This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
File:                     3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft (raw, json)
Hash identifier:          /JpRE7V334LxtLVFkg7vIAJWj3oJjpl6YbH2Y1iHUAA=
Subject key identifier:   5A:CF:40:B6:2F:FE:C9:26:07:01:40:71:8B:1D:3E:84:E7:C3:29:D5
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Certificate issuer:       /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial:       0675
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
Manifest number:          065A
Signing time:             Fri 02 Jan 2026 02:43:21 +0000
Manifest this update:     Fri 02 Jan 2026 02:43:21 +0000
Manifest next update:     Sun 04 Jan 2026 02:43:20 +0000
Files and hashes:         1: 3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl (hash: CMbmkRx658rX8JND34JqPk1k3pp7L1jUJVt+Cb0ZMVQ=)
                          2: C0B67590BC5311EEA497C07F775412E6.roa (hash: 91oXBpg4I1tftytyNzYw21bZjbkIw+S8V4YAG0kXWMc=)
                          3: 6F7B2D9CE6EB11EFAF676182762E951A.roa (hash: ywXo19J7zzDJozIEEmOFi9+A4iofR1mYhpmq35OcaZk=)
                          4: F3B29612C8E711EFAC3B3EA9762E951A.roa (hash: OETANewi1spwDI+wuFRp4Ft8bl6bEviyIyR18XaKaRE=)
                          5: 6A5D847ABD6111F0A69CE1BFDAE4EC9C.roa (hash: fHB735+tbv3iVDIq2ZhU4RWinWdYCJgEt4jlNj33RYU=)
                          6: 0EB8532CE6E611EFA1284861762E951A.roa (hash: +Ok9dLqiCTNEexkoRFgNd4UM629LDyyikx+fFXEssiA=)
                          7: CEBF9F2CBD9B11F0AACFB4A9DAE4EC9C.roa (hash: Y3SPEfa9FhnRnBcfIvNCeFJG2P0gudqhEmqdjsID6Jo=)
                          8: 5F5BD7A8C90511EF919C5060762E951A.roa (hash: CP9UE+jBOHX8oQ6s2JYHUVcCyElYEvB82K2Sr0b1faI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Jan 2026 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
        Validity
            Not Before: Jan  2 02:43:21 2026 GMT
            Not After : Jan  4 02:43:20 2026 GMT
        Subject: CN=695730c9-e930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:b9:7b:9a:21:12:c5:fb:1c:92:af:b2:5c:
                    fe:f7:0a:31:ef:98:c0:5e:63:43:ea:5b:33:2c:c3:
                    68:2f:07:88:6d:c3:fb:ea:6a:a1:a3:02:92:df:56:
                    5a:6e:2d:3b:21:93:75:42:d5:b3:68:b2:c4:57:22:
                    d6:25:a5:6a:38:19:89:eb:a1:7f:2c:5a:aa:e2:40:
                    c1:b4:92:cf:96:09:91:4e:96:cb:72:b7:39:f9:17:
                    f3:cb:2e:d6:9f:fc:73:b1:bc:d1:70:ad:c7:a1:7a:
                    d3:99:57:93:ce:20:a4:7e:04:f1:46:8d:68:7c:ea:
                    51:aa:35:70:c1:cf:ea:07:a2:13:22:c6:a2:da:6b:
                    c1:1d:bc:58:38:74:e1:18:2e:2a:c7:53:cc:75:91:
                    d5:ef:db:ee:9f:9a:35:d9:3a:73:fa:4a:7d:17:7e:
                    31:25:91:10:23:8f:19:5c:8a:45:68:08:63:ff:47:
                    cc:99:b3:f0:2c:51:23:ba:44:d3:f5:8a:37:9f:01:
                    54:20:e8:65:84:d0:69:5d:87:e8:eb:73:0b:6e:38:
                    7a:0e:4a:06:97:e1:2f:af:a5:f1:8c:a7:3b:c6:41:
                    26:90:5b:e8:25:0e:d3:8b:4a:23:ae:f0:70:ab:9b:
                    d9:64:49:1f:c9:2b:04:d8:7d:31:bc:de:d3:01:9b:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:40:B6:2F:FE:C9:26:07:01:40:71:8B:1D:3E:84:E7:C3:29:D5
            X509v3 Authority Key Identifier:
                keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:47:00:fe:6b:f0:63:9c:1c:3d:be:ba:ad:da:d4:cc:70:73:
         64:92:13:6c:7b:24:3d:58:c8:cc:4a:d8:1a:99:69:b7:d2:67:
         ad:8d:51:e7:ad:2c:96:2b:20:f9:90:0d:b8:7c:8f:b0:c2:e3:
         ad:49:ce:d9:f8:42:47:8e:bc:b2:7e:32:14:24:bb:1c:b9:31:
         47:1e:2a:ee:79:ed:39:5c:ad:32:d4:32:12:f4:f9:b1:5a:71:
         2a:9d:c2:4a:64:ab:f3:cb:7c:cf:cc:b1:e1:85:13:18:fe:99:
         db:24:d9:de:67:14:7c:b1:7e:82:6a:93:0e:13:5d:ac:2f:70:
         ad:83:1f:83:ba:04:7b:10:ee:9c:3c:7a:07:d2:7c:7c:69:8f:
         cd:a2:61:69:35:a5:18:dd:2d:b5:e2:c2:93:b7:88:c9:90:b2:
         a0:54:47:17:81:d0:a4:18:17:8d:8e:2c:b5:27:26:2d:97:56:
         80:d6:c4:26:ca:32:bf:c7:e0:e2:f4:3c:4a:f8:af:46:1c:82:
         09:31:6a:db:2d:b8:a8:94:7b:60:c0:82:bf:ac:7e:98:1d:4e:
         e2:4a:66:4f:c1:93:d1:8d:63:36:e9:36:4c:49:95:fe:ee:7e:
         39:cc:ed:9a:cc:a6:1a:0f:a7:3a:3a:2e:a9:6d:26:42:34:8a:
         84:a9:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:04:54 2026 by rpki-client