMTDTY5ODU2ZjU5LTBmYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzcJzBszHm3oXlxKdmbB67BKtPRavx73E1ollHsB5/a01cWM5YqVOytETf
3fvud1Krs9Dv0kdrba0to8J3d+wfIBDT7bp9y7g2YgS+yMqO3izY/6gaZwWEiFJ3
lJExlrAeb8qGbqm8zHFXWen04HxIBJzHxCD16HR9ZS/4/dE4AEf1I4QYtRoYiVDL
abXr3SohqjZf9VlgdU0RjTHkaYKJ3hIvFjwB8uukodJqMnvLldO5KzEgnW4JAgDu
EB696MwlhcauUBOTqtBlv7+ZSjIrlJoPr/JY9daCpOrY7lEqaUQwJ0kemmcKTRFV
v7QkCXviKqU2YJoqIm/D7qxtS0A1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbif+
0rBZkndGi/2JRBB+oI+48yUwHwYDVR0jBBgwFoAU8hDREntBqAZ+iuVwf0PSLggd
xmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyOEVFLzkzOTgyM0FBNTNGMzExRUY4RUU1ODQ0Njc2MkU5NTFBLzhoRFJF
bnRCcUFaLWl1VndmMFBTTGdnZHhtVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhoRFJFbnRCcUFaLWl1VndmMFBTTGdnZHhtVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODI4RUUvOTM5ODIzQUE1M0YzMTFFRjhFRTU4NDQ2NzYy
RTk1MUEvOGhEUkVudEJxQVotaXVWd2YwUFNMZ2dkeG1VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCv0pfRbm5ad5BTcUzO+GZlEkJqctkK
nPYoHniycC5ArnwMzV4s5T04LhvjUnKMVGuFXwh5bqwxYnN+AZh74UviOIF/CBDH
Cij/vWI2aFtlLikuiu9l+8FN7zOC2SFJORzyjlXhzjza1zN4XDdRhSdAVFx/Fkwx
DywW9ZhzIcozXJOq5GxA9vRAr3ifia9uE0/UdUaRYbqEV7WqKtMIFcUWV6yWW1dw
KmpJk8In8X7Or1DLhdu5OENB+wLzmGOVq9SW2X37jIZe0BlaaxALSkV83Tf+zmxa
3a/TQphmnkWeC+jo7IE/3BFaGUMy9i000CUTMxl0evf2M2jb/iqECuiC
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:28:11 2026 by rpki-client