This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft File: x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json) Hash identifier: TlwbYyGFnI5D7bpoK8Gi1kRVktxMLgDHgJo26a7JBWc= Subject key identifier: 0F:D8:63:51:C3:2D:01:B8:E2:9F:46:77:65:26:29:C4:FB:95:AD:94 Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86 Certificate issuer: /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386 Certificate serial: 030C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft Manifest number: 0309 Signing time: Mon 08 Dec 2025 03:52:41 +0000 Manifest this update: Mon 08 Dec 2025 03:52:40 +0000 Manifest next update: Wed 10 Dec 2025 03:52:40 +0000 Files and hashes: 1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: KhHiHN3zqZz3VG4BBTwdjliD47CNhA4IxF9ztOBFKH0=) 2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=) 3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=) 4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386 Validity Not Before: Dec 8 03:52:40 2025 GMT Not After : Dec 10 03:52:40 2025 GMT Subject: CN=69364b89-7fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:b4:87:c1:c2:e6:cf:7f:93:24:07:df:a0: 09:e8:5c:37:d7:83:c9:59:ec:11:3a:33:db:92:60: 04:1b:bb:c8:22:fd:39:97:ea:bb:c1:24:d8:c9:67: 5a:a1:da:45:91:a4:c7:27:65:e7:f7:16:95:74:a6: 8b:68:58:f7:6a:3b:10:4f:96:1b:30:fe:8e:ff:fe: 54:ea:62:4f:6b:df:38:19:dd:20:74:a5:47:05:6e: 4b:f3:b6:c1:8d:4a:d2:5e:24:6d:e4:74:34:8c:2b: 8d:3b:0f:3a:70:ba:4f:17:46:cc:a3:74:e5:7d:92: 59:0e:0f:0f:53:4f:61:01:e6:87:62:d1:7a:a9:e3: cf:ff:21:db:e0:10:49:79:f4:11:13:c0:6b:c9:d7: 88:cd:e7:e5:5c:06:03:c6:44:10:d3:15:f6:c2:b2: 97:97:2f:82:3d:f7:68:c2:9f:c7:ef:f9:22:49:c0: 2e:cb:94:2a:10:62:24:d9:19:8f:03:16:94:ad:b7: 81:e7:11:6f:d1:a9:0e:08:b4:da:83:fd:c5:06:e5: d0:1f:2f:be:86:bf:8f:87:89:a1:13:51:95:c4:8f: 5e:bb:a8:b6:c2:4f:1a:b5:ea:b2:8c:e7:0e:af:11: c5:71:0c:90:b7:10:6e:2b:f5:58:1d:9e:ba:fc:0d: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D8:63:51:C3:2D:01:B8:E2:9F:46:77:65:26:29:C4:FB:95:AD:94 X509v3 Authority Key Identifier: keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:37:72:a6:98:e5:b8:07:b5:29:0e:75:12:f7:84:91:64:1c: 68:9f:56:9b:1d:da:3a:d1:7b:8a:fb:3f:80:e2:c5:09:bb:a6: 37:11:00:bd:52:ef:33:c5:6a:78:e0:74:ba:89:d6:72:55:4e: e9:f4:c9:8d:e3:b2:31:85:1e:b9:01:67:58:0e:c0:e5:b4:da: c3:b9:36:c1:0f:4b:ed:d8:2c:de:65:7c:6d:a9:25:1e:8a:41: f3:c5:37:52:20:af:6a:61:70:82:93:ad:5f:21:7f:ae:8a:60: 06:99:2d:cc:2c:d1:a1:84:51:76:01:71:38:1a:c9:ca:21:a0: 45:d0:da:53:ad:ff:a2:5f:e0:f2:ae:fb:fb:84:01:01:9a:73: 0d:44:0f:fd:a0:6f:8b:d3:5c:2f:81:95:be:04:2b:e8:51:98: dc:13:5e:b0:52:50:fb:47:c6:1b:9c:0f:b6:08:d0:92:da:f7: b2:fc:df:61:5d:6a:3d:e4:ab:ab:09:04:6d:dd:ab:46:2f:fb: 7a:b2:b5:7d:4d:bf:2c:f0:fd:98:8d:e6:70:f7:42:f0:95:5b: 10:a1:e2:a9:1d:14:81:5b:0e:7d:b3:f8:be:0b:0b:23:a4:a4: 3a:a0:0a:fc:d9:cc:93:2c:10:bf:1b:89:f2:f4:eb:e8:af:44: ea:3f:b8:90 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzYyOUJBRjExMC8GA1UEBRMoQzdEMzQ2NjY4MkM1MTYwRTIyQjYyNTQ4RTk3RTIx MEZFNEExRTM4NjAeFw0yNTEyMDgwMzUyNDBaFw0yNTEyMTAwMzUyNDBaMBgxFjAU BgNVBAMTDTY5MzY0Yjg5LTdmYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCoibSHwcLmz3+TJAffoAnoXDfXg8lZ7BE6M9uSYAQbu8gi/TmX6rvBJNjJ Z1qh2kWRpMcnZef3FpV0potoWPdqOxBPlhsw/o7//lTqYk9r3zgZ3SB0pUcFbkvz tsGNStJeJG3kdDSMK407Dzpwuk8XRsyjdOV9klkODw9TT2EB5odi0Xqp48//Idvg EEl59BETwGvJ14jN5+VcBgPGRBDTFfbCspeXL4I992jCn8fv+SJJwC7LlCoQYiTZ GY8DFpStt4HnEW/RqQ4ItNqD/cUG5dAfL76Gv4+HiaETUZXEj167qLbCTxq16rKM 5w6vEcVxDJC3EG4r9Vgdnrr8DRs/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUD9hj UcMtAbjin0Z3ZSYpxPuVrZQwHwYDVR0jBBgwFoAUx9NGZoLFFg4itiVI6X4hD+Sh 44YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkM2MjlCL0UwOTM2NkMwODQ3QzExRUU5MEIwNDQ0NjRBRDlFNkZDL3g5Tkda b0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3g5Tkdab0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QzYyOUIvRTA5MzY2QzA4NDdDMTFFRTkwQjA0NDQ2NEFE OUU2RkMveDlOR1pvTEZGZzRpdGlWSTZYNGhELVNoNDRZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsN3KmmOW4B7UpDnUS94SRZBxon1ab Hdo60XuK+z+A4sUJu6Y3EQC9Uu8zxWp44HS6idZyVU7p9MmN47IxhR65AWdYDsDl tNrDuTbBD0vt2CzeZXxtqSUeikHzxTdSIK9qYXCCk61fIX+uimAGmS3MLNGhhFF2 AXE4GsnKIaBF0NpTrf+iX+Dyrvv7hAEBmnMNRA/9oG+L01wvgZW+BCvoUZjcE16w UlD7R8YbnA+2CNCS2vey/N9hXWo95KurCQRt3atGL/t6srV9Tb8s8P2YjeZw90Lw lVsQoeKpHRSBWw59s/i+CwsjpKQ6oAr82cyTLBC/G4ny9Ovor0TqP7iQ -----END CERTIFICATE-----Generated at Mon Dec 8 17:06:41 2025 by rpki-client