This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json) Hash identifier: xEQnmTa0NO0WBviV83VTXZ7vleCbr7CS0WAec22MMas= Subject key identifier: 98:A6:EA:0C:F2:BD:BA:9F:1B:7C:AC:3C:EF:77:AD:11:AD:A8:EC:CE Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4 Certificate issuer: /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4 Certificate serial: 0664 Authority info access: rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft Manifest number: 0662 Signing time: Sun 07 Dec 2025 02:19:24 +0000 Manifest this update: Sun 07 Dec 2025 02:19:23 +0000 Manifest next update: Tue 09 Dec 2025 02:19:23 +0000 Files and hashes: 1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: VhXRpXwVsPS3JDIMYf5S3dSO/JtIuRlhPbLMH3JipPc=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 09 Dec 2025 00:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4 Validity Not Before: Dec 7 02:19:23 2025 GMT Not After : Dec 9 02:19:23 2025 GMT Subject: CN=6934e42c-648c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:c9:02:f0:8e:0f:0e:22:32:e0:ce:8d:99: a0:2f:fe:4b:05:01:55:d8:38:c7:f3:4c:12:d3:d0: e4:c4:6d:e2:b3:db:9c:c3:82:ca:ad:b4:20:56:b9: 7d:08:13:66:13:32:8d:97:9b:d2:5b:67:84:c7:02: e7:47:c7:2b:66:f5:fd:fc:08:4a:4e:4c:cb:57:c5: 79:75:e4:b0:21:4a:b1:b9:73:f5:e8:7c:25:7a:9a: f3:9c:7b:0f:be:4e:ee:ee:74:af:f8:d0:56:6d:54: 05:df:49:8f:0c:5e:f3:39:6b:b2:9e:df:ce:24:01: 7a:a7:c0:77:74:82:6f:d1:be:bb:76:ad:04:60:af: 74:72:9d:e1:bc:fc:ee:5a:8f:3f:f3:84:9a:82:b0: ab:d3:0a:46:b3:59:5a:48:e1:30:7d:63:6b:20:b6: 30:ce:bf:2f:58:68:af:ab:98:9b:0b:c0:81:ae:99: d7:0d:5e:a5:61:96:0c:f4:2a:b8:f1:5c:f6:48:69: a2:b2:b9:21:e9:a0:d8:da:77:5e:34:06:3d:36:11: 69:4f:02:66:d9:db:7c:05:b0:09:41:77:15:7a:27: 69:d1:a6:14:99:bc:62:ce:56:eb:36:b8:dc:8d:f3: 61:ab:f9:52:4a:67:60:e2:6a:f3:3d:eb:82:45:74: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A6:EA:0C:F2:BD:BA:9F:1B:7C:AC:3C:EF:77:AD:11:AD:A8:EC:CE X509v3 Authority Key Identifier: keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:18:f9:bf:55:ff:d0:7b:78:16:ed:3d:a6:50:8c:e3:52:59: 84:6d:a7:d4:f3:20:06:b5:30:2f:7c:f3:09:26:2a:88:6f:5a: d3:0d:a8:d2:b3:b0:0b:38:88:c9:43:01:e7:55:e0:6c:34:53: 42:07:20:0e:a4:99:ab:d2:e2:3f:29:5d:5b:27:5b:f4:67:ba: 16:92:39:f6:04:b9:a9:e1:40:a0:84:b4:c5:ee:6e:cd:3a:46: 44:09:1a:cf:c0:00:f6:8b:4e:9e:81:77:fc:0c:0f:c8:f5:36: 9b:43:36:3a:cc:64:ce:27:2d:3b:ce:87:de:ec:37:79:ca:a6: e4:9e:55:4f:fa:8a:27:56:48:50:fd:ee:b7:46:70:18:d0:b0: 74:38:9f:bf:eb:bd:d4:a7:e9:37:29:02:44:a6:10:3d:24:30: cf:97:e7:f3:6c:3a:32:93:09:e6:d6:1e:b0:6d:8c:7a:ca:ca: 83:0c:fb:b5:e1:d8:e2:76:18:4a:78:4a:e4:53:05:88:c6:58: 2d:20:e1:62:19:6b:b3:c7:12:63:d4:33:38:b4:51:35:dc:2a: 99:c0:ff:6d:4f:ef:11:75:05:aa:36:2f:87:e7:c3:0c:9a:49: 0a:59:e4:fd:17:57:4e:1b:d4:f4:77:60:64:bd:92:7c:81:3e: b8:d3:21:c6 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Qzk1RjFBUjExMC8GA1UEBRMoNkM3MzUwNzVCMjg2RUU0QUVDQkNDMTgxMDNCNjA2 QzQwQjc2QjRFNDAeFw0yNTEyMDcwMjE5MjNaFw0yNTEyMDkwMjE5MjNaMBgxFjAU BgNVBAMTDTY5MzRlNDJjLTY0OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCbY8kC8I4PDiIy4M6NmaAv/ksFAVXYOMfzTBLT0OTEbeKz25zDgsqttCBW uX0IE2YTMo2Xm9JbZ4THAudHxytm9f38CEpOTMtXxXl15LAhSrG5c/XofCV6mvOc ew++Tu7udK/40FZtVAXfSY8MXvM5a7Ke384kAXqnwHd0gm/Rvrt2rQRgr3RyneG8 /O5ajz/zhJqCsKvTCkazWVpI4TB9Y2sgtjDOvy9YaK+rmJsLwIGumdcNXqVhlgz0 KrjxXPZIaaKyuSHpoNjad140Bj02EWlPAmbZ23wFsAlBdxV6J2nRphSZvGLOVus2 uNyN82Gr+VJKZ2DiavM964JFdK8hAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUmKbq DPK9up8bfKw873etEa2o7M4wHwYDVR0jBBgwFoAUbHNQdbKG7krsvMGBA7YGxAt2 tOQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkM5NUYxLzNBRjBCNjc0RjM5NjExRUJCMDRDREE0N0Q4QTAxNENFL2JITlFk YktHN2tyc3ZNR0JBN1lHeEF0MnRPUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2JITlFkYktHN2tyc3ZNR0JBN1lHeEF0MnRPUS5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2Qzk1RjEvM0FGMEI2NzRGMzk2MTFFQkIwNENEQTQ3RDhBMDE0 Q0UvYkhOUWRiS0c3a3Jzdk1HQkE3WUd4QXQydE9RLm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwGPm/Vf/Qe3gW7T2mUIzjUlmEbafU8yAG tTAvfPMJJiqIb1rTDajSs7ALOIjJQwHnVeBsNFNCByAOpJmr0uI/KV1bJ1v0Z7oW kjn2BLmp4UCghLTF7m7NOkZECRrPwAD2i06egXf8DA/I9TabQzY6zGTOJy07zofe 7Dd5yqbknlVP+oonVkhQ/e63RnAY0LB0OJ+/673Up+k3KQJEphA9JDDPl+fzbDoy kwnm1h6wbYx6ysqDDPu14djidhhKeErkUwWIxlgtIOFiGWuzxxJj1DM4tFE13CqZ wP9tT+8RdQWqNi+H58MMmkkKWeT9F1dOG9T0d2BkvZJ8gT640yHG -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:56 2025 by rpki-client