This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          GjJbKWqw+jQTqozL8l+C8d/rNPutI0WrdBU7NMsb8rc=
Subject key identifier:   60:47:8E:AE:9E:83:75:64:0E:B5:9A:8C:81:3D:9C:33:1B:87:37:D6
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0285
Signing time:             Thu 08 Jan 2026 04:12:20 +0000
Manifest this update:     Thu 08 Jan 2026 04:12:20 +0000
Manifest next update:     Sat 10 Jan 2026 04:12:20 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: tP85PdRqR2kEqPN2xzYUZgIRaoo+WU5SQkSpZPx01Wc=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Jan  8 04:12:20 2026 GMT
            Not After : Jan 10 04:12:20 2026 GMT
        Subject: CN=695f2ea4-bbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:01:94:cd:94:7e:1c:ab:23:56:04:bc:b0:
                    0b:de:58:74:a8:9d:65:17:32:e8:d9:db:58:2e:6c:
                    a6:80:bd:06:b2:9c:b5:2a:b6:0a:19:60:7e:55:40:
                    07:3c:b9:42:2e:7b:a4:40:c0:18:b7:7b:cb:f4:86:
                    92:73:ad:42:f8:8a:66:c9:ad:f7:51:2b:a7:6c:54:
                    1d:5b:7c:17:76:56:cb:b3:e3:2e:19:cd:a9:43:76:
                    70:fd:d8:ba:a2:81:85:49:49:bf:ce:61:54:1e:41:
                    6e:64:c4:1c:6e:a8:7a:55:c2:1c:4a:f0:f7:ac:a5:
                    e9:ca:23:a5:ed:53:94:c3:7e:2f:5d:3a:14:6a:01:
                    aa:77:46:4a:64:4d:45:4a:ab:b3:eb:0a:0f:06:87:
                    3a:e4:c3:e5:3d:7b:39:19:15:b3:e4:88:46:65:9b:
                    8a:aa:c3:cd:58:b2:38:4f:a9:55:4a:f2:4f:cb:46:
                    74:d0:70:ca:45:a0:63:f9:1a:46:3b:42:cf:a1:d7:
                    fa:b8:a4:2e:38:79:a6:dc:b0:02:37:4a:ba:b0:2f:
                    1b:b1:09:4d:c6:1e:49:31:7e:79:1b:c1:59:16:8c:
                    d0:21:47:db:52:c8:9b:ef:17:80:94:0e:92:57:49:
                    d3:d6:30:3b:1e:1b:3c:25:70:2e:1e:0e:09:92:a3:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:47:8E:AE:9E:83:75:64:0E:B5:9A:8C:81:3D:9C:33:1B:87:37:D6
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:7c:d3:66:5a:5b:f4:9b:12:07:91:9f:86:ff:14:fa:89:
         cf:46:73:97:b7:a3:46:41:6e:8d:03:a1:97:c4:ef:93:c4:88:
         26:14:a3:a4:3d:1e:96:43:1b:4b:74:02:6e:21:0d:8c:63:f8:
         41:05:af:18:0a:04:9d:aa:64:88:d4:3c:9b:3a:73:a0:73:77:
         23:e1:93:cf:53:25:bc:ef:af:39:81:7f:c0:ef:6f:64:b4:02:
         e6:ec:e0:7a:04:ab:be:e0:f0:97:4a:03:43:f4:f8:65:15:37:
         0e:3f:df:17:02:aa:27:7e:4c:93:00:13:58:29:57:1a:33:4e:
         9d:d5:26:d0:49:b1:c4:69:82:4b:97:fb:2a:ac:db:2a:6a:8e:
         90:02:30:67:85:42:79:9a:a8:11:a6:04:4c:cf:16:d1:44:d3:
         17:ef:9e:e5:ff:41:b8:0e:1b:b0:ad:ba:3b:b4:37:4f:19:c5:
         bc:0b:df:de:fc:9e:83:30:53:14:4c:f0:4c:53:0c:56:51:4d:
         e1:d7:a0:d5:a0:af:b4:b6:8d:c1:6f:ec:19:4b:8a:15:e6:94:
         5f:8c:b8:e8:16:70:df:23:49:dc:fe:2c:5d:18:59:83:57:c9:
         d9:d3:23:c8:33:d1:f3:17:9f:e1:0d:87:d4:d0:1d:d4:3f:0c:
         e2:84:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:08:22 2026 by rpki-client