This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File:                     lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier:          eWwcdUas2StNQ0uuOeAkh9+s9euRHd8eFYJ8tKOh3JE=
Subject key identifier:   EB:F0:E0:E0:CE:D6:13:F0:2C:10:ED:BE:6D:B6:3D:E3:2A:24:71:6B
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer:       /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial:       06E9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number:          06E8
Signing time:             Sat 07 Feb 2026 02:10:20 +0000
Manifest this update:     Sat 07 Feb 2026 02:10:19 +0000
Manifest next update:     Mon 09 Feb 2026 02:10:19 +0000
Files and hashes:         1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: lgxbEgNc/92+CuxLCvY4PpZduh3TSXfdBbKUobMSELU=)
                          2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                          rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
        Validity
            Not Before: Feb  7 02:10:19 2026 GMT
            Not After : Feb  9 02:10:19 2026 GMT
        Subject: CN=69869f0c-b266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:89:0a:c7:07:f0:75:90:85:d4:3e:e6:ef:
                    b8:08:d4:f7:ca:b8:19:f0:d6:65:6e:08:b1:26:41:
                    0c:03:10:08:14:34:b0:d5:94:8b:c6:0b:72:7d:ba:
                    27:fb:fb:57:b6:10:03:f2:a6:09:88:d7:b7:b7:f3:
                    d6:28:2a:13:19:d8:56:42:50:f5:37:af:1b:02:7d:
                    e6:b3:c0:43:6e:4b:7d:24:1d:45:12:e9:6a:72:f3:
                    21:a8:85:e5:1c:a2:61:7b:92:79:d3:81:b1:4e:cc:
                    78:66:5f:0a:20:7d:34:87:47:af:09:bc:c3:e4:1a:
                    58:90:bf:92:09:0f:f4:8a:79:2a:a6:32:14:13:2f:
                    a5:a4:be:8f:84:09:2b:ae:6a:5f:f4:0f:6b:39:b0:
                    b0:6e:cc:69:27:e8:aa:c1:9a:92:65:a5:45:59:1c:
                    eb:0a:6d:38:fb:79:53:aa:49:0f:81:bb:51:fc:be:
                    91:35:0c:0e:16:7a:b4:c2:13:d5:da:bb:d0:29:b9:
                    06:63:47:ac:53:bb:fb:b6:7d:ba:44:70:fc:f7:33:
                    d0:a7:51:ee:80:29:1a:a6:ee:55:c5:be:63:ba:c1:
                    80:2e:18:67:eb:bb:8b:20:3d:1e:71:2c:9f:a5:f2:
                    e5:f0:4e:7c:fc:69:48:03:02:77:7a:a9:c8:9c:af:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:E0:E0:CE:D6:13:F0:2C:10:ED:BE:6D:B6:3D:E3:2A:24:71:6B
            X509v3 Authority Key Identifier:
                keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:30:22:ca:ee:a5:43:d2:f1:0f:f5:c6:85:6f:7b:c3:1c:d6:
         6b:5e:4a:e1:86:da:05:b0:d8:9a:05:a0:43:2b:9b:b8:33:d2:
         66:76:70:c3:8e:bc:17:97:f5:71:15:f4:bb:0c:2b:08:9c:77:
         3b:3c:e0:5e:17:b8:b4:67:9a:2b:e4:0e:40:cc:cb:1e:e8:e4:
         74:06:14:43:f4:0d:fb:d7:b2:bb:d7:bc:00:ce:8a:c1:c5:53:
         13:14:1c:0d:d8:4c:ee:92:25:8c:55:b0:63:a6:1b:79:29:9a:
         0f:32:5f:9a:a8:b7:1e:90:9f:cb:0b:43:bc:ac:f1:f6:d2:3e:
         4e:97:50:27:54:32:80:8f:73:3f:3c:ae:a1:fa:8f:6c:36:ef:
         dd:1c:8a:d9:08:90:96:78:be:38:b2:1a:06:aa:a6:46:67:51:
         89:1d:80:2f:be:79:bb:35:08:47:a4:22:79:8f:95:20:11:b8:
         76:29:ae:cf:55:23:fb:59:a2:29:34:58:03:81:e1:3c:7e:2a:
         f5:d4:5a:87:33:fc:9c:9c:bb:ce:f8:6f:2d:ae:0c:6f:e8:eb:
         b8:62:b0:6f:47:fd:1b:97:80:db:00:67:6f:de:99:de:88:da:
         b7:a5:16:19:50:f5:c3:94:ae:8d:6b:94:e6:c0:68:3d:b8:51:
         f6:04:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 06:09:00 2026 by rpki-client