This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
File:                     r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft (raw, json)
Hash identifier:          0PodeYHV6XHlgnPjTBZ0js+g5hYEVWwkTIK4K8h8KUQ=
Subject key identifier:   70:40:16:86:49:C5:9A:17:10:46:B0:FC:C7:14:A4:47:81:BF:C8:9A
Authority key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
Certificate issuer:       /CN=F36F8BC2AF/serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Certificate serial:       025D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
Manifest number:          0258
Signing time:             Fri 06 Feb 2026 04:27:19 +0000
Manifest this update:     Fri 06 Feb 2026 04:27:18 +0000
Manifest next update:     Sun 08 Feb 2026 04:27:18 +0000
Files and hashes:         1: r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl (hash: ep9o6th++m5O4G3sDwjs2q99ykpbkrHGKDyKe32HGGg=)
                          2: 3AB9C0D0ED6D11F09ACA117DDAE4EC9C.roa (hash: qWbACSj4Y3MG+OhyVSYDEFibc3PnkmJTw+r0W8ExIVM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8BC2AF, serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
        Validity
            Not Before: Feb  6 04:27:18 2026 GMT
            Not After : Feb  8 04:27:18 2026 GMT
        Subject: CN=69856da7-9cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:87:f5:dd:92:05:e6:94:2d:2c:73:31:1a:
                    5a:15:c5:82:cf:4e:ce:ea:2c:1f:63:46:ba:01:25:
                    26:1c:dc:02:32:bd:3b:91:58:f4:59:2c:5e:5c:33:
                    07:53:bc:ad:3e:5b:53:c3:80:0d:58:e7:92:07:45:
                    e1:c8:b7:3d:c0:0b:4f:0c:b7:1d:6f:f3:51:33:22:
                    77:57:6e:5d:42:ea:c4:e8:a5:4c:dd:e1:68:7c:f6:
                    e2:79:ff:7c:0b:bd:51:7c:b7:7b:1b:d4:ac:29:c4:
                    9a:a9:0d:4f:f9:1c:5f:78:6d:78:7b:67:da:fa:f6:
                    d7:7e:5a:f8:fe:72:58:57:d9:91:5a:01:9b:b6:e9:
                    1a:f5:f5:40:b3:4e:cd:e9:e9:da:25:00:a8:da:24:
                    eb:83:3d:e6:be:59:32:76:b4:f3:93:e7:f6:94:31:
                    79:42:89:bb:c8:e9:4b:bb:cf:d8:4a:7e:29:3f:0d:
                    1d:d0:0c:b0:63:07:56:a6:85:af:b9:42:11:4a:8e:
                    df:5a:e9:fb:24:5e:87:15:16:3e:63:14:45:9f:3e:
                    c2:68:d8:2c:6e:b9:60:ee:92:bf:af:1e:dc:88:b2:
                    ad:b0:9e:57:bf:30:f1:47:26:33:ed:24:13:e7:e9:
                    69:55:4a:ab:de:de:46:89:8c:67:36:03:ca:b2:2a:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:16:86:49:C5:9A:17:10:46:B0:FC:C7:14:A4:47:81:BF:C8:9A
            X509v3 Authority Key Identifier:
                keyid:AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:68:b2:7e:4c:45:54:97:8b:4b:c7:30:9d:32:73:df:09:
         43:ec:0b:21:11:a2:46:16:fc:62:7d:b6:03:95:e0:c1:73:69:
         81:43:b7:9a:92:7f:d2:8a:0e:59:61:16:e7:d5:56:f3:2a:3e:
         ff:b6:ab:9a:bf:3a:b1:b3:76:2a:38:df:05:69:a6:24:fa:31:
         62:70:e7:67:6b:c3:53:20:8e:19:17:f0:cc:cd:ed:a5:c0:bb:
         58:ff:54:a8:e9:98:d9:ba:7b:fc:00:46:b8:bc:da:bf:32:40:
         bb:d4:6b:d8:5f:d1:f5:dd:3c:00:09:33:01:26:62:de:56:ba:
         24:5a:ad:23:13:45:d0:79:1e:1f:7e:b0:d1:d1:99:ac:4c:7e:
         2f:c4:bd:da:f2:c7:2f:e2:10:f0:2a:05:1f:52:1c:ce:ab:48:
         b2:67:a3:f5:51:70:9d:10:63:16:97:08:95:d4:c8:35:a5:00:
         bf:d1:97:74:9a:e8:72:58:43:fb:51:ab:05:9b:71:8c:08:38:
         07:d6:62:be:26:73:e5:f1:0b:58:7f:2e:21:e4:ea:ac:d1:39:
         86:21:22:5c:d4:12:26:61:e8:52:c3:7b:59:9e:10:e3:fe:cc:
         36:db:36:2e:34:29:48:84:26:48:51:f8:da:60:7c:ae:08:96:
         9f:4e:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 00:00:29 2026 by rpki-client