This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          KV+Q3/jWSk1kL8pIvdg3TonnxIxF4fmJqp4t5RsCOjQ=
Subject key identifier:   01:76:11:B1:48:86:85:57:4F:D6:89:50:04:27:41:64:95:76:74:13
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       0501
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          04FA
Signing time:             Sun 11 Jan 2026 02:59:27 +0000
Manifest this update:     Sun 11 Jan 2026 02:59:27 +0000
Manifest next update:     Tue 13 Jan 2026 02:59:27 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: YAegty9/NNiPdgvlZDAtHx03EkyqQccceMtwZZVSvKA=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 02:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Jan 11 02:59:27 2026 GMT
            Not After : Jan 13 02:59:27 2026 GMT
        Subject: CN=6963120f-8252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:1d:34:43:b2:59:6e:fd:af:e7:2b:58:2e:
                    97:dc:9a:08:e1:22:3b:9e:d2:5f:e8:35:e4:96:8b:
                    d9:85:3f:8a:ad:99:23:1a:24:24:c6:c9:1b:b0:06:
                    dd:47:e3:a9:a2:ae:a9:59:fa:f5:2e:62:f6:b7:1b:
                    89:a8:99:7c:45:9c:45:b5:61:09:dc:09:77:89:f3:
                    da:b7:35:70:12:5a:99:bd:54:a9:ab:1c:30:5f:5f:
                    60:1f:1f:71:2f:c9:85:4c:0c:7e:71:6f:9b:1a:24:
                    a5:c8:fa:d4:b1:42:94:ae:90:0a:3c:0f:b4:9d:7c:
                    b5:10:14:99:8b:ca:7d:d2:00:72:30:f9:af:79:1d:
                    f6:bd:06:76:c8:2c:d6:98:37:97:7b:74:dd:70:19:
                    80:6d:2f:07:bf:aa:80:9f:ff:c9:93:c0:d1:a7:fb:
                    4b:8e:d8:14:97:e1:28:63:ce:19:72:27:13:35:39:
                    86:be:e4:3a:ec:4f:25:bb:6e:64:90:6d:52:43:c5:
                    6d:d7:cb:0e:69:ed:82:2a:f9:ec:6a:81:5a:6d:eb:
                    ad:df:52:45:e6:7d:85:1e:f0:08:c8:09:0f:98:41:
                    82:ae:27:38:26:29:84:67:b1:54:95:46:66:a1:08:
                    55:fe:5c:0a:8c:a9:f6:98:a2:a8:27:4d:3a:0b:5f:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:11:B1:48:86:85:57:4F:D6:89:50:04:27:41:64:95:76:74:13
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:82:39:41:17:4f:6b:2e:e5:82:76:2b:6e:8b:bb:50:fa:
         2b:bc:ce:17:55:a4:fb:46:e6:fa:0d:df:b9:f9:8a:4e:f5:29:
         60:40:78:18:35:d5:14:45:78:95:ad:80:1a:fd:df:05:66:77:
         8f:28:cc:31:cf:54:9e:52:ab:ad:eb:7d:ac:7a:fd:49:04:06:
         2e:e4:ae:f3:81:fc:de:5b:ae:bf:a1:2e:3b:63:34:12:f2:01:
         b2:0b:cf:1b:2d:25:3c:6f:26:cb:b0:79:73:76:a5:c1:53:16:
         40:2a:26:00:76:ec:1b:81:d4:bb:68:db:af:93:e2:61:ef:8f:
         ee:40:db:97:87:b3:d8:57:0d:83:91:d9:d2:fd:b6:0a:06:0d:
         a1:09:26:2f:2b:d7:d0:aa:76:10:8b:a2:3d:93:6b:25:b3:20:
         12:47:00:96:ad:bd:ef:38:63:cd:ec:84:fc:38:c7:ba:50:5e:
         d6:c0:df:28:72:3b:6e:94:a0:c4:0f:f3:ac:f3:66:ac:39:98:
         3c:7f:f3:4b:56:73:6d:05:c9:a5:cf:5f:ca:7a:88:98:e7:da:
         3c:82:45:21:0e:b3:cc:47:05:a8:33:69:39:70:ec:a4:32:ba:
         19:69:bf:b8:bb:fc:9a:43:2b:d3:3e:bf:01:22:33:56:ae:3a:
         27:48:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:57:23 2026 by rpki-client