This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          PKBzUuiD0PdNzmm8aEHXwRqoZTq7HRy7/fvuvQOU3QM=
Subject key identifier:   09:10:A0:2F:F0:1F:6F:5F:62:C3:4F:7D:6C:76:AF:B3:56:51:75:A6
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       08BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          08B9
Signing time:             Fri 06 Feb 2026 01:44:17 +0000
Manifest this update:     Fri 06 Feb 2026 01:44:16 +0000
Manifest next update:     Sun 08 Feb 2026 01:44:16 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: ZQ33NpB8jVvjPkXiduZFECfOjoCKTB1scZBxjLQRICE=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 01:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: Feb  6 01:44:16 2026 GMT
            Not After : Feb  8 01:44:16 2026 GMT
        Subject: CN=69854771-93dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:7d:b0:a7:3c:56:bc:2a:3c:a6:60:b1:36:
                    1d:86:36:09:9c:f8:bc:9b:16:4f:b0:4f:93:f6:23:
                    09:6b:17:46:3e:58:fe:a3:ad:a2:b5:79:49:04:4e:
                    59:a6:05:5b:5c:d9:75:71:ef:b1:d3:4a:67:5c:de:
                    f0:ae:3c:31:7b:40:da:f2:d9:2a:2f:f5:0c:f4:48:
                    18:a0:d2:1a:a9:8e:49:df:56:0d:76:23:c7:d7:37:
                    c4:3b:77:28:a1:15:41:8f:6a:cf:c5:0c:f9:dc:25:
                    44:90:5f:5b:08:72:8d:be:d3:77:30:9e:52:ee:58:
                    46:fa:83:06:98:95:be:f9:c3:81:22:44:a7:80:ad:
                    27:2f:d3:2a:0f:83:1e:f7:09:0e:67:d5:56:aa:79:
                    1d:f4:e7:d0:d7:1f:3e:2c:84:1f:77:59:d5:85:5e:
                    f9:8b:40:eb:c2:3a:92:95:a1:50:96:30:8d:62:e1:
                    ab:af:21:2c:c9:f5:79:bc:28:ce:24:71:17:3c:c6:
                    5f:7e:da:a8:40:43:38:49:62:31:25:51:d8:f6:36:
                    3b:7d:f5:c6:49:61:81:38:f7:05:3a:da:76:43:fa:
                    11:17:a0:f7:b9:92:13:99:54:af:90:7a:d7:60:f5:
                    34:b2:bf:23:12:12:e9:4a:ab:32:7e:9a:43:60:3a:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:A0:2F:F0:1F:6F:5F:62:C3:4F:7D:6C:76:AF:B3:56:51:75:A6
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:48:a0:9a:24:9c:6e:0d:1b:87:dd:7d:c1:e4:d4:c6:50:78:
         0e:53:7a:32:40:ed:e2:27:38:ce:e2:7f:32:0d:b3:55:03:2f:
         01:f6:45:e0:7f:cb:8b:62:5f:79:70:69:7d:a2:ee:c5:1d:d6:
         8b:e3:de:01:cf:b7:15:f0:d9:48:22:1c:22:55:94:7d:45:84:
         c8:9d:0a:a6:01:64:53:85:b1:1a:85:8e:b9:af:6b:c0:6e:7d:
         2e:fd:c9:ac:1d:93:e1:48:9c:ef:38:e8:35:0c:b0:69:ec:b7:
         0b:80:aa:4e:e6:42:d5:1c:93:c6:8b:c4:21:95:2d:82:56:df:
         ef:7d:98:e2:ee:09:3f:30:3b:b0:18:aa:cb:31:88:88:b8:da:
         8d:36:40:87:7a:36:ef:55:4b:e5:ad:b0:22:7f:3e:35:4f:cb:
         a4:23:a5:ce:26:02:04:8d:7f:f1:23:3a:35:47:08:60:81:31:
         27:f8:ff:9a:1b:5b:82:de:f7:ee:2f:64:ff:44:b4:c6:c7:bf:
         52:fb:06:88:33:72:a0:ff:21:86:62:0c:97:8f:8d:81:b7:73:
         99:1b:9c:b9:b0:a9:e2:38:81:86:f9:32:2e:86:9d:20:cf:12:
         14:1b:99:0a:b2:ee:69:8a:84:19:f1:cd:57:aa:f3:a4:9e:f2:
         33:81:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:28:08 2026 by rpki-client