This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft File: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json) Hash identifier: AtArYM5bagoRM/f9XXJ7WGu1RBWVl3cDnIctDpnO3/w= Subject key identifier: 13:E2:85:79:51:18:F4:8A:03:87:87:23:64:9A:C7:9B:AC:72:A8:55 Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C Certificate serial: 0225 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft Manifest number: 021D Signing time: Mon 08 Dec 2025 04:20:02 +0000 Manifest this update: Mon 08 Dec 2025 04:20:01 +0000 Manifest next update: Wed 10 Dec 2025 04:20:01 +0000 Files and hashes: 1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: 3QFi/3Y2k2gUMzOWNoaka5P7lM0tlH2Nx8HRlKjCbdg=) 2: CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa (hash: gzKwOZ98jgnieBv/5nWznefopJ4KkE1g7Or0zMyAoZI=) 3: 83DC9676CDCD11F08E2794B7DAE4EC9C.roa (hash: 4Gl9Zow27JuQ8GOMSVeAJ+sgSeivkesNbYlt5t1Eo1A=) 4: 31C48A88CDCD11F0A70CB3B5DAE4EC9C.roa (hash: 443cxlKgy4pnPq2qfyUo04AC7frZpxKf8kr/vGjPde4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C Validity Not Before: Dec 8 04:20:01 2025 GMT Not After : Dec 10 04:20:01 2025 GMT Subject: CN=693651f2-e69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:72:45:d4:dd:86:61:75:6c:7d:ef:e5:9e:d1: ec:22:0f:bf:cf:3d:85:ef:32:c1:62:25:35:de:23: ab:40:71:a7:3b:88:3a:17:d4:62:11:f4:b6:c4:d3: e9:67:3d:fc:d5:51:17:de:24:f9:f0:4c:cc:1b:88: e0:44:83:5c:d3:7b:60:1f:f2:90:69:d3:46:f0:ac: d2:6a:14:38:7a:f7:28:99:c5:30:f3:e1:53:8a:81: c0:b1:2b:79:b3:0a:b4:13:45:26:e3:ee:f5:6e:6d: f9:1a:0b:03:54:20:69:c0:27:c4:6b:86:83:6e:40: 8c:9e:24:dd:26:c0:6b:ea:ea:00:8c:a4:80:43:44: dd:eb:da:da:21:2e:e7:99:79:4a:27:40:72:95:4a: bf:f8:61:ae:7d:cd:fc:4f:82:95:ff:4d:ef:79:ff: d1:18:77:71:94:99:0c:5d:5a:44:be:93:dc:ef:12: 8f:fa:9a:5c:ae:89:ee:89:a1:a9:db:56:88:6e:92: be:31:ce:32:a9:cf:b8:49:7d:ce:a3:0e:f7:ad:db: 45:e0:e4:f6:35:d5:02:51:0a:d2:8e:91:ba:df:d5: 00:af:92:67:a8:d3:c1:10:51:da:5b:6b:3b:04:4b: 8b:d1:ea:b2:80:f9:44:b3:c6:c9:36:b7:39:b1:dd: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E2:85:79:51:18:F4:8A:03:87:87:23:64:9A:C7:9B:AC:72:A8:55 X509v3 Authority Key Identifier: keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:76:b8:6c:c6:7e:82:c8:58:31:14:08:16:44:b6:bb:be:ff: 54:b5:a2:a3:83:f8:13:7d:a0:6c:41:4c:42:3d:e2:2e:90:5b: cc:c5:b5:d2:d8:94:e8:e7:01:8e:a7:ce:b6:ad:92:21:bc:6a: 2f:ab:30:f9:87:1c:f9:a5:86:36:17:82:a1:98:56:4c:32:d3: 49:9b:a4:59:93:7f:1b:28:b3:70:ce:9a:17:56:48:7b:f4:6a: 2b:32:a9:a9:3a:58:a6:3a:c5:c6:e0:f9:7c:d1:10:be:d5:06: 03:54:cc:d8:6f:0a:94:b0:3a:63:6b:37:30:7b:ed:1a:53:8a: cf:db:48:67:e0:09:3e:7c:94:06:56:ac:26:18:e4:64:3b:7e: 9b:d7:74:d0:20:fa:65:fd:50:38:d3:32:95:56:22:0f:06:9b: 5d:a4:78:54:37:f9:26:d6:c7:a3:23:1a:30:af:39:b4:1a:a4: 86:96:d0:27:34:dc:3b:02:f9:fb:3c:ba:e8:35:5a:24:ac:98: 3a:dc:e1:0f:12:9a:18:d2:16:ce:18:5d:f6:af:78:a9:9b:63: 48:cc:9b:e1:29:13:78:37:b2:c4:0c:1e:87:39:ba:2c:f8:ec: 72:6e:47:6a:46:72:16:d5:a3:34:2d:d1:85:0b:f8:35:b3:26: 9c:f7:ba:88 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MUI2NTBBRjExMC8GA1UEBRMoRDkyRDk3MTM3N0E0M0MyQURDMDAwNTMwQ0RBQjYw QjRCNjc2MEQxQzAeFw0yNTEyMDgwNDIwMDFaFw0yNTEyMTAwNDIwMDFaMBgxFjAU BgNVBAMTDTY5MzY1MWYyLWU2OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDcckXU3YZhdWx97+We0ewiD7/PPYXvMsFiJTXeI6tAcac7iDoX1GIR9LbE 0+lnPfzVURfeJPnwTMwbiOBEg1zTe2Af8pBp00bwrNJqFDh69yiZxTDz4VOKgcCx K3mzCrQTRSbj7vVubfkaCwNUIGnAJ8RrhoNuQIyeJN0mwGvq6gCMpIBDRN3r2toh LueZeUonQHKVSr/4Ya59zfxPgpX/Te95/9EYd3GUmQxdWkS+k9zvEo/6mlyuie6J oanbVohukr4xzjKpz7hJfc6jDvet20Xg5PY11QJRCtKOkbrf1QCvkmeo08EQUdpb azsES4vR6rKA+USzxsk2tzmx3SrDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUE+KF eVEY9IoDh4cjZJrHm6xyqFUwHwYDVR0jBBgwFoAU2S2XE3ekPCrcAAUwzatgtLZ2 DRwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjFCNjUwLzY4OTVCMEJFM0RFNjExRUY4MkVEODc5MDc2MkU5NTFBLzJTMlhF M2VrUENyY0FBVXd6YXRndExaMkRSdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzJTMlhFM2VrUENyY0FBVXd6YXRndExaMkRSdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MUI2NTAvNjg5NUIwQkUzREU2MTFFRjgyRUQ4NzkwNzYy RTk1MUEvMlMyWEUzZWtQQ3JjQUFVd3phdGd0TFoyRFJ3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGdrhsxn6CyFgxFAgWRLa7vv9UtaKj g/gTfaBsQUxCPeIukFvMxbXS2JTo5wGOp862rZIhvGovqzD5hxz5pYY2F4KhmFZM MtNJm6RZk38bKLNwzpoXVkh79GorMqmpOlimOsXG4Pl80RC+1QYDVMzYbwqUsDpj azcwe+0aU4rP20hn4Ak+fJQGVqwmGORkO36b13TQIPpl/VA40zKVViIPBptdpHhU N/km1sejIxowrzm0GqSGltAnNNw7Avn7PLroNVokrJg63OEPEpoY0hbOGF32r3ip m2NIzJvhKRN4N7LEDB6HObos+OxybkdqRnIW1aM0LdGFC/g1syac97qI -----END CERTIFICATE-----Generated at Mon Dec 8 17:27:09 2025 by rpki-client