This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File:                     4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier:          0FXGGNH1k5LgVrahta4d7HB25cPXed/B6iNWoX9fXso=
Subject key identifier:   4C:0F:8E:66:E0:AC:10:88:5B:18:29:4A:AA:38:AD:55:04:2D:7F:6D
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer:       /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial:       03C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number:          03C9
Signing time:             Tue 13 Jan 2026 03:33:55 +0000
Manifest this update:     Tue 13 Jan 2026 03:33:55 +0000
Manifest next update:     Thu 15 Jan 2026 03:33:55 +0000
Files and hashes:         1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: LzzMaAo723gTKVxNbOFwfI/W+Y8HYlkZ6ZbqDHInCPc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Jan 2026 00:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
        Validity
            Not Before: Jan 13 03:33:55 2026 GMT
            Not After : Jan 15 03:33:55 2026 GMT
        Subject: CN=6965bd23-1c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:ec:90:fd:5b:6a:2a:d6:15:ac:81:70:de:
                    03:5f:df:73:ab:e7:b2:e7:6a:55:a5:2c:a8:7f:4b:
                    6b:15:d9:de:e1:bf:46:87:61:81:6a:34:76:bd:dc:
                    93:06:5f:b5:7c:af:8d:4d:a0:a1:f5:e5:74:fc:de:
                    8d:eb:f4:c3:2b:aa:01:40:75:30:43:f2:86:ed:10:
                    a9:96:1b:59:30:18:07:4f:dd:18:cb:d0:ce:dd:86:
                    0d:43:08:c8:63:5c:b3:36:79:74:a6:74:b2:32:32:
                    a7:31:39:60:2c:b4:98:48:2e:77:42:36:9b:70:c6:
                    4e:4d:ad:82:f8:b3:81:2d:aa:48:60:a8:85:2c:aa:
                    9d:7e:00:85:97:0b:bc:7c:58:50:eb:59:ba:f6:e5:
                    df:1c:aa:3d:a4:9f:da:f1:19:ef:38:5c:6e:a0:4d:
                    e2:ec:a4:22:9b:30:3e:6b:43:84:aa:38:ab:d4:de:
                    6a:2e:d9:61:4b:6c:f2:9d:2a:ab:61:af:fa:08:4b:
                    aa:65:5b:16:8f:5b:69:3c:ca:48:52:62:4c:d2:c0:
                    e3:07:2d:e0:0f:ab:0e:ea:17:bd:08:ca:48:50:2e:
                    4d:67:90:49:9e:8c:ce:71:02:8f:1c:49:b4:56:a3:
                    61:79:13:31:ca:18:7a:fc:b6:d5:92:4c:68:a3:26:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:8E:66:E0:AC:10:88:5B:18:29:4A:AA:38:AD:55:04:2D:7F:6D
            X509v3 Authority Key Identifier:
                keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:ec:6e:c8:f7:18:ec:c7:82:96:ce:70:a5:7b:bb:6e:d8:
         48:a7:26:7e:98:26:c3:24:04:fe:13:17:48:5f:45:73:34:54:
         a0:b4:ad:88:c8:47:80:4c:96:b4:77:8b:13:52:cd:51:4c:64:
         c4:ad:fd:b9:ab:e9:3f:fd:39:9b:29:f4:d6:d5:61:b5:31:82:
         ce:e0:b1:19:f6:5c:ee:4e:4a:8c:57:3b:cc:b4:ca:84:ce:0e:
         cb:65:6b:ac:10:df:10:45:dd:ed:52:01:00:d9:2a:e5:d6:9f:
         54:1d:92:25:df:0d:88:99:77:2f:0a:9b:14:0d:4d:40:39:5c:
         09:38:75:05:1c:36:3c:8c:99:ca:56:5a:31:1d:81:76:ea:53:
         b9:1a:54:22:40:6c:4d:31:34:02:23:bd:8d:50:fc:4a:02:e5:
         95:6f:78:79:9f:80:78:cc:13:a0:21:3a:8a:23:40:40:08:f8:
         1c:e3:ef:a5:27:dc:5a:42:95:ac:2a:4e:a1:d0:e8:20:70:c1:
         6d:d1:3b:bd:9a:f2:ed:b3:69:63:41:8c:fd:ea:72:08:bd:98:
         5e:d2:10:e2:48:ab:ec:5d:74:5d:19:60:a9:63:ef:7b:f2:9d:
         95:d5:96:d0:1d:77:e9:fe:66:2b:82:6b:2a:7d:04:7d:b8:66:
         99:c3:4d:3a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTkyQjRBRjExMC8GA1UEBRMoRTJDMTE3ODIzQjcyNzdCRDJCQURFRkIyQjU3N0M2
Q0Y5Qzc2NEQ4RTAeFw0yNjAxMTMwMzMzNTVaFw0yNjAxMTUwMzMzNTVaMBgxFjAU
BgNVBAMTDTY5NjViZDIzLTFjNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+guyQ/VtqKtYVrIFw3gNf33Or57LnalWlLKh/S2sV2d7hv0aHYYFqNHa9
3JMGX7V8r41NoKH15XT83o3r9MMrqgFAdTBD8obtEKmWG1kwGAdP3RjL0M7dhg1D
CMhjXLM2eXSmdLIyMqcxOWAstJhILndCNptwxk5NrYL4s4EtqkhgqIUsqp1+AIWX
C7x8WFDrWbr25d8cqj2kn9rxGe84XG6gTeLspCKbMD5rQ4SqOKvU3mou2WFLbPKd
Kqthr/oIS6plWxaPW2k8ykhSYkzSwOMHLeAPqw7qF70IykhQLk1nkEmejM5xAo8c
SbRWo2F5EzHKGHr8ttWSTGijJqRpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTA+O
ZuCsEIhbGClKqjitVQQtf20wHwYDVR0jBBgwFoAU4sEXgjtyd70rre+ytXfGz5x2
TY4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5MkI0L0JFM0Y4OUUyMEMyQjExRUVBM0E1MDE2QzRBRDlFNkZDLzRzRVhn
anR5ZDcwcnJlLXl0WGZHejV4MlRZNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRzRVhnanR5ZDcwcnJlLXl0WGZHejV4MlRZNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTkyQjQvQkUzRjg5RTIwQzJCMTFFRUEzQTUwMTZDNEFE
OUU2RkMvNHNFWGdqdHlkNzBycmUteXRYZkd6NXgyVFk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ++xuyPcY7MeCls5wpXu7bthIpyZ+
mCbDJAT+ExdIX0VzNFSgtK2IyEeATJa0d4sTUs1RTGTErf25q+k//TmbKfTW1WG1
MYLO4LEZ9lzuTkqMVzvMtMqEzg7LZWusEN8QRd3tUgEA2Srl1p9UHZIl3w2ImXcv
CpsUDU1AOVwJOHUFHDY8jJnKVloxHYF26lO5GlQiQGxNMTQCI72NUPxKAuWVb3h5
n4B4zBOgITqKI0BACPgc4++lJ9xaQpWsKk6h0OggcMFt0Tu9mvLts2ljQYz96nII
vZhe0hDiSKvsXXRdGWCpY+978p2V1ZbQHXfp/mYrgmsqfQR9uGaZw006
-----END CERTIFICATE-----
Generated at Tue Jan 13 07:23:56 2026 by rpki-client