This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft File: ki5AVQsnbd4essFQ31YlgeKM6LY.mft (raw, json) Hash identifier: /LCWb4FzqbSANAbRyOOeFacrKFeWghOOcwfncUToi/k= Subject key identifier: 4F:A0:DE:C5:4E:0A:5E:70:6C:56:34:7A:9B:2A:59:C5:93:58:5F:4D Authority key identifier: 92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6 Certificate issuer: /CN=F36F0F1FAF/serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6 Certificate serial: 0383 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft Manifest number: 0381 Signing time: Thu 18 Dec 2025 05:52:27 +0000 Manifest this update: Thu 18 Dec 2025 05:52:26 +0000 Manifest next update: Sat 20 Dec 2025 05:52:26 +0000 Files and hashes: 1: ki5AVQsnbd4essFQ31YlgeKM6LY.crl (hash: 1ttlnHmCZzY9XRpXoWvKq13ge/QLanSuggeug19si0s=) 2: 100404ACF0EF11EF88C9AE71762E951A.roa (hash: 8k5gdkW/3dmY+rQ2FXNkTuiBZr2cv4drq04xkEmoRrA=) 3: 103C0BB8314711EE99292E464AD9E6FC.roa (hash: TmpoQ5dHcVfEPTGG3mk1fm6t56EElHhj1QpqJ0Vnq+E=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 20 Dec 2025 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F0F1FAF, serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6 Validity Not Before: Dec 18 05:52:26 2025 GMT Not After : Dec 20 05:52:26 2025 GMT Subject: CN=6943969b-13b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:ef:9f:8c:3c:f2:8f:05:9c:1e:05:6b:a9: dc:0e:f8:18:4c:60:bb:84:b0:1d:0b:b5:3c:17:2c: 62:e4:c0:4f:3e:5a:8a:a8:70:e0:b8:3e:4b:e6:30: 3d:63:46:b7:f5:f3:3e:69:be:b8:9a:ae:b5:c9:2a: 64:2b:04:b8:5e:5f:2e:7a:1b:a5:05:f8:fc:d4:47: 0d:76:a3:df:ec:24:76:c4:0f:58:ee:70:6b:08:b2: e9:a1:5c:7b:b0:e0:cc:2f:70:fd:89:2d:67:e4:9e: f5:e6:e7:67:27:bf:9e:a3:61:eb:02:f0:62:38:04: 3a:78:79:c0:8d:34:5d:25:6a:e1:98:c4:e8:f5:e3: e3:96:83:7a:bd:31:41:7b:5d:a9:b3:d6:d1:f6:54: fe:2e:06:5d:6a:46:fe:04:8a:b2:04:30:e1:68:0c: 62:4c:0d:f8:dd:f6:90:77:b4:69:bf:fe:9b:ca:a9: db:75:ae:5b:c8:df:3b:14:b9:38:d3:2a:50:c1:75: 89:df:44:20:c3:fc:5f:6f:12:6a:ec:6a:14:bc:4e: ad:f7:b0:fd:a8:30:42:da:de:2f:4a:9f:f6:b3:b0: 6d:43:50:5f:df:ee:2b:f5:fc:b2:7b:d4:14:13:2d: 54:26:8d:4a:04:a8:d3:c0:9d:ce:a4:20:1e:78:d4: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A0:DE:C5:4E:0A:5E:70:6C:56:34:7A:9B:2A:59:C5:93:58:5F:4D X509v3 Authority Key Identifier: keyid:92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5d:f8:c0:2d:9a:24:0c:1f:fe:a7:62:46:5c:15:16:bd:36: 5b:3b:3b:98:1d:b2:8b:e7:1a:8b:3c:1b:3f:34:6a:56:a5:6b: 9d:09:81:07:cd:bd:63:53:de:ba:14:23:1e:dc:9e:f3:30:02: 0b:62:48:a9:3a:0e:e0:89:c1:69:47:f4:8a:6c:f7:3b:3e:10: d9:aa:9e:a1:8a:bc:51:60:4a:fe:f7:d8:2e:a5:37:4c:92:69: a8:31:c8:1c:2f:6c:41:06:8e:14:db:03:c1:2d:8e:4d:0c:14: 95:2d:6f:d8:84:96:75:5a:ae:11:f4:f5:29:5d:e5:ce:0a:85: 32:5c:3a:45:b4:fe:85:fb:2f:b0:d2:21:cf:2c:81:9b:ae:3c: 6c:1c:0e:af:e0:1c:3f:90:f7:3a:5b:e5:30:8a:92:69:1e:ca: 40:21:a0:02:6a:ad:db:7c:d9:df:34:61:7e:27:cd:5e:c2:93: 28:ee:c8:cf:02:fc:78:b8:a6:86:fd:52:11:4d:b4:49:72:5f: e1:72:73:3c:6c:5c:45:58:eb:0b:af:76:1a:11:bb:88:4a:f0: d4:af:a2:ca:51:69:8e:ce:9f:4b:68:b2:25:7d:06:76:63:62: 32:f9:44:53:93:f4:27:e6:5d:da:eb:47:6a:05:a8:4f:1e:c4: ec:5a:67:d5 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjBGMUZBRjExMC8GA1UEBRMoOTIyRTQwNTUwQjI3NkRERTFFQjJDMTUwREY1NjI1 ODFFMjhDRThCNjAeFw0yNTEyMTgwNTUyMjZaFw0yNTEyMjAwNTUyMjZaMBgxFjAU BgNVBAMTDTY5NDM5NjliLTEzYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDKge+fjDzyjwWcHgVrqdwO+BhMYLuEsB0LtTwXLGLkwE8+WoqocOC4Pkvm MD1jRrf18z5pvriarrXJKmQrBLheXy56G6UF+PzURw12o9/sJHbED1jucGsIsumh XHuw4MwvcP2JLWfknvXm52cnv56jYesC8GI4BDp4ecCNNF0lauGYxOj14+OWg3q9 MUF7Xamz1tH2VP4uBl1qRv4EirIEMOFoDGJMDfjd9pB3tGm//pvKqdt1rlvI3zsU uTjTKlDBdYnfRCDD/F9vEmrsahS8Tq33sP2oMELa3i9Kn/azsG1DUF/f7iv1/LJ7 1BQTLVQmjUoEqNPAnc6kIB541B09AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUT6De xU4KXnBsVjR6mypZxZNYX00wHwYDVR0jBBgwFoAUki5AVQsnbd4essFQ31YlgeKM 6LYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkYwRjFGL0VEQTVBRkVDMzE0MDExRUU5NUEwMzgzNDRBRDlFNkZDL2tpNUFW UXNuYmQ0ZXNzRlEzMVlsZ2VLTTZMWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2tpNUFWUXNuYmQ0ZXNzRlEzMVlsZ2VLTTZMWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RjBGMUYvRURBNUFGRUMzMTQwMTFFRTk1QTAzODM0NEFE OUU2RkMva2k1QVZRc25iZDRlc3NGUTMxWWxnZUtNNkxZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8XfjALZokDB/+p2JGXBUWvTZbOzuY HbKL5xqLPBs/NGpWpWudCYEHzb1jU966FCMe3J7zMAILYkipOg7gicFpR/SKbPc7 PhDZqp6hirxRYEr+99gupTdMkmmoMcgcL2xBBo4U2wPBLY5NDBSVLW/YhJZ1Wq4R 9PUpXeXOCoUyXDpFtP6F+y+w0iHPLIGbrjxsHA6v4Bw/kPc6W+UwipJpHspAIaAC aq3bfNnfNGF+J81ewpMo7sjPAvx4uKaG/VIRTbRJcl/hcnM8bFxFWOsLr3YaEbuI SvDUr6LKUWmOzp9LaLIlfQZ2Y2Iy+URTk/Qn5l3a60dqBahPHsTsWmfV -----END CERTIFICATE-----Generated at Thu Dec 18 14:19:23 2025 by rpki-client