This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
File:                     sOM0w8FyGlubyhiSUD6QUkaIKTo.mft (raw, json)
Hash identifier:          5PA/aySr9ovWU834Wud7mbus5o5uDs6tHa4FSrEPp5E=
Subject key identifier:   CA:41:DA:61:98:89:A7:7E:55:56:7A:67:05:1E:58:BD:A4:E2:15:EA
Authority key identifier: B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A
Certificate issuer:       /CN=F36B4C8AAF/serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
Certificate serial:       4D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
Manifest number:          4B
Signing time:             Fri 06 Feb 2026 05:59:30 +0000
Manifest this update:     Fri 06 Feb 2026 05:59:29 +0000
Manifest next update:     Sun 08 Feb 2026 05:59:29 +0000
Files and hashes:         1: sOM0w8FyGlubyhiSUD6QUkaIKTo.crl (hash: MygM+crSY8hunJOhNFJm7/aGpFM1h8yNpKcG9NlJCKM=)
                          2: 4A0CDA10CC3C11F094748AE7DAE4EC9C.roa (hash: uoTxni0vC5SEB/kG6P4nz0RjmOt92nw/J4LO6zq7Ppg=)
                          3: AEBE6DA6CC3D11F0A0E3F5EFDAE4EC9C.roa (hash: IO+N7lJMSFwuh89yHL6Fm/wq2e70cnS2owajXPspnmI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 05:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4C8AAF, serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
        Validity
            Not Before: Feb  6 05:59:29 2026 GMT
            Not After : Feb  8 05:59:29 2026 GMT
        Subject: CN=69858342-6be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:09:c8:ad:d7:c1:fb:3c:11:d4:c0:b3:ac:
                    3a:c3:dd:7b:72:49:e0:41:cb:19:11:d8:d2:3b:bc:
                    11:2a:51:58:46:d7:ca:a9:28:6a:28:6c:76:3a:e0:
                    94:c9:38:be:4a:10:5d:6c:6a:05:b9:39:36:cb:6e:
                    d6:af:ff:d0:af:42:d8:db:7b:b7:8b:7b:04:c0:47:
                    46:2d:f9:cf:8a:1e:98:7b:bd:ef:c8:14:e0:0f:c3:
                    8f:02:26:6d:17:b8:83:0f:e7:b5:27:2c:98:ac:46:
                    50:b8:ba:e0:a7:18:66:1f:76:e0:7d:c3:b4:fa:c3:
                    7c:17:d1:4e:ac:73:90:0f:db:8f:2a:52:69:1d:8a:
                    89:05:31:fb:08:aa:11:1e:f6:82:c3:12:da:40:49:
                    bb:49:0c:e6:31:ef:e5:57:26:c6:e3:21:f3:4a:9c:
                    7d:85:05:c9:2a:0e:5c:e2:0d:a1:1d:e5:20:f4:c1:
                    02:08:d5:66:b1:b1:2e:ad:61:b9:11:16:ab:77:98:
                    ab:50:c6:da:a4:b4:eb:34:1e:6c:ca:ea:e1:d0:2d:
                    ab:fc:48:de:17:ed:06:d2:2d:f3:5f:87:6e:5d:76:
                    a5:63:9a:21:33:68:50:ab:83:d6:08:67:46:9e:cc:
                    f1:5b:02:ca:d3:2e:44:7d:d4:37:09:33:6a:44:cd:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:DA:61:98:89:A7:7E:55:56:7A:67:05:1E:58:BD:A4:E2:15:EA
            X509v3 Authority Key Identifier:
                keyid:B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:93:65:40:f7:56:96:4e:be:01:ad:13:3b:ab:55:d2:b7:4f:
         96:ad:9a:f8:0c:c7:69:33:83:e8:94:d0:e4:60:e5:13:8b:ea:
         9d:30:78:8e:d9:34:0a:62:83:1d:06:b9:fb:84:f0:f2:9b:32:
         aa:4e:ca:6c:31:f0:c5:d5:46:04:21:9d:73:7f:cc:54:ed:d1:
         6b:e2:ff:ca:20:a6:4e:d1:7b:4f:66:b9:ba:e7:45:7e:92:e7:
         2f:b1:ed:75:ff:45:60:7d:20:64:7c:40:6e:4b:29:c7:ec:50:
         15:10:35:27:7c:5d:ee:44:40:d7:cd:fc:b5:2a:41:cc:32:a8:
         76:49:7a:f2:5e:f1:1b:e6:c8:6d:56:eb:aa:65:54:0e:c5:ac:
         e5:4b:25:a6:15:98:f5:74:f2:d9:bc:84:f8:b1:93:ac:a7:64:
         d0:c4:70:78:fc:2f:90:ff:fa:38:5d:c4:07:c9:47:1e:b0:32:
         b7:23:f2:25:55:66:0b:a4:20:65:0e:2a:01:11:7d:e1:89:e0:
         e0:ce:ab:7c:94:e1:cb:e0:68:63:02:23:9a:af:36:e2:bb:8b:
         5d:0c:de:4d:11:4d:1f:fc:d7:25:d1:53:a8:07:06:79:91:20:
         21:21:d2:9b:a7:80:d5:92:9d:f8:65:14:d9:b5:04:5c:43:77:
         0d:1e:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:25:24 2026 by rpki-client