This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
File:                     9oCEVKFPM27F0FtEVliFDrv9ZWU.mft (raw, json)
Hash identifier:          +u+qQ+NDchv5NoVcUd2s5tsmbp1YEB2vH0vmPklyz/I=
Subject key identifier:   6A:D2:A0:FD:07:E9:7B:9C:1C:40:A7:68:04:23:42:ED:0C:2A:32:60
Authority key identifier: F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65
Certificate issuer:       /CN=F36ADFB8AF/serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
Certificate serial:       068D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
Manifest number:          068B
Signing time:             Thu 01 Jan 2026 04:11:19 +0000
Manifest this update:     Thu 01 Jan 2026 04:11:18 +0000
Manifest next update:     Sat 03 Jan 2026 04:11:18 +0000
Files and hashes:         1: 9oCEVKFPM27F0FtEVliFDrv9ZWU.crl (hash: 6pgUtDMKreu4cACHb9gsL5etFDyLLSltsPqf5ZsBnqg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Jan 2026 04:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ADFB8AF, serialNumber=F6808454A14F336EC5D05B445658850EBBFD6565
        Validity
            Not Before: Jan  1 04:11:18 2026 GMT
            Not After : Jan  3 04:11:18 2026 GMT
        Subject: CN=6955f3e7-53b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:55:d1:ae:d9:15:52:53:59:29:2a:1b:29:
                    63:20:05:df:91:0f:d4:02:6a:a2:8d:3d:13:09:19:
                    8b:b6:b4:fc:78:47:80:82:9e:7c:24:04:37:d9:32:
                    1f:c5:2b:ac:13:e0:a0:0b:36:2c:50:59:03:17:38:
                    13:4d:1c:03:b9:95:c6:dc:1b:01:26:e2:44:f7:2f:
                    55:a8:05:3c:4d:9e:2b:fc:a7:70:ca:19:43:ed:cf:
                    b6:a1:1f:7c:9c:08:83:4d:10:5d:14:70:43:ca:0b:
                    5d:ae:11:5e:39:fd:7c:e6:c3:4b:e4:90:cb:65:e4:
                    91:8f:1c:04:fb:a9:5e:a7:41:38:64:46:ab:4c:23:
                    8f:af:9c:32:fb:5e:03:44:29:6c:c4:b7:9c:5c:36:
                    ee:b9:66:f9:1e:ce:bb:86:a2:05:59:88:63:90:af:
                    d9:62:37:24:05:b3:da:82:ee:86:42:9d:10:ab:81:
                    22:3e:a9:07:2a:77:ce:40:42:62:33:2c:a7:cd:91:
                    60:cf:77:d7:c8:38:65:66:25:99:6d:d7:96:fe:a3:
                    bd:fe:b1:9b:f9:eb:66:69:50:b0:2d:36:a7:21:28:
                    97:c1:bc:5f:f4:07:6d:ee:df:78:c4:ec:dc:79:d2:
                    fd:66:b5:5c:49:7e:0f:65:7e:dd:23:b7:ea:6d:72:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D2:A0:FD:07:E9:7B:9C:1C:40:A7:68:04:23:42:ED:0C:2A:32:60
            X509v3 Authority Key Identifier:
                keyid:F6:80:84:54:A1:4F:33:6E:C5:D0:5B:44:56:58:85:0E:BB:FD:65:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9oCEVKFPM27F0FtEVliFDrv9ZWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADFB8/17B4B1A8E95D11EB87F37562D8A014CE/9oCEVKFPM27F0FtEVliFDrv9ZWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:b2:8e:9c:f5:d1:12:dd:77:ae:e5:b8:71:8a:39:a7:6d:
         62:43:91:e5:98:37:ca:6f:d3:d3:1c:16:f2:c4:c7:59:cb:d5:
         e9:45:27:7f:1e:6a:4f:ff:94:c5:e8:d6:03:af:23:c3:33:45:
         75:11:2b:5b:7f:26:64:53:cd:a7:8a:0a:b4:1b:f6:2f:c7:cd:
         02:dc:cd:53:4e:9d:34:25:e4:c5:4b:14:58:a3:84:58:53:f9:
         d6:ed:61:58:dc:43:54:10:a1:bf:1a:cf:dd:26:06:4c:99:93:
         f0:7a:fe:09:b9:62:ee:b5:32:15:5b:15:cf:4e:33:f3:3c:23:
         7e:1d:a8:cf:04:b3:96:ca:ff:38:2c:48:fb:66:eb:f8:28:26:
         7d:24:dc:12:4f:b4:2d:59:c1:95:d4:ba:18:76:18:12:b8:4b:
         06:bc:ba:e8:f6:b3:13:30:7d:fa:c9:71:a1:af:b4:42:39:2e:
         bf:65:8e:4f:56:ae:e4:2e:25:aa:5f:f2:a9:29:08:b8:d9:9f:
         d1:4e:04:71:39:4b:20:6a:44:61:65:14:97:0c:fd:af:3b:02:
         55:77:43:93:61:9e:38:e1:28:a4:7a:95:65:27:c4:af:c9:ff:
         34:bc:70:34:5f:e5:7c:d7:52:c8:55:c4:f8:9d:a3:59:75:3f:
         ea:1e:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:04:54 2026 by rpki-client