This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          7ZcrdHUH17unhygE6KHXeCpzMt4v++JDi6lCB6LJI6w=
Subject key identifier:   AA:D2:A4:89:33:B0:3F:5E:3E:B6:C1:10:A8:FA:8B:AC:64:95:EC:1F
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       0290
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          028F
Signing time:             Fri 06 Feb 2026 04:20:53 +0000
Manifest this update:     Fri 06 Feb 2026 04:20:52 +0000
Manifest next update:     Sun 08 Feb 2026 04:20:52 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: wyty3My8NHxkxHrCbfNHLeSi6+4OF/INp8it+hT3U60=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Feb  6 04:20:52 2026 GMT
            Not After : Feb  8 04:20:52 2026 GMT
        Subject: CN=69856c25-120a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:fe:04:99:7a:6d:eb:33:bc:7e:99:45:2e:
                    13:dc:0c:21:ef:0f:4b:bb:4d:3e:72:41:0c:64:e4:
                    a6:63:35:9f:a9:72:86:e2:1e:83:e2:30:d6:98:c8:
                    48:1e:4b:eb:11:a5:14:b5:88:16:a3:bd:1c:e5:59:
                    91:33:41:89:5e:fb:09:72:9c:07:d4:ba:c3:91:3d:
                    7d:06:4f:de:82:09:77:18:7b:63:eb:18:82:8e:f9:
                    11:bf:d8:8c:53:c1:39:b0:11:66:0c:6c:04:b3:32:
                    e9:9f:f6:20:94:0e:26:94:07:d8:df:fa:bf:bd:cf:
                    24:43:6c:10:31:c9:16:c5:f7:09:3f:c1:e1:55:27:
                    43:e8:53:81:aa:48:d2:6d:8a:1b:17:3a:df:eb:72:
                    70:23:d1:fb:60:6b:d0:e4:93:b9:d5:97:b4:05:2b:
                    f7:af:9f:e3:57:74:30:a5:2a:f1:7f:0c:4e:76:99:
                    49:83:24:5b:83:be:29:97:35:66:b8:97:16:05:38:
                    5a:6f:ef:94:7d:bf:fd:4a:a7:cc:96:aa:77:c5:d1:
                    08:00:1f:2c:f7:44:16:3f:47:44:fe:a0:27:67:b6:
                    e4:3c:96:3e:31:f2:e6:ab:b8:82:49:b5:f0:75:88:
                    6f:c0:4b:19:fd:57:ca:d2:e1:14:70:7c:57:a3:6f:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D2:A4:89:33:B0:3F:5E:3E:B6:C1:10:A8:FA:8B:AC:64:95:EC:1F
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:70:a7:36:55:47:c3:fa:7c:17:50:6a:94:60:e6:05:0e:
         5a:b4:df:f0:5b:48:8e:ea:35:ef:e1:09:8d:82:91:98:12:ba:
         18:65:83:dc:a9:19:d1:30:4a:48:8f:31:45:e7:a3:52:7b:4f:
         28:a3:cc:3e:7f:1a:19:60:3f:c7:6d:76:e6:03:e0:88:2e:4c:
         d2:91:76:de:c5:bb:2b:88:28:51:20:c6:00:58:b0:eb:ce:be:
         8c:b1:7f:16:7c:dc:5e:10:53:37:5f:00:5c:ef:98:c5:f1:0e:
         35:3d:c7:66:9d:a0:6e:bd:e4:51:c8:64:86:44:4b:d2:2c:42:
         7f:79:32:7e:6c:b1:00:17:3a:b2:eb:c8:63:b3:fd:ca:cf:74:
         fa:1c:d1:f7:e1:0a:be:b8:6e:b2:52:95:af:28:9f:3e:ba:dd:
         bd:3e:61:66:e2:86:78:69:16:f3:50:8a:e6:41:c3:fb:99:fa:
         1e:70:f5:9d:59:71:28:c3:c9:52:d9:39:d1:a3:be:ce:de:1c:
         f4:82:2e:85:47:fb:5d:93:86:1b:8b:46:36:cf:5d:d2:15:6a:
         7e:af:4d:21:6a:1a:05:56:b0:58:31:ff:bd:45:0f:fb:e0:83:
         c9:54:25:77:fc:b6:bf:5e:03:97:a5:75:65:81:b5:ee:b5:70:
         e1:6e:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 00:00:34 2026 by rpki-client