This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          4lXUaJIAqzRYDoLForLd3jvfrY9gJOGCAnAdrptLCOs=
Subject key identifier:   86:68:1F:6D:90:C6:06:AD:76:8A:6F:4C:3D:DE:49:78:E0:94:61:E2
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       039E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          039D
Signing time:             Fri 06 Feb 2026 03:48:44 +0000
Manifest this update:     Fri 06 Feb 2026 03:48:43 +0000
Manifest next update:     Sun 08 Feb 2026 03:48:43 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: CY+k8TkYobA7+yWzIErKgwKORSxcJoDGy3ePVjzbHs4=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Feb  6 03:48:43 2026 GMT
            Not After : Feb  8 03:48:43 2026 GMT
        Subject: CN=6985649c-9ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:18:1c:aa:73:dc:62:33:d8:eb:54:e9:b8:5e:
                    db:5e:46:b4:a8:82:65:06:5d:f2:d1:e6:74:4e:66:
                    57:e7:54:d2:cb:16:67:ba:59:77:87:13:97:ca:4a:
                    9d:0b:67:c0:0f:77:f0:13:da:28:bd:c3:29:4c:d4:
                    47:32:4f:71:4b:8f:fe:14:9c:70:e2:89:00:66:83:
                    25:be:d3:a2:5b:c3:6b:4c:22:6f:fe:3e:c7:ff:1b:
                    1e:ed:67:08:ac:ab:44:13:2f:46:6d:b4:fd:1b:28:
                    12:f6:8f:6c:53:67:2d:90:07:3e:1d:c1:a8:82:44:
                    a8:12:2a:ec:84:3d:06:b6:47:66:3b:bb:f1:56:23:
                    f3:03:63:ca:4b:1e:f7:db:1f:93:6d:66:a5:e1:bf:
                    91:a6:85:6e:cc:76:3c:5c:9d:25:2d:bd:26:cf:df:
                    0e:9c:d7:e5:d0:82:5c:6a:e2:2e:01:e2:3b:cc:de:
                    92:fd:80:2c:43:17:0d:ef:5f:45:09:df:4c:2c:1f:
                    40:af:27:ba:13:71:3d:3e:cf:b8:b9:9f:b4:87:86:
                    cd:8a:e2:ee:a6:9e:6c:b4:cd:66:b6:2e:56:18:1e:
                    40:59:23:03:94:52:56:6d:30:c1:55:71:bb:01:7d:
                    58:8c:4e:0c:2f:1f:3c:a5:30:a2:a5:7c:27:7c:77:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:68:1F:6D:90:C6:06:AD:76:8A:6F:4C:3D:DE:49:78:E0:94:61:E2
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:59:36:c2:5a:cb:1d:a8:39:45:2d:0b:79:7c:35:bf:0e:8e:
         25:9f:48:d1:b7:d7:c2:f4:69:0c:cc:ad:33:04:72:47:6b:fc:
         b4:8c:a4:51:18:e8:a9:f3:22:45:95:23:6c:a0:7f:ab:74:e2:
         17:8e:cb:5c:41:58:05:56:32:7f:c7:0b:b0:8d:d6:36:a3:13:
         17:fa:2a:8d:df:55:81:1e:50:2d:60:84:09:16:9e:0e:9c:a5:
         4d:41:bc:5b:5e:f3:7c:cc:7a:c2:59:ff:54:ec:5e:4b:2b:8c:
         f4:55:a5:e3:d9:a4:d9:2f:17:4e:33:75:32:72:db:24:63:18:
         65:2c:6b:8b:84:72:6c:4e:c5:37:dc:7a:58:26:16:10:63:d3:
         39:ab:1c:3f:dc:b3:21:31:cb:11:cd:69:50:27:1b:7b:ae:a1:
         aa:57:bb:01:8f:57:04:53:d7:85:a3:eb:01:bb:a8:1c:ad:45:
         a6:1a:bc:bf:78:f2:da:fb:c9:cb:48:23:18:e6:33:32:41:de:
         01:cc:fc:7c:01:f4:ff:9d:00:62:52:aa:d9:92:61:6f:96:fa:
         7f:3b:af:26:5f:98:cb:44:53:30:bd:8d:c6:ee:76:42:8d:f1:
         79:89:3f:2c:58:b8:b3:87:be:3f:6d:32:77:f2:16:ff:d6:ee:
         2b:8a:ea:5c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA54wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU0MkRSSTExMC8GA1UEBRMoOUQ4NURBRDAyRkMxNzdBNDBFOUI5MDcwMjM3MDZG
M0Y5Nzc0NERBMDAeFw0yNjAyMDYwMzQ4NDNaFw0yNjAyMDgwMzQ4NDNaMBgxFjAU
BgNVBAMTDTY5ODU2NDljLTljYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzGByqc9xiM9jrVOm4XtteRrSogmUGXfLR5nROZlfnVNLLFme6WXeHE5fK
Sp0LZ8APd/AT2ii9wylM1EcyT3FLj/4UnHDiiQBmgyW+06Jbw2tMIm/+Psf/Gx7t
Zwisq0QTL0ZttP0bKBL2j2xTZy2QBz4dwaiCRKgSKuyEPQa2R2Y7u/FWI/MDY8pL
HvfbH5NtZqXhv5GmhW7MdjxcnSUtvSbP3w6c1+XQglxq4i4B4jvM3pL9gCxDFw3v
X0UJ30wsH0CvJ7oTcT0+z7i5n7SHhs2K4u6mnmy0zWa2LlYYHkBZIwOUUlZtMMFV
cbsBfViMTgwvHzylMKKlfCd8d+cPAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUhmgf
bZDGBq12im9MPd5JeOCUYeIwHwYDVR0jBBgwFoAUnYXa0C/Bd6QOm5BwI3BvP5d0
TaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNDJEL0NDOUFBMEU2NDFEQTExRUVCMDNFQkUzNzRBRDlFNkZDL25ZWGEw
Q19CZDZRT201QndJM0J2UDVkMFRhQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZWGEwQ19CZDZRT201QndJM0J2UDVkMFRhQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REU0MkQvQ0M5QUEwRTY0MURBMTFFRUIwM0VCRTM3NEFEOUU2
RkMvbllYYTBDX0JkNlFPbTVCd0kzQnZQNWQwVGFBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjWTbCWssdqDlFLQt5fDW/Do4ln0jRt9fC
9GkMzK0zBHJHa/y0jKRRGOip8yJFlSNsoH+rdOIXjstcQVgFVjJ/xwuwjdY2oxMX
+iqN31WBHlAtYIQJFp4OnKVNQbxbXvN8zHrCWf9U7F5LK4z0VaXj2aTZLxdOM3Uy
ctskYxhlLGuLhHJsTsU33HpYJhYQY9M5qxw/3LMhMcsRzWlQJxt7rqGqV7sBj1cE
U9eFo+sBu6gcrUWmGry/ePLa+8nLSCMY5jMyQd4BzPx8AfT/nQBiUqrZkmFvlvp/
O68mX5jLRFMwvY3G7nZCjfF5iT8sWLizh74/bTJ38hb/1u4riupc
-----END CERTIFICATE-----
Generated at Sat Feb 7 05:49:14 2026 by rpki-client