This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          xkBoYIToc5NJR/oUTdqwI2P3DvAIIgFUlJ8o4CthAYc=
Subject key identifier:   A3:4A:C8:2B:D2:44:78:0B:44:90:7E:12:DB:ED:45:69:D3:C7:CD:7C
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       02B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          02AA
Signing time:             Fri 06 Feb 2026 04:18:09 +0000
Manifest this update:     Fri 06 Feb 2026 04:18:08 +0000
Manifest next update:     Sun 08 Feb 2026 04:18:08 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: BJYmE+yU5Hgg+e1QLqzYgM/NDUEYKW/ha560HvFWpmo=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Feb  6 04:18:08 2026 GMT
            Not After : Feb  8 04:18:08 2026 GMT
        Subject: CN=69856b81-03af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:d9:a4:bb:d0:bb:ce:1c:0c:1a:15:07:ab:
                    93:23:95:2c:21:96:0c:ff:2e:d0:b5:0e:0e:d6:76:
                    a8:91:15:66:eb:40:d1:d2:8b:4d:f9:2a:93:92:e7:
                    5b:ec:05:88:e4:d3:50:e3:23:bc:06:2d:fc:d4:b7:
                    01:e4:11:d8:b3:b1:64:06:ed:59:64:58:94:b9:c9:
                    f8:19:0f:c0:fe:16:d6:3e:80:72:cf:f9:c8:67:19:
                    9c:23:b7:62:b1:6b:5b:4f:44:86:7b:fc:3f:65:df:
                    e2:8c:fc:1c:bd:d3:ab:0f:13:d1:26:98:85:6d:76:
                    7a:89:ff:19:31:75:92:6b:48:19:3a:e7:6c:5a:69:
                    f8:74:5f:0e:da:eb:3b:23:f6:ac:b0:9d:6b:98:ad:
                    a6:a1:85:c1:4e:29:ca:65:4d:48:04:57:6e:d9:86:
                    70:e5:b4:bc:d6:46:dc:c1:85:ea:07:ee:d9:60:67:
                    33:a5:3b:ea:32:39:47:e7:51:3d:1c:da:ad:79:ab:
                    be:09:a3:e0:56:e1:db:63:a4:ea:f4:f0:c1:b4:d6:
                    49:72:59:6a:42:fc:f6:42:a4:44:00:46:c5:83:a0:
                    9d:9e:29:d0:63:f6:12:e6:79:df:53:b3:ab:6c:aa:
                    57:a3:35:69:a0:11:c8:89:e1:74:8c:3f:93:0a:1b:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4A:C8:2B:D2:44:78:0B:44:90:7E:12:DB:ED:45:69:D3:C7:CD:7C
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:ee:57:2a:1b:31:99:21:c9:fd:70:b0:bf:0d:85:ad:9c:
         34:12:60:61:03:5c:2f:24:96:74:78:5b:18:29:a1:c8:7f:8f:
         bf:7e:3e:51:53:93:49:d8:1f:ef:65:23:72:f8:f2:9b:ea:d5:
         52:3f:b3:5c:61:07:35:54:dc:24:0a:aa:b2:bd:a9:f0:8a:a0:
         4c:f7:11:e4:94:4b:d6:90:5f:33:1a:09:bf:9e:f5:b4:e9:4e:
         bb:1c:4f:8a:e7:34:38:c0:4d:3d:93:a5:ed:03:1b:54:f1:eb:
         59:0c:6f:52:0f:5b:fa:ef:9a:17:df:b6:9a:a0:01:d2:95:cc:
         99:71:2c:e0:1e:09:bb:80:9d:c0:9e:08:0d:45:13:6d:63:7b:
         29:a1:ec:4a:a9:3c:cc:ce:f7:1e:97:a4:d8:df:c5:13:d9:5c:
         ac:89:f4:dd:f1:09:14:64:68:4c:58:3f:8f:63:24:42:f9:59:
         6f:c4:1c:84:4f:c1:bd:23:94:1e:42:8f:e0:d5:0d:fa:d7:a1:
         08:ef:2b:ab:ff:73:91:4e:1a:d1:79:a8:a5:6d:c3:bd:5c:0b:
         f5:8a:c6:90:a7:95:97:e7:08:99:ff:86:84:eb:87:94:ee:1b:
         89:0b:cf:7c:66:3f:fc:5c:b9:ff:01:00:98:6c:ca:53:5a:02:
         54:0f:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 00:04:38 2026 by rpki-client