This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
File:                     NwiffHLw58V4LX8rO9aPXYzsU5Y.mft (raw, json)
Hash identifier:          pIZCwVmAXPE9RseWMxzb93R9hBBgANsHHpW+8N+J8bw=
Subject key identifier:   3A:C2:AC:76:9B:17:38:BB:C5:9A:E6:86:6F:01:0D:86:17:EF:DA:53
Authority key identifier: 37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
Certificate issuer:       /CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Certificate serial:       0A26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
Manifest number:          0A21
Signing time:             Fri 02 Jan 2026 01:21:26 +0000
Manifest this update:     Fri 02 Jan 2026 01:21:26 +0000
Manifest next update:     Sun 04 Jan 2026 01:21:26 +0000
Files and hashes:         1: NwiffHLw58V4LX8rO9aPXYzsU5Y.crl (hash: DmtNJjjIarkISI9pUmFLhj1YWsdB/2oMszHnC01pPQA=)
                          2: 2452626C789C11EA9D48381FF8AEA228.roa (hash: /wUzpd2kuZQOUTL91oaudRKtKLX8YfadU+XPL/wLyTw=)
                          3: A6CF9D8AAA1C11EEB9ABF954775412E6.roa (hash: 84w5dXq+cic3Xi8F7+1KmbYwvKGSm/iIJ1eYJxxPsPc=)
                          4: B82EFE34291811E9AC8B8967F8AEA228.roa (hash: 89svLPpHyqTVOFkRRCgSCkC0+wCh7pGNmY8TlC/Ke6c=)
                          5: 2DBFF77A291911E99585E167F8AEA228.roa (hash: 95TWNnQxaCwaMS0/NMpFWBMaUEPrE1AodSEzF5Hy8Yk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Jan 2026 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAF, serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
        Validity
            Not Before: Jan  2 01:21:26 2026 GMT
            Not After : Jan  4 01:21:26 2026 GMT
        Subject: CN=69571d96-c281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ba:12:c8:4b:dc:3d:db:a4:96:7e:45:90:f6:
                    cf:e7:6e:03:8b:f4:95:04:da:98:15:30:2b:4e:3e:
                    93:99:2c:31:7d:05:e3:b6:23:5a:cf:1c:81:60:7a:
                    3a:64:b4:ed:e3:c2:dd:19:bb:99:af:6e:3e:41:82:
                    7f:79:59:47:72:13:0c:e9:02:c5:02:0f:46:09:97:
                    ee:d2:bd:06:54:cc:2f:49:40:67:c4:7d:32:23:a3:
                    08:df:a2:1b:15:1a:1b:c5:31:55:49:46:01:fa:d2:
                    14:4f:dd:90:90:94:9d:66:ca:4e:ce:f9:bc:3d:b9:
                    1e:ff:a5:0b:0c:a3:f5:39:6c:de:b7:ed:58:ee:02:
                    a2:0d:f7:6f:d2:9a:84:6a:ad:45:06:a2:e0:23:8a:
                    0f:f7:09:7b:52:ca:7a:21:08:51:c1:0e:97:ee:8d:
                    a6:6f:26:57:bc:2e:4d:9a:56:e4:76:e2:b9:6b:94:
                    fc:87:3f:70:04:7c:ca:09:51:56:2f:a4:9a:ad:80:
                    bc:92:fc:b7:28:9c:2d:26:42:a9:cd:c2:55:7e:18:
                    4c:04:6f:64:f9:69:f6:8a:e6:ae:03:8a:c4:7f:3f:
                    a9:99:7b:10:b3:09:27:2d:1c:fa:b2:f7:46:ec:96:
                    dd:bd:08:27:6f:33:f6:fd:8d:bf:b1:95:64:ab:38:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C2:AC:76:9B:17:38:BB:C5:9A:E6:86:6F:01:0D:86:17:EF:DA:53
            X509v3 Authority Key Identifier:
                keyid:37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:a6:a3:28:0f:e5:3a:fa:66:7b:5e:05:14:c2:94:fb:94:06:
         f7:2b:a8:8e:cf:3e:66:cb:1f:34:01:b4:c5:8a:16:61:ee:0b:
         5b:ef:98:77:0b:88:93:87:fc:98:c8:a3:f7:ce:bf:2e:af:e0:
         c5:55:0d:21:12:ed:12:90:46:a2:ec:5f:9c:cd:7f:f2:54:07:
         fb:63:02:b2:d0:93:72:86:4b:d2:9f:2e:01:03:e2:d3:bb:18:
         6b:3a:fd:f6:20:84:01:d9:50:e8:2a:5a:1c:e6:f0:e2:ba:b3:
         13:ea:87:e5:2f:a4:9d:da:2b:c6:57:2d:07:fc:f9:cd:f5:12:
         ea:dc:ad:85:71:a4:b2:ae:16:ef:2e:39:6d:07:46:e0:f7:0f:
         7f:ba:67:5d:cc:e2:73:58:2b:50:9b:ae:60:61:1c:ba:c6:03:
         3d:09:12:38:59:8f:9e:ea:e3:ba:ab:6f:89:06:cd:5f:7a:6e:
         8c:6c:82:25:d1:26:a7:df:95:42:28:6b:2e:82:9c:e3:9e:70:
         87:3d:dc:cc:f9:3f:ad:d0:61:9c:9e:b8:7e:f4:1b:f0:42:c7:
         59:37:9b:fd:d5:fe:e0:2a:fd:f7:20:c2:95:33:bd:1d:fb:9a:
         dd:57:39:aa:91:ef:21:c3:f6:df:18:31:b9:1f:b0:b2:f9:62:
         ad:d5:f5:e4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCiYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEU2N0NBRjExMC8GA1UEBRMoMzcwODlGN0M3MkYwRTdDNTc4MkQ3RjJCM0JENjhG
NUQ4Q0VDNTM5NjAeFw0yNjAxMDIwMTIxMjZaFw0yNjAxMDQwMTIxMjZaMBgxFjAU
BgNVBAMTDTY5NTcxZDk2LWMyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0uhLIS9w926SWfkWQ9s/nbgOL9JUE2pgVMCtOPpOZLDF9BeO2I1rPHIFg
ejpktO3jwt0Zu5mvbj5Bgn95WUdyEwzpAsUCD0YJl+7SvQZUzC9JQGfEfTIjowjf
ohsVGhvFMVVJRgH60hRP3ZCQlJ1myk7O+bw9uR7/pQsMo/U5bN637VjuAqIN92/S
moRqrUUGouAjig/3CXtSynohCFHBDpfujaZvJle8Lk2aVuR24rlrlPyHP3AEfMoJ
UVYvpJqtgLyS/LconC0mQqnNwlV+GEwEb2T5afaK5q4DisR/P6mZexCzCSctHPqy
90bslt29CCdvM/b9jb+xlWSrOH0xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOsKs
dpsXOLvFmuaGbwENhhfv2lMwHwYDVR0jBBgwFoAUNwiffHLw58V4LX8rO9aPXYzs
U5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRFNjdDLzcxREE1NDgwMjkxNjExRTlBMDc5Qzc2NUY4QUVBMjI4L053aWZm
SEx3NThWNExYOHJPOWFQWFl6c1U1WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL053aWZmSEx3NThWNExYOHJPOWFQWFl6c1U1WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEU2N0MvNzFEQTU0ODAyOTE2MTFFOUEwNzlDNzY1RjhB
RUEyMjgvTndpZmZITHc1OFY0TFg4ck85YVBYWXpzVTVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDUpqMoD+U6+mZ7XgUUwpT7lAb3K6iO
zz5myx80AbTFihZh7gtb75h3C4iTh/yYyKP3zr8ur+DFVQ0hEu0SkEai7F+czX/y
VAf7YwKy0JNyhkvSny4BA+LTuxhrOv32IIQB2VDoKloc5vDiurMT6oflL6Sd2ivG
Vy0H/PnN9RLq3K2FcaSyrhbvLjltB0bg9w9/umddzOJzWCtQm65gYRy6xgM9CRI4
WY+e6uO6q2+JBs1fem6MbIIl0San35VCKGsugpzjnnCHPdzM+T+t0GGcnrh+9Bvw
QsdZN5v91f7gKv33IMKVM70d+5rdVzmqke8hw/bfGDG5H7Cy+WKt1fXk
-----END CERTIFICATE-----
Generated at Fri Jan 2 08:20:27 2026 by rpki-client