This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          9c/n5evuJdHpiHTymb3LUbLCJBQUgcSCzXsXw0AMCQg=
Subject key identifier:   A9:01:9F:F7:B0:2E:F1:32:15:D2:E6:B0:B0:59:3F:93:50:E5:0C:6A
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0E14
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0E11
Signing time:             Mon 12 Jan 2026 01:02:28 +0000
Manifest this update:     Mon 12 Jan 2026 01:02:27 +0000
Manifest next update:     Wed 14 Jan 2026 01:02:27 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: QHpDJaWCc7ViBHYdayTeO+xfkE+CL9fq56Ug2PwYry4=)
                          2: EA4F7EFAD9A811F08C56B58CDAE4EC9C.roa (hash: KJfS72R5iuz5xs0eftrag9nUHdu8fHWjhJvFlKIOLa0=)
                          3: 2A59319ED9A911F084AC988EDAE4EC9C.roa (hash: ZE/AMuFDnqEMdF+m9bTrDEG8cxJJ5piRwX5injKhwic=)
                          4: 099F7328D9A911F096B18E8EDAE4EC9C.roa (hash: vKz4MwaF+U/JBZIu/j/X4SY3DZu7/0WQLVi3O6PdX+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3604 (0xe14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Jan 12 01:02:27 2026 GMT
            Not After : Jan 14 01:02:27 2026 GMT
        Subject: CN=69644824-b71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:42:bd:33:eb:57:0c:7b:c6:8e:08:a7:85:
                    9c:7a:bb:14:a3:48:ad:13:be:a4:08:ad:81:a3:23:
                    c8:77:79:5d:85:00:6d:27:05:56:73:f4:1a:e3:59:
                    ea:86:34:4d:d6:a7:55:88:4f:ac:42:42:75:dd:cc:
                    51:7a:52:c6:e5:1c:f2:55:63:9d:ea:5a:c8:f6:1e:
                    c9:a9:20:4d:91:24:66:44:a3:17:e3:ca:2a:8f:b3:
                    4c:94:b7:e1:e7:dc:72:28:19:a0:d8:7b:87:0b:fc:
                    e9:32:71:3d:9a:94:d1:e1:a7:bc:01:44:ce:3c:be:
                    59:18:99:6a:5b:34:0c:60:5b:aa:5e:69:ec:34:5c:
                    05:02:62:5c:27:f0:4f:1e:60:fa:23:04:bb:36:a8:
                    37:16:a3:25:56:99:40:f7:d2:58:e1:00:a9:dd:34:
                    0b:97:c8:94:00:c0:13:36:f2:79:d9:b5:af:f0:54:
                    b8:b1:9c:3c:6d:49:c8:38:10:8a:33:4b:d9:c5:c6:
                    39:1d:33:16:e7:6e:5d:e3:18:94:6d:0a:ed:cc:16:
                    01:8d:8d:73:76:c4:59:23:ed:94:29:56:3d:cf:3c:
                    29:ad:35:36:3a:a4:9a:c8:f6:7b:08:9b:0d:b7:39:
                    8b:8a:36:b0:5e:bb:63:97:c1:59:9a:59:fa:cc:77:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:01:9F:F7:B0:2E:F1:32:15:D2:E6:B0:B0:59:3F:93:50:E5:0C:6A
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:df:9c:c5:02:45:b6:29:be:80:de:bc:52:5f:00:e3:3d:42:
         38:4d:dd:de:c8:a9:ca:77:87:89:87:b8:a3:f8:74:b6:5c:f5:
         de:cb:75:65:ad:8e:e0:48:05:4c:1f:4c:15:2a:09:f1:9b:dc:
         ab:df:36:0e:da:70:d2:26:5c:97:57:5e:8b:4b:48:52:0d:e3:
         e9:f6:f3:5e:1a:62:66:20:82:3c:64:f4:9a:f0:0f:45:9a:de:
         4d:6b:d4:3e:b1:11:79:2b:cc:dc:68:e1:4f:10:e2:9e:3c:1b:
         24:d6:69:83:7b:23:b0:73:53:7e:4c:a0:66:e7:bf:17:a9:f6:
         73:d7:6a:fc:1b:6c:44:79:a9:c1:4a:ab:17:52:53:c3:00:6e:
         08:20:ed:5f:5e:50:62:86:72:3b:e0:57:24:a9:5d:59:c3:42:
         17:cd:70:40:13:4d:a0:1e:8a:2c:f7:96:0b:4b:00:71:7c:d0:
         9e:83:4d:94:15:d8:e9:e5:f3:80:d1:66:f1:5d:58:65:d8:c9:
         e3:be:18:a9:b5:74:a3:44:c8:2c:84:25:fe:ac:16:64:ed:69:
         dc:34:5b:3e:5b:cc:b6:51:14:16:d7:0c:7d:b3:4c:38:05:ce:
         9d:ca:b9:2b:15:90:2f:a1:49:98:68:13:56:c8:b3:b0:ac:bf:
         b6:e9:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:51:31 2026 by rpki-client