This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
File:                     uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft (raw, json)
Hash identifier:          Y2JUtkf4pYL3rNj03aJBNsO429exEdZmps3yhf3vxvU=
Subject key identifier:   E8:32:0A:90:C2:03:C8:5E:4B:C1:26:FD:AC:7A:91:DE:97:1E:DD:42
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Certificate issuer:       /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial:       0328
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
Manifest number:          031D
Signing time:             Wed 31 Dec 2025 03:58:06 +0000
Manifest this update:     Wed 31 Dec 2025 03:58:06 +0000
Manifest next update:     Fri 02 Jan 2026 03:58:06 +0000
Files and hashes:         1: uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl (hash: TG5mKLrEYj1UCGVthvw3dGxJgEfei6ro8IOkgKq+4Z4=)
                          2: 1B6ECF12963411F094C170B5DAE4EC9C.roa (hash: fkvprPgx2NCjxUTzaYs2bjq8VWQ7gVUNH+w2V0QutVU=)
                          3: 41353ABCC22111EEB2919A95775412E6.roa (hash: oXcQymFlE/krOOEr4NVVaSaifs3aMH0vQz8dpJbk6Hw=)
                          4: 8E74FB4879B211EF8A6E278A762E951A.roa (hash: HVgCoNFWTE1lwq+yr47vjP6O5PwPrCMNfBORofraa3A=)
                          5: 431E183C79EE11EFAA7EEE76762E951A.roa (hash: 7aSukpXTBzkjxwef0CwTrreS0uSqRQoE76LmOrIjIRE=)
                          6: 59BC8CC8704211EF9670AC4C762E951A.roa (hash: YHGbrYfTK/XykaZGHLmnPu2OovDDz4Wf7WXTsS/BDLI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 03:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686B65AF, serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
        Validity
            Not Before: Dec 31 03:58:06 2025 GMT
            Not After : Jan  2 03:58:06 2026 GMT
        Subject: CN=69549f4e-b2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:a4:3e:4f:5f:81:4a:6e:92:94:13:75:e3:
                    66:01:6d:03:2e:e7:60:6f:2d:a0:5d:18:05:e6:8c:
                    9a:f8:bf:ec:04:c1:5b:ae:c8:8f:15:35:73:6e:c4:
                    b0:7a:46:4b:ca:7d:0e:e9:78:48:b2:a1:04:ac:58:
                    a3:20:f9:93:7f:30:ae:fc:d2:69:33:f7:b5:2f:d6:
                    b5:f1:73:31:da:6d:fe:7f:21:db:33:60:9e:0f:6b:
                    19:45:c6:d5:95:db:d6:0c:6f:56:9d:94:03:0e:83:
                    4f:3d:b3:e4:ac:3b:8b:40:59:97:0c:50:5f:87:5d:
                    35:6d:77:e4:d9:19:14:d6:0b:00:e4:a1:b0:95:87:
                    4c:6e:93:b5:63:c4:fa:73:ae:de:db:1d:62:76:b3:
                    65:d8:61:41:26:18:29:31:1d:4d:e1:2f:f8:96:e9:
                    ca:cb:db:d1:86:6a:7c:6a:e5:10:c8:ca:6f:bc:24:
                    e1:1d:30:af:b9:40:9e:1c:f7:04:c5:f7:e0:a4:83:
                    17:c8:5b:ab:11:2e:31:2d:6a:8c:45:19:c6:df:2a:
                    7d:25:74:17:15:42:0f:46:ca:0d:0f:71:9f:5e:54:
                    fd:42:08:4a:87:ff:46:5f:99:44:ff:96:3f:53:b8:
                    94:32:55:6d:1a:a1:e2:7f:c2:8d:9d:32:7a:18:8c:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:32:0A:90:C2:03:C8:5E:4B:C1:26:FD:AC:7A:91:DE:97:1E:DD:42
            X509v3 Authority Key Identifier:
                keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9f:0b:1b:20:42:58:76:ae:7b:b9:d8:cc:ed:0f:f1:89:27:
         5d:b6:fe:f8:a6:b9:9e:fb:a3:46:45:25:7b:90:0b:c7:e0:f3:
         2c:ba:97:57:3c:0b:fd:64:ba:19:35:97:fe:2f:fa:c4:7e:73:
         22:48:8f:08:55:01:18:40:c4:c8:cf:16:9f:0c:cd:73:94:ab:
         05:57:e3:22:f0:8d:27:27:e0:0b:15:c8:ed:c4:9c:fa:1c:70:
         6c:0e:1c:01:67:1d:b0:a6:42:66:de:42:e3:5c:e6:ff:79:b0:
         06:c2:5f:2f:20:50:e0:44:b6:3e:c2:e8:1f:61:3c:11:eb:73:
         ce:01:f0:4d:55:84:f3:d3:8a:21:d9:d7:a3:2c:bb:10:d7:9d:
         43:5d:0a:8a:0b:79:ef:00:8e:79:8d:e8:3e:5a:06:05:e2:7e:
         e1:b9:53:44:39:88:9b:5d:5b:8c:8e:b0:34:02:1a:af:bc:a7:
         2f:f9:ce:98:6b:1f:9f:4a:fd:58:30:a7:99:de:3b:54:86:1e:
         51:32:99:43:b1:60:2d:91:29:17:1a:14:7e:bc:a7:8b:09:a0:
         47:89:bc:13:24:4a:ab:99:0b:84:ea:17:eb:97:c3:29:17:99:
         e3:99:0b:88:21:e7:13:a9:bf:3b:e7:eb:c2:46:07:10:dc:bc:
         b6:1b:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 09:08:23 2026 by rpki-client