This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File:                     ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier:          SqMEG7O0ee4OqCeQ+0RJWzm9QAJtIWQ+HKTnu2P6+YA=
Subject key identifier:   07:7F:57:22:19:BD:D5:AE:0D:AC:C7:FF:FA:98:8A:7D:C0:19:B3:DC
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer:       /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial:       0795
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number:          0795
Signing time:             Thu 01 Jan 2026 03:26:31 +0000
Manifest this update:     Thu 01 Jan 2026 03:26:30 +0000
Manifest next update:     Sat 03 Jan 2026 03:26:30 +0000
Files and hashes:         1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: 7xnFPt20fpeAiEBvSqPUmj4QXRzf1+bNXViWCKNZoGY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Jan 2026 03:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
        Validity
            Not Before: Jan  1 03:26:30 2026 GMT
            Not After : Jan  3 03:26:30 2026 GMT
        Subject: CN=6955e967-6ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:52:a8:5e:de:98:40:f5:cc:ce:19:ad:77:
                    3b:30:7e:16:3d:12:bc:52:da:93:3a:0b:4b:a6:6e:
                    cf:e9:60:07:96:fc:a4:53:ba:26:39:da:6a:d4:c9:
                    93:e2:ce:39:81:be:c8:b0:eb:84:c7:ab:50:e9:f1:
                    c5:58:0a:f4:e4:1d:21:e5:c0:ad:f5:73:cb:75:d4:
                    25:e6:13:69:7c:b6:ce:8b:00:69:14:d5:53:17:06:
                    d5:b6:c6:5d:18:3f:99:61:43:3e:1c:91:78:cd:90:
                    cd:26:d2:90:f6:83:20:f4:08:66:61:6f:3f:1e:a9:
                    93:fc:6a:00:69:2f:9a:3e:f0:cb:ba:b7:dc:d0:e1:
                    b9:00:e4:27:f3:70:f0:40:53:25:95:07:a2:f3:e3:
                    a1:24:0d:3a:44:45:cf:52:e3:29:cd:ca:5f:2b:5a:
                    ca:dd:49:f5:90:4e:56:36:3e:98:16:da:9f:54:88:
                    52:c2:09:41:4b:9f:c0:75:2d:d4:d1:1c:3f:d3:94:
                    84:9a:2e:df:49:87:e8:d3:ff:43:22:c2:67:9f:dd:
                    e7:23:f3:44:23:4f:ad:29:a4:59:91:53:04:0a:87:
                    56:d5:c6:5f:32:67:5a:13:a4:14:f1:34:53:e6:45:
                    e7:03:72:fa:32:7b:f0:6f:28:13:3e:22:14:3b:a4:
                    4c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:57:22:19:BD:D5:AE:0D:AC:C7:FF:FA:98:8A:7D:C0:19:B3:DC
            X509v3 Authority Key Identifier:
                keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0f:74:a0:49:88:d4:48:c1:58:c8:53:71:b3:61:89:10:ed:
         30:b9:c6:0e:35:9f:ee:7b:13:b8:dd:52:76:88:26:c0:f6:26:
         f5:6d:0f:ab:cb:78:b0:cf:51:cc:a4:62:df:a9:34:f9:f4:dc:
         09:7a:ce:63:29:67:2e:c2:d9:86:5a:e8:bd:3f:2b:96:af:64:
         0b:a8:1a:a2:1c:a7:37:43:0b:4b:b8:29:f2:8c:eb:c1:b5:8b:
         2c:90:15:00:a0:e7:06:46:f6:91:c6:b6:df:b2:73:05:55:52:
         f8:91:a4:ed:b6:9f:df:b8:18:59:27:ea:64:82:31:f3:ac:e9:
         63:fa:eb:4b:fe:43:22:ca:12:ec:05:65:96:17:11:f9:da:56:
         94:11:a5:7c:84:3a:14:33:25:11:a8:93:91:c4:61:14:99:7c:
         16:be:a1:8b:0e:23:44:bb:24:f7:16:f0:b9:a3:d0:13:47:6a:
         93:50:75:35:86:1b:9b:98:47:d9:15:03:14:ff:44:83:47:e8:
         44:5e:f1:c7:29:76:ef:f2:50:a3:dd:c5:3f:2f:6f:22:17:36:
         b7:f2:40:29:7b:04:33:65:9f:21:fe:87:fb:65:f8:32:a4:27:
         5e:c4:f5:dd:76:a4:5b:d4:f9:e8:05:94:98:cf:73:dd:0d:3c:
         a6:33:25:1c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTk5MURBRjExMC8GA1UEBRMoNkEyRDM2RTg3N0Q3MjUyNkM0NEY2RTAwNEZBRjM0
Rjk5MDRGMjMxMTAeFw0yNjAxMDEwMzI2MzBaFw0yNjAxMDMwMzI2MzBaMBgxFjAU
BgNVBAMTDTY5NTVlOTY3LTZmZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDccFKoXt6YQPXMzhmtdzswfhY9ErxS2pM6C0umbs/pYAeW/KRTuiY52mrU
yZPizjmBvsiw64THq1Dp8cVYCvTkHSHlwK31c8t11CXmE2l8ts6LAGkU1VMXBtW2
xl0YP5lhQz4ckXjNkM0m0pD2gyD0CGZhbz8eqZP8agBpL5o+8Mu6t9zQ4bkA5Cfz
cPBAUyWVB6Lz46EkDTpERc9S4ynNyl8rWsrdSfWQTlY2PpgW2p9UiFLCCUFLn8B1
LdTRHD/TlISaLt9Jh+jT/0Miwmef3ecj80QjT60ppFmRUwQKh1bVxl8yZ1oTpBTx
NFPmRecDcvoye/BvKBM+IhQ7pEwxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUB39X
Ihm91a4NrMf/+piKfcAZs9wwHwYDVR0jBBgwFoAUai026HfXJSbET24AT680+ZBP
IxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE5OTFELzgxOUE3RjI0MTlGMzExRUJCMkEyODMwOEY4QUVBMjI4L2FpMDI2
SGZYSlNiRVQyNEFUNjgwLVpCUEl4RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FpMDI2SGZYSlNiRVQyNEFUNjgwLVpCUEl4RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTk5MUQvODE5QTdGMjQxOUYzMTFFQkIyQTI4MzA4RjhB
RUEyMjgvYWkwMjZIZlhKU2JFVDI0QVQ2ODAtWkJQSXhFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMD3SgSYjUSMFYyFNxs2GJEO0wucYO
NZ/uexO43VJ2iCbA9ib1bQ+ry3iwz1HMpGLfqTT59NwJes5jKWcuwtmGWui9PyuW
r2QLqBqiHKc3QwtLuCnyjOvBtYsskBUAoOcGRvaRxrbfsnMFVVL4kaTttp/fuBhZ
J+pkgjHzrOlj+utL/kMiyhLsBWWWFxH52laUEaV8hDoUMyURqJORxGEUmXwWvqGL
DiNEuyT3FvC5o9ATR2qTUHU1hhubmEfZFQMU/0SDR+hEXvHHKXbv8lCj3cU/L28i
Fza38kApewQzZZ8h/of7ZfgypCdexPXddqRb1PnoBZSYz3PdDTymMyUc
-----END CERTIFICATE-----
Generated at Thu Jan 1 14:27:12 2026 by rpki-client