This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft File: XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json) Hash identifier: Zc9OBYRbXKDAQ4lsb5KBLZdDbsDG7HEHEtrPUtbe7q8= Subject key identifier: 15:ED:D7:77:DA:0D:50:F5:86:19:46:76:13:AD:64:20:27:A0:08:55 Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3 Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3 Certificate serial: 03BE Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft Manifest number: 03B4 Signing time: Mon 08 Dec 2025 03:29:49 +0000 Manifest this update: Mon 08 Dec 2025 03:29:47 +0000 Manifest next update: Wed 10 Dec 2025 03:29:47 +0000 Files and hashes: 1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: wIiVO/khUGDEt/CUH4GvmZc5o6XdP6vG1YwXOaNx07Y=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3 Validity Not Before: Dec 8 03:29:47 2025 GMT Not After : Dec 10 03:29:47 2025 GMT Subject: CN=6936462c-7d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:44:4b:f1:63:0f:e9:da:c1:00:9e:b7:b3: d8:31:dd:52:01:c2:c7:95:9c:98:41:96:b5:67:de: 73:ca:51:4b:04:14:8e:62:7e:2c:ef:f3:88:99:11: 24:a5:c3:6f:13:65:e6:4f:c5:88:68:e6:8b:9a:e1: be:3c:b2:33:6b:c2:ca:f1:37:de:39:31:82:4c:c4: 76:3d:34:82:9c:a2:c9:a9:72:57:0f:33:dc:af:57: 2d:49:59:96:f9:c1:21:ba:80:30:78:8b:3c:35:b8: 5a:5f:b3:a7:12:55:e9:46:72:48:c7:a8:c5:23:97: 4f:02:97:5b:fb:3f:17:18:2f:2b:07:31:06:f3:7e: 94:59:cf:a8:d6:93:fa:3c:d3:65:01:7f:3b:16:b4: 28:32:81:c5:43:47:9d:4d:6f:5b:7e:9f:9e:21:92: b1:29:55:4d:6f:ce:64:88:99:22:e6:57:6c:5d:6f: ef:af:fa:29:a9:94:84:c1:67:e1:44:c1:57:4c:3f: d3:e0:c3:f7:7c:c7:b6:21:6f:1d:87:85:23:36:4a: c5:2d:63:e8:de:3d:5d:3e:dd:15:d7:de:a6:de:85: f4:43:fa:ef:a5:b3:33:c1:68:6c:95:a3:b3:08:c6: d8:c4:42:f6:45:c3:b5:d2:7a:54:9c:f0:f4:fb:73: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:ED:D7:77:DA:0D:50:F5:86:19:46:76:13:AD:64:20:27:A0:08:55 X509v3 Authority Key Identifier: keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:37:5d:28:81:9e:d7:28:95:e4:2c:8b:d7:e9:a7:19:4e:9d: f0:9e:53:67:94:60:50:e7:b8:2e:d1:bc:5f:27:64:0b:79:ea: d1:2b:98:f4:f7:11:aa:46:16:c1:c5:4e:cf:f2:26:89:f7:da: 3c:3e:bb:40:83:06:fc:61:57:5d:d5:e1:35:47:35:d5:77:0a: 20:64:30:23:db:b5:df:bb:65:94:3f:11:f1:ea:97:04:92:08: 05:f3:08:71:2b:cf:7c:53:a3:e7:7b:90:44:c4:ac:23:d1:43: 8c:99:f8:66:e7:60:29:a4:26:72:f6:7d:c7:87:b7:6f:be:70: fa:f0:30:25:55:4c:7a:1b:db:2d:b1:a7:a4:81:f5:0b:57:71: d5:71:d3:ba:ec:22:1f:e0:65:7c:0a:ca:be:66:43:b2:e5:ed: be:c6:aa:e4:9d:5b:97:0e:0d:3d:90:80:28:80:c0:ca:e3:1d: cd:42:61:3b:8b:14:ec:fa:cf:15:d1:9a:c6:1b:6d:08:49:5e: 36:b2:cf:1b:5e:24:b2:60:02:22:44:73:12:ad:c7:38:93:9d: 1f:82:a6:9a:4d:65:d4:36:d1:db:d2:13:c6:c5:0f:3d:fb:49: 69:ce:7b:b7:4e:07:46:f6:89:4e:4b:d8:93:d1:c2:61:79:a8: 4e:6b:6a:97 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA74wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QTQxQTBBRjExMC8GA1UEBRMoNUYyMjhDNDZCRUYyQjRDQkE5NENCMjlGMTBDMzY4 MEVFMjg4M0RCMzAeFw0yNTEyMDgwMzI5NDdaFw0yNTEyMTAwMzI5NDdaMBgxFjAU BgNVBAMTDTY5MzY0NjJjLTdkMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDQyURL8WMP6drBAJ63s9gx3VIBwseVnJhBlrVn3nPKUUsEFI5ifizv84iZ ESSlw28TZeZPxYho5oua4b48sjNrwsrxN945MYJMxHY9NIKcosmpclcPM9yvVy1J WZb5wSG6gDB4izw1uFpfs6cSVelGckjHqMUjl08Cl1v7PxcYLysHMQbzfpRZz6jW k/o802UBfzsWtCgygcVDR51Nb1t+n54hkrEpVU1vzmSImSLmV2xdb++v+implITB Z+FEwVdMP9Pgw/d8x7Yhbx2HhSM2SsUtY+jePV0+3RXX3qbehfRD+u+lszPBaGyV o7MIxtjEQvZFw7XSelSc8PT7c2AtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFe3X d9oNUPWGGUZ2E61kICegCFUwHwYDVR0jBBgwFoAUXyKMRr7ytMupTLKfEMNoDuKI PbMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkE0MUEwL0YwNjNDRTMyMEE5NzExRUVCOUI0MjUyMzRBRDlFNkZDL1h5S01S cjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1h5S01Scjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QTQxQTAvRjA2M0NFMzIwQTk3MTFFRUI5QjQyNTIzNEFE OUU2RkMvWHlLTVJyN3l0TXVwVExLZkVNTm9EdUtJUGJNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzN10ogZ7XKJXkLIvX6acZTp3wnlNn lGBQ57gu0bxfJ2QLeerRK5j09xGqRhbBxU7P8iaJ99o8PrtAgwb8YVdd1eE1RzXV dwogZDAj27Xfu2WUPxHx6pcEkggF8whxK898U6Pne5BExKwj0UOMmfhm52AppCZy 9n3Hh7dvvnD68DAlVUx6G9stsaekgfULV3HVcdO67CIf4GV8Csq+ZkOy5e2+xqrk nVuXDg09kIAogMDK4x3NQmE7ixTs+s8V0ZrGG20ISV42ss8bXiSyYAIiRHMSrcc4 k50fgqaaTWXUNtHb0hPGxQ89+0lpznu3TgdG9olOS9iT0cJheahOa2qX -----END CERTIFICATE-----Generated at Mon Dec 8 17:23:26 2025 by rpki-client