This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft File: CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json) Hash identifier: JLSMiLuTwyRnzL0cg0jB70FcWOtr1RrsJDhZ3AMuIEk= Subject key identifier: 68:53:C7:5F:6A:45:C8:F6:28:37:6B:7F:5A:45:17:4D:13:EF:7A:07 Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A Certificate issuer: /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A Certificate serial: 020C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft Manifest number: 0209 Signing time: Mon 08 Dec 2025 04:22:54 +0000 Manifest this update: Mon 08 Dec 2025 04:22:53 +0000 Manifest next update: Wed 10 Dec 2025 04:22:53 +0000 Files and hashes: 1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: Aeq928sg87VQLQl1ItSRWzYzi62ZrFNiKbmkd5tuJnQ=) 2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=) 3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=) 4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A Validity Not Before: Dec 8 04:22:53 2025 GMT Not After : Dec 10 04:22:53 2025 GMT Subject: CN=6936529e-f184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:3d:de:eb:72:73:fd:93:1b:bb:bf:fb:f8: 54:7a:f2:33:e3:1e:2e:4e:34:8e:2e:5c:99:33:db: 4b:51:2c:ad:e2:81:e7:38:95:2c:cd:29:8c:35:77: 3f:ba:63:62:b2:11:78:95:e4:7c:0e:5c:10:9c:83: cb:cc:ed:90:67:aa:f1:92:8a:a4:a4:5d:5d:72:8c: 5f:89:ff:92:87:6f:6b:6a:c9:67:81:a1:0d:1a:72: 8c:73:5d:5d:b5:d6:1e:7d:a5:85:f2:55:26:fa:9b: 3b:2b:0e:16:73:58:ec:e1:bb:76:25:df:59:a9:6b: 2a:b7:4d:f4:b4:1f:22:9d:0b:74:8d:8b:70:ac:39: 09:5c:e2:24:fe:2a:07:1a:e4:41:c9:d1:49:b3:0a: 23:53:26:8e:d6:bd:67:95:ed:cd:01:31:92:a0:2b: d6:de:19:4f:a9:4f:3b:06:11:a6:a1:a3:20:e1:4a: 86:01:eb:b2:59:e9:67:02:89:c1:66:0d:dc:73:d1: c2:2b:df:8b:22:24:cf:c6:ca:cd:2d:5e:97:57:11: 3e:34:4c:87:46:ab:45:95:7b:7f:43:3a:01:89:37: 59:e3:67:1d:e4:2f:fe:56:60:98:64:17:b8:39:44: 7b:ac:5d:a2:ca:0a:8e:80:14:8b:35:77:09:d3:30: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:53:C7:5F:6A:45:C8:F6:28:37:6B:7F:5A:45:17:4D:13:EF:7A:07 X509v3 Authority Key Identifier: keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d3:ea:9a:67:a6:a5:72:b9:82:50:af:83:34:a0:11:47:81: a9:96:cf:08:7c:b2:37:f9:02:1b:e9:8f:a0:9b:84:87:21:4d: 0a:16:1e:87:dc:3e:2b:59:18:6d:13:7e:85:59:ff:f9:2b:1e: 01:7d:32:72:26:28:1a:02:ef:7a:a0:5e:b3:ee:a2:79:5a:4f: 38:f3:96:14:3b:14:42:4f:40:6b:8e:5b:74:2b:c2:4b:9a:07: 98:89:a3:10:91:18:d9:a1:bb:aa:80:5b:0b:91:33:ec:f9:d6: ad:96:d6:a4:29:40:ec:4c:29:aa:f8:24:ca:a1:58:c5:40:9b: d6:d1:97:c2:66:27:66:21:f9:8b:fe:67:38:4d:a4:21:a0:cf: e6:7f:ef:35:1a:9e:79:66:34:68:1b:44:b8:f0:9f:55:8d:8c: 29:05:b7:8b:44:2b:8c:a6:8e:d4:fa:06:b2:5c:49:eb:b5:96: 94:c4:98:61:c7:0d:2e:f1:6a:b2:6f:7b:2c:9b:51:e1:09:15: 79:24:a3:e0:bc:ca:66:bf:d1:f8:13:9c:7c:f2:74:71:3c:a9: 83:f3:34:2d:13:ee:bb:06:58:be:6e:11:1e:ee:54:f7:c9:dd: de:a2:5b:2f:28:49:38:9a:88:cb:32:e0:0f:97:52:6f:65:bf: 8c:7a:87:96 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTlDMkRBRjExMC8GA1UEBRMoMEFCODJBNDk4MTYwN0Q5QjMzNjlEQzc3NkRCMDg3 M0RBMEQ3NUI0QTAeFw0yNTEyMDgwNDIyNTNaFw0yNTEyMTAwNDIyNTNaMBgxFjAU BgNVBAMTDTY5MzY1MjllLWYxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCgXT3e63Jz/ZMbu7/7+FR68jPjHi5ONI4uXJkz20tRLK3igec4lSzNKYw1 dz+6Y2KyEXiV5HwOXBCcg8vM7ZBnqvGSiqSkXV1yjF+J/5KHb2tqyWeBoQ0acoxz XV211h59pYXyVSb6mzsrDhZzWOzhu3Yl31mpayq3TfS0HyKdC3SNi3CsOQlc4iT+ Kgca5EHJ0UmzCiNTJo7WvWeV7c0BMZKgK9beGU+pTzsGEaahoyDhSoYB67JZ6WcC icFmDdxz0cIr34siJM/Gys0tXpdXET40TIdGq0WVe39DOgGJN1njZx3kL/5WYJhk F7g5RHusXaLKCo6AFIs1dwnTMEENAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaFPH X2pFyPYoN2t/WkUXTRPvegcwHwYDVR0jBBgwFoAUCrgqSYFgfZszadx3bbCHPaDX W0owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE5QzJEL0EzODAwQkFFNDgyMDExRUZCODI2QjU0MTc2MkU5NTFBL0NyZ3FT WUZnZlpzemFkeDNiYkNIUGFEWFcwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NyZ3FTWUZnZlpzemFkeDNiYkNIUGFEWFcwby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTlDMkQvQTM4MDBCQUU0ODIwMTFFRkI4MjZCNTQxNzYy RTk1MUEvQ3JncVNZRmdmWnN6YWR4M2JiQ0hQYURYVzBvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCE0+qaZ6alcrmCUK+DNKARR4Gpls8I fLI3+QIb6Y+gm4SHIU0KFh6H3D4rWRhtE36FWf/5Kx4BfTJyJigaAu96oF6z7qJ5 Wk8485YUOxRCT0Brjlt0K8JLmgeYiaMQkRjZobuqgFsLkTPs+datltakKUDsTCmq +CTKoVjFQJvW0ZfCZidmIfmL/mc4TaQhoM/mf+81Gp55ZjRoG0S48J9VjYwpBbeL RCuMpo7U+gayXEnrtZaUxJhhxw0u8Wqyb3ssm1HhCRV5JKPgvMpmv9H4E5x88nRx PKmD8zQtE+67Bli+bhEe7lT3yd3eolsvKEk4mojLMuAPl1JvZb+MeoeW -----END CERTIFICATE-----Generated at Mon Dec 8 17:06:41 2025 by rpki-client