This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json) Hash identifier: 6JiRUPbZZ6rFpMQxOt9RWVPE6zNGyuAwBubH3xXr6q0= Subject key identifier: FA:D2:40:37:B7:85:CE:71:E6:DF:08:AD:95:BB:E6:EB:53:6E:46:28 Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E Certificate serial: 04D0 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft Manifest number: 04CC Signing time: Mon 08 Dec 2025 02:59:04 +0000 Manifest this update: Mon 08 Dec 2025 02:59:03 +0000 Manifest next update: Wed 10 Dec 2025 02:59:03 +0000 Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: sMnoOxclgWXfOnb1+gdFI2tN4d/Tz2dlgJ2CuIOl90M=) 2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=) 3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E Validity Not Before: Dec 8 02:59:03 2025 GMT Not After : Dec 10 02:59:03 2025 GMT Subject: CN=69363ef7-2eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:8b:11:29:ea:be:6e:e9:59:22:df:7e:df: d1:b9:ea:cd:01:40:a0:73:ad:19:6a:2e:1d:0e:16: 00:04:e7:d3:66:55:b2:13:30:b2:10:b0:0b:74:41: 85:5e:f1:76:7c:34:49:43:96:a2:85:a8:8d:43:39: af:87:12:3a:ef:68:a8:7b:fb:6c:84:29:67:45:3e: 03:1b:80:1d:5b:22:d2:56:fd:f4:9b:99:e0:ab:09: 99:3d:d9:0a:cb:d6:5f:d0:bb:44:6a:7c:77:18:0c: b6:c0:79:74:2c:f7:b5:8d:d0:f3:3c:03:eb:21:c0: 16:c6:5a:1a:c9:94:12:1c:f2:4c:1d:32:f6:84:d3: 6d:fb:fd:ec:53:bb:54:f0:4e:cb:c7:47:ee:b0:98: 53:24:a8:ee:cc:bb:ef:f9:4c:b8:8a:6d:0a:74:cf: b1:08:57:9d:87:57:e9:37:2a:e8:f4:62:9e:65:33: e0:2c:f4:a9:3e:db:58:de:1a:03:ce:66:5a:9a:3a: 2f:e0:74:dc:bb:da:92:28:e4:cd:68:c0:84:08:9d: 18:a8:e8:ec:d5:52:ff:85:40:29:32:d8:a1:6d:31: da:85:13:13:50:45:c1:f0:4b:02:d8:19:af:72:22: e0:02:fe:6d:ce:16:ef:22:99:c2:89:a0:a0:ec:49: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D2:40:37:B7:85:CE:71:E6:DF:08:AD:95:BB:E6:EB:53:6E:46:28 X509v3 Authority Key Identifier: keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a6:47:20:2f:fa:b5:15:41:92:c8:77:38:74:8d:f8:89:95: 92:54:d8:3f:a0:d0:d0:70:12:f8:16:84:7c:1c:1a:5d:a5:ac: 6e:f7:f5:ac:a6:d4:3b:4a:5c:ac:b8:0f:f1:a6:ca:db:98:6a: 19:92:62:2e:85:c1:9d:4f:79:f4:48:3e:a0:d0:b6:c2:98:70: 84:90:fc:47:b2:19:f3:8e:b3:64:53:8d:cd:57:85:e5:75:ae: 20:0a:21:e9:ad:05:82:5b:c4:ed:4d:21:f5:c9:16:55:ff:d5: 14:f7:d1:3a:c7:4c:a2:7c:87:fe:84:94:07:53:72:27:29:f9: a4:2c:8a:6c:72:e7:3e:70:53:e4:a4:14:64:a8:bf:a0:21:40: bd:60:ca:53:04:e6:27:52:da:7a:7d:e4:13:4c:bb:26:ce:79: b6:c8:49:09:aa:0a:dc:0d:95:f9:d3:3e:f9:cb:88:fb:56:6b: 55:81:18:e8:30:d2:a6:a9:37:db:e4:5b:e8:c6:0c:b4:5a:f9: b4:56:94:d5:42:66:0d:5b:94:d7:f8:eb:b9:ae:07:71:b0:8a: 22:f1:53:30:29:1d:1e:bb:39:25:16:c0:c3:f9:9d:c2:15:1c: b9:95:b5:62:2d:73:0a:6e:7b:e5:03:8a:b0:85:73:6d:e2:59: 7c:31:5a:e9 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDdGRjBBRjExMC8GA1UEBRMoOTIwNDQxMkExRjEyQkNENUQyQjNDRTM5OTFBQ0VG Njk3NkM4ODY1RTAeFw0yNTEyMDgwMjU5MDNaFw0yNTEyMTAwMjU5MDNaMBgxFjAU BgNVBAMTDTY5MzYzZWY3LTJlY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCzlosRKeq+bulZIt9+39G56s0BQKBzrRlqLh0OFgAE59NmVbITMLIQsAt0 QYVe8XZ8NElDlqKFqI1DOa+HEjrvaKh7+2yEKWdFPgMbgB1bItJW/fSbmeCrCZk9 2QrL1l/Qu0RqfHcYDLbAeXQs97WN0PM8A+shwBbGWhrJlBIc8kwdMvaE0237/exT u1TwTsvHR+6wmFMkqO7Mu+/5TLiKbQp0z7EIV52HV+k3Kuj0Yp5lM+As9Kk+21je GgPOZlqaOi/gdNy72pIo5M1owIQInRio6OzVUv+FQCky2KFtMdqFExNQRcHwSwLY Ga9yIuAC/m3OFu8imcKJoKDsSXLzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+tJA N7eFznHm3witlbvm61NuRigwHwYDVR0jBBgwFoAUkgRBKh8SvNXSs845kazvaXbI hl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3RkYwL0EyOEFDMTBBMzJBOTExRURBNEU1QzlEQ0YxMjIyNDY4L2tnUkJL aDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2tnUkJLaDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDdGRjAvQTI4QUMxMEEzMkE5MTFFREE0RTVDOURDRjEy MjI0Njgva2dSQktoOFN2TlhTczg0NWthenZhWGJJaGw0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVpkcgL/q1FUGSyHc4dI34iZWSVNg/ oNDQcBL4FoR8HBpdpaxu9/WsptQ7SlysuA/xpsrbmGoZkmIuhcGdT3n0SD6g0LbC mHCEkPxHshnzjrNkU43NV4Xlda4gCiHprQWCW8TtTSH1yRZV/9UU99E6x0yifIf+ hJQHU3InKfmkLIpscuc+cFPkpBRkqL+gIUC9YMpTBOYnUtp6feQTTLsmznm2yEkJ qgrcDZX50z75y4j7VmtVgRjoMNKmqTfb5Fvoxgy0Wvm0VpTVQmYNW5TX+Ou5rgdx sIoi8VMwKR0euzklFsDD+Z3CFRy5lbViLXMKbnvlA4qwhXNt4ll8MVrp -----END CERTIFICATE-----Generated at Mon Dec 8 17:05:14 2025 by rpki-client