This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.mft (raw, json)
Hash identifier:          iy9uiCi08faFGUWcjVUud+oripQ0oVPIHhcSvduJo3s=
Subject key identifier:   B8:57:3F:AE:51:3A:52:35:FB:3C:9D:00:AF:47:16:65:5D:A6:B9:F9
Authority key identifier: EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Certificate issuer:       /CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
Certificate serial:       0754
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
Manifest number:          0752
Signing time:             Fri 06 Feb 2026 02:03:05 +0000
Manifest this update:     Fri 06 Feb 2026 02:03:04 +0000
Manifest next update:     Sun 08 Feb 2026 02:03:04 +0000
Files and hashes:         1: 6y_2M0NFlzp0sAkALjaRcdk48DM.crl (hash: TTokyPvWStCfu75KwNcbUjJagoTUlCC/JunyL9a2Hvc=)
                          2: 3ED2C7FA73DF11F08938C08EDAE4EC9C.roa (hash: iyabqTBm+x48hvA2ztaOaTXns/fPRnTXSFF6KRFDSwY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 02:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Validity
            Not Before: Feb  6 02:03:04 2026 GMT
            Not After : Feb  8 02:03:04 2026 GMT
        Subject: CN=69854bd9-c0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:af:18:4d:24:b0:70:1f:6d:9b:0c:79:63:
                    db:d5:cc:bd:70:31:f0:6f:d3:a7:f1:ce:80:19:6f:
                    c7:88:ec:ab:19:28:f5:30:2a:f2:99:28:d3:a2:94:
                    03:ec:7f:d1:9c:c8:5d:be:16:45:02:07:3a:c8:34:
                    57:ff:e1:76:6e:69:3c:c9:72:80:70:76:ce:09:60:
                    a3:c3:fa:ca:0d:35:07:45:d7:79:12:26:c5:81:37:
                    77:75:4a:12:27:ac:88:be:e3:47:a0:ff:19:fb:4c:
                    dc:c4:84:c6:e6:62:31:52:e0:47:87:33:d3:42:8a:
                    05:66:37:3b:76:22:dd:01:50:b0:5c:1e:62:04:e0:
                    cf:98:d4:9c:ea:fe:91:26:5d:db:2a:ca:9a:29:9e:
                    94:53:e4:a1:90:5d:aa:a0:28:66:39:0d:78:d1:92:
                    7c:cf:8b:29:41:f3:7f:9f:22:0f:b5:e8:eb:75:f5:
                    e7:21:65:b2:3a:28:4f:18:0a:f4:74:13:d8:90:26:
                    32:88:cd:25:1b:32:9e:5e:de:a7:23:3c:73:56:9a:
                    68:29:ec:85:55:f0:e7:c1:ca:72:a8:74:02:6c:5b:
                    2d:01:4e:c2:75:0e:19:f3:6e:a3:b0:a6:9b:25:9a:
                    25:8d:1e:2f:62:e6:78:00:19:fb:63:83:08:a1:b4:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:3F:AE:51:3A:52:35:FB:3C:9D:00:AF:47:16:65:5D:A6:B9:F9
            X509v3 Authority Key Identifier:
                keyid:EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:56:95:b7:da:20:f3:a9:1d:cf:64:ba:7a:9b:c3:ff:f7:f3:
         8b:5b:29:72:b4:08:0d:be:d2:43:8f:cc:44:6c:f2:f9:79:55:
         68:19:72:ea:ec:c0:72:a6:01:ab:bb:aa:2a:47:66:7d:77:31:
         98:75:85:9c:a8:e5:75:71:22:70:7b:c8:32:d4:7a:ac:c8:84:
         8d:e3:f7:98:30:be:69:24:44:ce:9c:d8:16:fc:a6:d6:6f:cd:
         83:c2:39:7d:04:ad:bf:2f:cc:bf:97:56:77:40:9f:e1:e4:c8:
         42:e1:42:8b:64:80:71:40:45:ed:50:ce:27:23:20:0b:d0:9d:
         98:39:e9:ae:71:bf:b7:a3:fb:0e:82:aa:81:c9:83:7a:68:00:
         5e:7a:f5:f2:f7:f6:b0:3d:fc:23:e3:4b:00:e9:c5:21:c8:ba:
         35:a0:f1:9c:4e:ce:9a:58:38:6f:69:b8:84:b2:d2:b5:ac:8a:
         57:5f:db:6b:f0:fa:58:00:75:81:da:21:4d:65:ba:bd:5d:c8:
         8b:c0:d7:41:cb:45:4c:cc:d1:68:ee:d9:a2:ba:16:4c:43:a3:
         1a:e0:1b:03:ed:9d:f3:26:1b:29:34:f9:cb:dd:04:97:0c:6d:
         2c:da:86:8b:5b:de:c9:32:1d:f5:db:0c:ec:6d:49:f5:8b:1d:
         a5:2f:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 23:58:11 2026 by rpki-client