This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier: FP1TTw9p6YV0BcxpXNOfjTgChHPRLb6+vrSuUIVJbdk=
Subject key identifier: 4F:04:06:03:C4:A0:76:01:4F:2C:D6:31:FB:8F:AE:F3:0E:9E:52:C2
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0F08
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number: 0EFC
Signing time: Sun 07 Dec 2025 00:57:10 +0000
Manifest this update: Sun 07 Dec 2025 00:57:09 +0000
Manifest next update: Tue 09 Dec 2025 00:57:09 +0000
Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: XGf/V3+ZjrSROGu8SEj1X06sFMqVKmKIoDq1I/Qzr6U=)
2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Dec 2025 00:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3848 (0xf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Dec 7 00:57:09 2025 GMT
Not After : Dec 9 00:57:09 2025 GMT
Subject: CN=6934d0e5-c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:aa:c9:3a:05:0e:34:d9:0d:f0:ba:36:b2:
01:d3:bc:17:22:f3:66:f7:48:b1:9b:e5:78:42:0d:
19:2c:98:96:35:fb:76:a5:d7:6c:12:a7:a1:79:9f:
0c:f3:88:9b:fc:af:72:7d:39:87:6d:5e:0f:42:fe:
62:1b:f7:dc:86:fd:e2:ac:a7:c0:4e:bd:0f:88:2a:
2d:06:5b:fd:47:7a:d8:d5:04:61:17:8f:3b:20:f4:
97:2a:96:6f:e2:7c:5a:e6:e7:92:ec:15:fc:3a:5e:
e3:37:d5:d0:90:de:97:05:6f:2c:6f:74:47:64:8c:
1c:26:ed:1f:8b:7a:2a:be:19:ed:fb:5e:e4:61:b8:
32:c8:45:fb:e6:90:c0:47:97:e8:7c:ee:08:6f:63:
d6:a9:8c:7b:bd:90:21:45:86:88:e6:d5:e1:9d:28:
38:bb:8a:c5:c3:2e:2d:6b:e8:95:1a:93:a4:fd:68:
11:46:9e:cc:c3:a1:b1:b6:e3:3d:fc:2f:d1:1e:96:
49:e1:cb:5a:18:ff:1c:56:48:9d:b4:f4:5a:8f:f9:
17:98:00:1c:5e:7a:0a:09:db:52:a6:d4:bf:91:96:
38:d1:f7:3e:d5:5b:a7:7d:b8:a8:93:69:2f:8b:3f:
60:fa:ea:40:77:84:d4:cb:e6:a8:ef:ae:43:17:a9:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:06:03:C4:A0:76:01:4F:2C:D6:31:FB:8F:AE:F3:0E:9E:52:C2
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:74:b3:f8:4f:95:e3:f5:3b:36:51:b9:10:f9:89:62:77:1e:
27:3f:43:4a:c8:4a:47:91:ef:e3:98:19:ed:fb:e6:af:c0:9d:
4d:be:52:7f:57:bf:a4:ff:63:96:c1:3b:fb:fa:f2:9c:06:1d:
00:12:51:47:e1:da:30:05:63:a6:fa:41:a4:d7:1a:e5:29:05:
26:da:8a:49:55:38:56:7c:9b:7c:dc:0a:0c:30:6f:a6:14:90:
1e:bd:bd:6c:f9:e4:c0:46:ba:a6:5e:01:14:95:8f:f8:01:9f:
12:30:43:e2:2b:cc:5d:d2:96:36:a2:5a:8c:87:02:e1:9f:10:
7a:71:97:33:f1:d1:60:85:fb:b6:57:49:cf:e6:46:fa:5c:59:
ad:a1:1e:78:86:b2:f7:7a:1d:4c:8f:d4:5f:a1:e7:ec:04:ca:
f3:a4:f7:55:61:18:95:57:bf:7d:c1:bd:bd:fb:8b:15:08:97:
f1:6b:99:b1:5b:53:65:5f:0a:3f:96:03:1e:de:71:62:ac:f0:
d5:19:b9:7f:0e:a3:57:af:4d:c8:81:95:bf:95:89:04:01:27:
b6:04:a0:99:d5:9d:8e:8d:e2:70:dc:53:cb:29:82:46:28:60:
93:17:22:28:04:c2:49:10:32:1b:0b:1f:e3:db:2e:25:01:6e:
0d:60:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 02:10:30 2025 by rpki-client