This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
File:                     NewylCgvp6NUePgvkJSwP-Jgb7Y.mft (raw, json)
Hash identifier:          uoY+66hOp6nZmZf1C2aJLewZrsPp3cuDfIvdNqkCd5Q=
Subject key identifier:   4F:4A:26:2A:E1:C5:37:02:21:66:94:99:BC:10:79:08:39:45:88:23
Authority key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
Certificate issuer:       /CN=F36AB1CDAF/serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
Certificate serial:       086F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
Manifest number:          0869
Signing time:             Wed 07 Jan 2026 01:45:19 +0000
Manifest this update:     Wed 07 Jan 2026 01:45:18 +0000
Manifest next update:     Fri 09 Jan 2026 01:45:18 +0000
Files and hashes:         1: NewylCgvp6NUePgvkJSwP-Jgb7Y.crl (hash: jdz1vniHwsJvBjitM4zd0Kk5MhHaajcHauScT+nmejg=)
                          2: 274D32BAA87211F0A513AFDCDAE4EC9C.roa (hash: dMmC61qu86t31B1siiWb387Uypaf5odQkXtxFjVGQaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Jan 2026 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB1CDAF, serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
        Validity
            Not Before: Jan  7 01:45:18 2026 GMT
            Not After : Jan  9 01:45:18 2026 GMT
        Subject: CN=695dbaae-eb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:41:51:15:0e:0e:76:7a:21:57:32:0f:10:
                    31:2c:f9:28:47:31:cc:61:2d:24:6b:78:34:37:c4:
                    fd:34:96:7b:ae:32:40:ed:08:01:cf:c8:70:46:44:
                    62:5a:9e:14:5b:e3:09:01:5f:fe:a4:cf:50:0d:45:
                    f6:38:29:05:40:e6:21:6b:59:5d:fd:67:23:4a:48:
                    2c:bc:b0:80:c8:fa:75:d0:96:58:5a:d7:18:1c:fa:
                    d7:5c:18:eb:9a:67:06:d8:a4:8b:c5:c2:8f:5c:1d:
                    a6:31:06:8a:49:cd:32:e4:46:ce:98:f6:f5:cd:93:
                    a0:0b:da:45:3c:7c:8e:53:8e:0a:9d:77:4e:ea:88:
                    20:11:2f:3f:ea:d8:67:97:8a:6a:4f:36:51:36:e0:
                    44:69:12:70:7b:dc:60:2f:2e:39:db:cd:14:f9:b6:
                    39:17:5b:21:12:18:15:e3:a1:39:ef:ce:bf:6f:1f:
                    4c:8c:dc:08:ed:35:9b:10:68:ca:fb:83:5f:7f:0d:
                    f2:0b:40:4d:23:60:32:92:93:60:6d:64:cd:1a:24:
                    33:24:54:88:8f:c0:b1:d5:cc:bd:7e:70:02:ba:36:
                    1c:ca:52:74:a8:32:1e:b7:d5:54:6d:19:c1:4d:57:
                    27:7b:9d:59:48:b7:10:9e:ea:23:97:c1:09:fc:90:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4A:26:2A:E1:C5:37:02:21:66:94:99:BC:10:79:08:39:45:88:23
            X509v3 Authority Key Identifier:
                keyid:35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a5:6b:7c:4f:d4:27:19:53:4e:3a:3b:5a:ac:a2:27:e3:58:
         0f:22:00:6f:08:ba:13:8d:9e:9e:37:e4:d9:f2:86:26:71:a2:
         df:ad:a2:d5:3f:3f:95:b1:b8:86:a3:3c:52:fe:8d:e4:92:aa:
         61:bb:34:d4:d0:e5:07:04:1a:5d:2e:f2:d9:3f:71:51:f4:39:
         7d:8b:d3:a9:20:05:37:cc:84:52:fe:2e:95:f9:ad:87:ee:b7:
         44:74:65:24:56:2e:8e:f8:0c:43:53:65:a8:c0:f4:0d:2f:06:
         6a:bf:2a:1b:90:63:68:e3:66:56:40:04:e0:b2:81:3c:8c:33:
         19:33:63:5b:9f:c5:ec:f2:fc:10:82:3b:82:9d:e5:3b:8b:62:
         75:0f:06:f2:4a:86:d7:fa:f3:b3:cd:d1:3f:e5:4e:7d:61:e8:
         3a:59:fd:51:ed:39:98:37:33:39:67:62:29:7a:6d:b2:8f:f4:
         fd:e4:db:9a:dd:37:bc:e2:8c:21:ad:e3:8c:bc:91:bc:bb:0f:
         8c:15:c8:84:00:c9:26:09:ee:6c:cc:87:0d:f5:8a:ca:c1:b8:
         f1:2f:c2:05:30:90:41:34:7d:6e:84:58:e6:10:b5:2d:ed:dc:
         45:26:d8:c7:ee:a6:4d:36:07:63:a9:0a:cd:d2:57:33:c9:8f:
         0c:04:35:ba
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUIxQ0RBRjExMC8GA1UEBRMoMzVFQzMyOTQyODJGQTdBMzU0NzhGODJGOTA5NEIw
M0ZFMjYwNkZCNjAeFw0yNjAxMDcwMTQ1MThaFw0yNjAxMDkwMTQ1MThaMBgxFjAU
BgNVBAMTDTY5NWRiYWFlLWViOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCy80FRFQ4OdnohVzIPEDEs+ShHMcxhLSRreDQ3xP00lnuuMkDtCAHPyHBG
RGJanhRb4wkBX/6kz1ANRfY4KQVA5iFrWV39ZyNKSCy8sIDI+nXQllha1xgc+tdc
GOuaZwbYpIvFwo9cHaYxBopJzTLkRs6Y9vXNk6AL2kU8fI5Tjgqdd07qiCARLz/q
2GeXimpPNlE24ERpEnB73GAvLjnbzRT5tjkXWyESGBXjoTnvzr9vH0yM3AjtNZsQ
aMr7g19/DfILQE0jYDKSk2BtZM0aJDMkVIiPwLHVzL1+cAK6NhzKUnSoMh631VRt
GcFNVyd7nVlItxCe6iOXwQn8kElTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUT0om
KuHFNwIhZpSZvBB5CDlFiCMwHwYDVR0jBBgwFoAUNewylCgvp6NUePgvkJSwP+Jg
b7YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFCMUNELzlENDlCOTI2ODFCQzExRUE5MkQ4NDg1RUY4QUVBMjI4L05ld3ls
Q2d2cDZOVWVQZ3ZrSlN3UC1KZ2I3WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05ld3lsQ2d2cDZOVWVQZ3ZrSlN3UC1KZ2I3WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUIxQ0QvOUQ0OUI5MjY4MUJDMTFFQTkyRDg0ODVFRjhB
RUEyMjgvTmV3eWxDZ3ZwNk5VZVBndmtKU3dQLUpnYjdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqpWt8T9QnGVNOOjtarKIn41gPIgBv
CLoTjZ6eN+TZ8oYmcaLfraLVPz+VsbiGozxS/o3kkqphuzTU0OUHBBpdLvLZP3FR
9Dl9i9OpIAU3zIRS/i6V+a2H7rdEdGUkVi6O+AxDU2WowPQNLwZqvyobkGNo42ZW
QATgsoE8jDMZM2Nbn8Xs8vwQgjuCneU7i2J1DwbySobX+vOzzdE/5U59Yeg6Wf1R
7TmYNzM5Z2Ipem2yj/T95Nua3Te84owhreOMvJG8uw+MFciEAMkmCe5szIcN9YrK
wbjxL8IFMJBBNH1uhFjmELUt7dxFJtjH7qZNNgdjqQrN0lczyY8MBDW6
-----END CERTIFICATE-----
Generated at Wed Jan 7 22:16:50 2026 by rpki-client