This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          gliiF1KMMGWwKJAM3NoXVr90OLM2T3p5/DLA/U8zzB8=
Subject key identifier:   21:33:26:5A:95:64:72:5C:FE:E4:59:2D:B2:3F:24:60:DE:61:42:1A
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       0617
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          0616
Signing time:             Sun 11 Jan 2026 02:32:59 +0000
Manifest this update:     Sun 11 Jan 2026 02:32:58 +0000
Manifest next update:     Tue 13 Jan 2026 02:32:58 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: AeljQtaejRPJH9a0tQ0DAO2++u6fmz03ZqXYcTHEB4w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF, serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Validity
            Not Before: Jan 11 02:32:58 2026 GMT
            Not After : Jan 13 02:32:58 2026 GMT
        Subject: CN=69630bdb-62e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:ec:83:64:33:71:41:86:8e:04:b7:25:41:
                    fe:55:e6:8e:80:65:57:1e:14:1b:d3:d2:bd:35:4c:
                    81:1e:15:98:93:2a:20:e3:e7:61:ea:08:83:c5:dc:
                    1b:75:9a:be:2f:57:12:c6:be:2e:0e:e0:8b:48:9f:
                    65:d1:f5:80:62:a6:01:08:56:53:8c:1d:a9:dd:b3:
                    74:13:f0:79:f9:26:6f:84:04:bc:4e:03:de:30:8a:
                    32:24:28:8b:d7:c8:15:49:66:36:9d:21:ab:a7:a1:
                    93:91:cc:31:fc:cf:0a:12:8a:96:27:38:5f:84:a9:
                    8d:a3:ff:41:22:1e:ab:41:04:9d:67:20:a3:df:19:
                    bd:66:4a:37:f1:f9:fa:a3:1e:94:ee:05:ed:0f:fb:
                    f5:2a:ad:4f:ff:7b:dd:0e:28:f5:f1:83:40:4d:07:
                    52:e9:b7:a6:e8:fc:cc:59:e3:72:41:78:f8:24:39:
                    06:9c:ac:b1:e1:53:6c:ec:dc:95:4d:b7:f9:9c:30:
                    82:64:42:9e:a8:eb:a9:dc:9a:ce:d0:0b:28:89:90:
                    c0:17:1b:0a:43:e6:d5:f2:7c:ba:85:21:72:36:42:
                    9a:77:92:2d:97:bf:31:d6:71:2f:f8:3a:62:0c:cf:
                    06:86:a5:35:0f:af:3c:b5:64:b9:62:70:58:c8:08:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:26:5A:95:64:72:5C:FE:E4:59:2D:B2:3F:24:60:DE:61:42:1A
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ed:02:f1:56:eb:18:26:ef:66:c2:1e:da:74:06:5f:03:5b:
         87:f3:bc:d6:d5:6c:fc:64:bf:69:61:d1:ad:fd:24:a1:1c:f8:
         dc:25:e3:87:d4:fe:1c:e6:68:1e:f0:0c:73:66:5c:24:02:e5:
         46:08:cc:e0:8e:e3:86:24:47:0d:f5:14:46:a9:ba:4a:dc:aa:
         e4:71:da:99:77:18:71:37:63:e9:e3:8c:39:1d:18:d0:0f:9b:
         01:a3:a8:8c:b8:05:db:0d:7d:b6:c3:e1:58:58:11:cd:8b:b0:
         cd:44:f9:ec:41:7b:c0:12:c6:56:78:6d:db:42:f6:00:a8:db:
         d3:3d:48:eb:da:b5:63:cc:48:84:0c:59:d4:0d:6a:f0:2a:35:
         ab:e2:73:b1:78:29:5f:82:76:c6:53:d5:af:75:bd:24:68:5b:
         94:8d:d0:84:0b:cd:d0:f9:4a:c7:c9:2e:a8:c3:63:8b:99:97:
         e4:e6:77:bd:b9:61:98:e6:82:d0:f0:5e:0a:45:12:d0:f7:de:
         a9:12:93:8b:9f:1c:a8:e4:5c:79:93:95:f4:c0:df:53:9a:5e:
         fa:56:17:00:62:7e:a1:07:c1:38:31:15:2c:18:06:f4:e4:6c:
         84:33:46:9a:f8:ce:2d:e4:aa:96:9e:2f:3f:9f:f5:4a:09:0d:
         4b:82:f9:3a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzlDQjhBRjExMC8GA1UEBRMoM0IwODg5MTA1N0NFOEEyNzY4MTEwNDA1OTVDQ0FB
QzQwOERGNTFBNjAeFw0yNjAxMTEwMjMyNThaFw0yNjAxMTMwMjMyNThaMBgxFjAU
BgNVBAMTDTY5NjMwYmRiLTYyZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6lOyDZDNxQYaOBLclQf5V5o6AZVceFBvT0r01TIEeFZiTKiDj52HqCIPF
3Bt1mr4vVxLGvi4O4ItIn2XR9YBipgEIVlOMHands3QT8Hn5Jm+EBLxOA94wijIk
KIvXyBVJZjadIaunoZORzDH8zwoSipYnOF+EqY2j/0EiHqtBBJ1nIKPfGb1mSjfx
+fqjHpTuBe0P+/UqrU//e90OKPXxg0BNB1Lpt6bo/MxZ43JBePgkOQacrLHhU2zs
3JVNt/mcMIJkQp6o66ncms7QCyiJkMAXGwpD5tXyfLqFIXI2Qpp3ki2XvzHWcS/4
OmIMzwaGpTUPrzy1ZLlicFjICLoxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUITMm
WpVkclz+5Fktsj8kYN5hQhowHwYDVR0jBBgwFoAUOwiJEFfOiidoEQQFlcyqxAjf
UaYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5Q0I4L0JFMjJDOEM2NDVFODExRUNCRTk2NzcxOUQ4QTAxNENFL093aUpF
RmZPaWlkb0VRUUZsY3lxeEFqZlVhWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL093aUpFRmZPaWlkb0VRUUZsY3lxeEFqZlVhWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzlDQjgvQkUyMkM4QzY0NUU4MTFFQ0JFOTY3NzE5RDhB
MDE0Q0UvT3dpSkVGZk9paWRvRVFRRmxjeXF4QWpmVWFZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCq7QLxVusYJu9mwh7adAZfA1uH87zW
1Wz8ZL9pYdGt/SShHPjcJeOH1P4c5mge8AxzZlwkAuVGCMzgjuOGJEcN9RRGqbpK
3KrkcdqZdxhxN2Pp44w5HRjQD5sBo6iMuAXbDX22w+FYWBHNi7DNRPnsQXvAEsZW
eG3bQvYAqNvTPUjr2rVjzEiEDFnUDWrwKjWr4nOxeClfgnbGU9Wvdb0kaFuUjdCE
C83Q+UrHyS6ow2OLmZfk5ne9uWGY5oLQ8F4KRRLQ996pEpOLnxyo5Fx5k5X0wN9T
ml76VhcAYn6hB8E4MRUsGAb05GyEM0aa+M4t5KqWni8/n/VKCQ1Lgvk6
-----END CERTIFICATE-----
Generated at Sun Jan 11 14:54:13 2026 by rpki-client