This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json) Hash identifier: DnZ9glDCtk0DPZpdin0oF5O66LfHHMRiNdNinZOLkcE= Subject key identifier: A7:11:BA:28:18:FB:88:DC:EA:4F:C0:6F:48:73:32:05:5D:DD:88:3A Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20 Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520 Certificate serial: 03BB Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft Manifest number: 03B2 Signing time: Mon 08 Dec 2025 03:31:49 +0000 Manifest this update: Mon 08 Dec 2025 03:31:49 +0000 Manifest next update: Wed 10 Dec 2025 03:31:49 +0000 Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: ygwXqMheEKTH4Mthb+Q5L2hRamB+0XnDFI8b68WCR+w=) 2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=) 3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=) 4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=) 5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520 Validity Not Before: Dec 8 03:31:49 2025 GMT Not After : Dec 10 03:31:49 2025 GMT Subject: CN=693646a5-a31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:8d:81:27:ad:13:17:20:a2:db:ad:f8:55: 28:c1:73:5b:10:44:ac:58:7b:6b:ae:4c:2b:90:fd: 4c:7a:dd:22:a9:8b:48:9d:4d:5a:e9:30:f9:d6:68: 75:3d:23:26:e0:c7:c8:44:58:15:c4:ba:18:9e:43: 59:c1:5d:10:c1:1c:e7:97:de:7c:42:a8:55:4a:fb: f0:b9:45:91:95:b5:22:e9:61:b8:d8:c2:88:81:86: c6:21:f9:e2:48:c4:f4:08:a0:85:4d:08:60:ac:c4: 7c:76:ed:9b:e6:03:5d:74:77:64:59:03:7a:a6:35: 7d:d0:11:cc:d0:5d:0e:4f:8c:24:1c:fb:78:c0:1e: e9:48:da:e6:5d:71:65:95:73:79:8e:ba:1d:d6:37: d3:d5:b3:64:b8:b1:aa:3b:75:9a:c7:1e:12:3b:b9: e8:68:75:50:ad:60:2d:c5:b8:cd:64:6d:9e:04:50: bd:24:18:0a:43:0a:c3:69:92:91:03:c5:46:3d:a6: e2:43:6c:ce:67:45:bd:52:59:4c:bf:44:0e:65:98: dd:81:2a:31:5f:a7:cc:14:f2:30:8f:0d:25:ba:6e: 51:4f:da:2e:3b:83:78:52:ea:d4:5d:0f:02:a6:6a: ea:df:f7:8a:f3:1f:20:13:a0:4d:bb:98:c2:f3:a4: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:11:BA:28:18:FB:88:DC:EA:4F:C0:6F:48:73:32:05:5D:DD:88:3A X509v3 Authority Key Identifier: keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b5:e9:c0:68:c7:8f:75:02:f9:39:8a:f7:94:5e:16:d3:c6: aa:97:d7:66:da:ca:02:3f:1b:82:c8:ff:7e:cc:04:32:47:3c: ab:ca:5e:49:61:20:6f:f8:cd:54:88:9d:01:1f:66:72:9f:ea: 82:fb:03:5b:17:01:db:80:36:4f:7b:65:c9:97:a1:ab:5b:40: 40:88:b5:34:6b:23:e5:e3:cc:ef:f9:58:77:bf:22:ee:fb:1a: 9e:9c:a3:97:b2:3d:e5:1f:c0:72:eb:a1:d7:56:e3:59:f8:c2: 8f:64:64:0a:6c:bc:74:a9:b8:e4:97:cb:1f:e4:b9:a4:23:ed: 51:3c:0b:9d:4f:95:0d:ae:94:75:46:5f:fa:59:cb:3e:ff:14: 9d:5a:58:af:63:1b:51:79:ee:17:31:63:2f:97:41:5d:30:17: c8:23:b7:fe:77:4b:98:f3:0c:54:88:ea:32:5f:b7:67:83:32: ad:0a:81:d4:86:46:c8:2f:02:a7:b8:6c:12:22:78:09:bf:6f: 38:d9:30:c7:c5:ca:14:8b:a2:67:a3:59:2b:9f:44:93:e7:c0: 35:fb:6a:10:4f:d0:91:74:bb:77:fb:b3:e2:9b:cf:b9:8b:01: f7:b9:39:5c:d9:cc:11:f1:ca:6f:80:26:b1:f4:0e:b1:c1:59: 72:5f:7e:b8 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA7swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RThCRjdBRjExMC8GA1UEBRMoQzczM0VEMUE3Njc0MjBFRUY1M0UwNTYxODc4MTBC RTM5MzRBQTUyMDAeFw0yNTEyMDgwMzMxNDlaFw0yNTEyMTAwMzMxNDlaMBgxFjAU BgNVBAMTDTY5MzY0NmE1LWEzMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCf642BJ60TFyCi2634VSjBc1sQRKxYe2uuTCuQ/Ux63SKpi0idTVrpMPnW aHU9Iybgx8hEWBXEuhieQ1nBXRDBHOeX3nxCqFVK+/C5RZGVtSLpYbjYwoiBhsYh +eJIxPQIoIVNCGCsxHx27ZvmA110d2RZA3qmNX3QEczQXQ5PjCQc+3jAHulI2uZd cWWVc3mOuh3WN9PVs2S4sao7dZrHHhI7uehodVCtYC3FuM1kbZ4EUL0kGApDCsNp kpEDxUY9puJDbM5nRb1SWUy/RA5lmN2BKjFfp8wU8jCPDSW6blFP2i47g3hS6tRd DwKmaurf94rzHyAToE27mMLzpJzBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpxG6 KBj7iNzqT8BvSHMyBV3diDowHwYDVR0jBBgwFoAUxzPtGnZ0IO71PgVhh4EL45NK pSAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkU4QkY3L0VFRTZFRkFDMEFBMjExRUVBQTFFMjE0MzRBRDlFNkZDL3h6UHRH blowSU83MVBnVmhoNEVMNDVOS3BTQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3h6UHRHblowSU83MVBnVmhoNEVMNDVOS3BTQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RThCRjcvRUVFNkVGQUMwQUEyMTFFRUFBMUUyMTQzNEFE OUU2RkMveHpQdEduWjBJTzcxUGdWaGg0RUw0NU5LcFNBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNtenAaMePdQL5OYr3lF4W08aql9dm 2soCPxuCyP9+zAQyRzyryl5JYSBv+M1UiJ0BH2Zyn+qC+wNbFwHbgDZPe2XJl6Gr W0BAiLU0ayPl48zv+Vh3vyLu+xqenKOXsj3lH8By66HXVuNZ+MKPZGQKbLx0qbjk l8sf5LmkI+1RPAudT5UNrpR1Rl/6Wcs+/xSdWlivYxtRee4XMWMvl0FdMBfII7f+ d0uY8wxUiOoyX7dngzKtCoHUhkbILwKnuGwSIngJv2842TDHxcoUi6Jno1krn0ST 58A1+2oQT9CRdLt3+7Pim8+5iwH3uTlc2cwR8cpvgCax9A6xwVlyX364 -----END CERTIFICATE-----Generated at Mon Dec 8 17:18:50 2025 by rpki-client