This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json) Hash identifier: TjPue6/HxBk7WT1FCIR2TpcEYUs8J3LW7iJJQpOF44k= Subject key identifier: D0:4F:26:A3:44:08:08:CA:05:AA:B7:E0:B1:A3:6B:E4:43:1F:26:76 Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6 Certificate issuer: /CN=AfriNIC-Root-Certificate Certificate serial: 5B Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft Manifest number: C8 Signing time: Thu 25 Dec 2025 08:50:14 +0000 Manifest this update: Thu 25 Dec 2025 08:50:13 +0000 Manifest next update: Sun 01 Feb 2026 08:50:13 +0000 Files and hashes: 1: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=) 2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=) 3: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=) 4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: 2WRAjMSVMJ1Is0TRBP9XdFSmj0GYc0s2XscjFUhtuhc=) 5: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=) 6: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 01 Feb 2026 08:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AfriNIC-Root-Certificate Validity Not Before: Dec 25 08:50:13 2025 GMT Not After : Feb 1 08:50:13 2026 GMT Subject: CN=694cfac5-ce2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:46:58:90:ec:26:3f:e9:65:e0:09:fe:46: 22:3f:fb:1f:53:2c:4f:9f:6f:f6:2d:00:79:6f:bc: 77:74:eb:87:04:37:79:32:08:e5:81:55:6c:ce:fc: 30:eb:91:d3:33:5e:48:48:c7:cb:b0:4a:0b:98:2e: 64:06:48:03:6f:aa:a8:93:fd:b0:42:22:dd:7f:a3: 57:08:aa:67:16:59:d5:55:01:1d:df:77:cb:07:67: f6:f9:2f:ab:77:b0:b1:08:b2:fa:69:52:e4:43:58: 21:c6:67:ef:f4:f8:1b:35:2e:92:6b:5e:fe:33:60: 52:d8:e0:91:c7:70:df:a3:4d:f3:08:2f:65:e3:a7: 54:43:05:7e:86:28:a6:e5:88:13:20:c4:aa:55:e6: 35:c8:5d:f1:8a:04:82:88:64:c7:09:92:02:d4:2d: b4:3b:b5:0b:21:5a:78:ff:a5:18:0a:0b:4d:79:ed: a9:19:06:25:59:1f:09:e0:e5:64:86:a4:b2:bb:45: 62:66:22:23:80:39:c5:92:0c:c2:19:95:c9:ad:2d: 01:d9:6b:f3:20:86:bb:23:26:b0:44:0a:b3:89:e0: 5c:41:4f:be:05:6b:b9:7b:f3:dc:0f:78:a2:aa:4f: f8:32:91:05:47:7c:12:7a:3d:5a:f3:1b:cf:84:86: 4e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4F:26:A3:44:08:08:CA:05:AA:B7:E0:B1:A3:6B:E4:43:1F:26:76 X509v3 Authority Key Identifier: keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c1:68:a6:57:ab:fd:ff:67:13:70:f0:2b:43:e7:07:9f:11: 91:54:02:d6:97:c9:58:eb:e0:f3:d3:e6:8d:12:be:fa:4c:b3: 66:62:b1:15:77:f4:a0:6b:98:af:e2:6d:91:d6:fd:7d:77:35: 13:2c:df:31:1b:c3:73:6f:81:3a:d4:0e:bc:9f:50:eb:23:2d: c0:76:e9:94:d4:03:c2:98:fb:c8:89:3a:ca:72:15:4e:d4:59: c6:f8:0e:64:37:6f:8c:2b:43:84:d4:49:28:7a:f9:2d:42:00: 8f:ae:5c:5f:06:07:eb:73:96:0d:5c:c7:28:02:a7:e0:93:48: ad:d3:67:a2:4d:62:86:71:57:57:c0:b0:dd:24:73:d3:44:72: aa:88:89:f9:78:b6:19:81:ea:3c:90:c1:b6:f1:48:f0:69:27: d9:0a:e8:c2:23:db:3c:2b:4b:03:58:1d:c3:b0:ba:d5:a6:65: 0a:54:b1:eb:b1:30:1c:ef:33:fe:03:3d:20:2e:70:81:99:7b: dc:17:a5:a1:a1:27:61:b0:e0:33:a8:71:ae:c0:45:e5:1f:b8: 51:bb:5a:12:b0:8b:d8:b3:a4:40:58:17:3b:fc:d0:99:da:f8: ce:73:45:6f:ed:a4:3b:f4:02:b4:e6:a1:9b:9e:6a:a4:60:3c: fc:a9:d4:0c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjUxMjI1MDg1MDEzWhcNMjYwMjAxMDg1 MDEzWjAYMRYwFAYDVQQDEw02OTRjZmFjNS1jZTJjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAse5GWJDsJj/pZeAJ/kYiP/sfUyxPn2/2LQB5b7x3dOuH BDd5MgjlgVVszvww65HTM15ISMfLsEoLmC5kBkgDb6qok/2wQiLdf6NXCKpnFlnV VQEd33fLB2f2+S+rd7CxCLL6aVLkQ1ghxmfv9PgbNS6Sa17+M2BS2OCRx3Dfo03z CC9l46dUQwV+hiim5YgTIMSqVeY1yF3xigSCiGTHCZIC1C20O7ULIVp4/6UYCgtN ee2pGQYlWR8J4OVkhqSyu0ViZiIjgDnFkgzCGZXJrS0B2WvzIIa7IyawRAqzieBc QU++BWu5e/PcD3iiqk/4MpEFR3wSej1a8xvPhIZO0wIDAQABo4ICXzCCAlswHQYD VR0OBBYEFNBPJqNECAjKBaq34LGja+RDHyZ2MB8GA1UdIwQYMBaAFOtoDzj11scb tLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIHgDB1BgNVHR8EbjBsMGqgaKBmhmRy c3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBGNEQx MUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFNYlku Y3JsMEsGCCsGAQUFBwEBBD8wPTA7BggrBgEFBQcwAoYvcnN5bmM6Ly9ycGtpLmFm cmluaWMubmV0L3JlcG9zaXRvcnkvQWZyaU5JQy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgbkGCCsGAQUFBwELBIGsMIGpMHAGCCsGAQUFBzAL hmRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFN YlkubWZ0MDUGCCsGAQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90 aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAL3BaKZX q/3/ZxNw8CtD5wefEZFUAtaXyVjr4PPT5o0SvvpMs2ZisRV39KBrmK/ibZHW/X13 NRMs3zEbw3NvgTrUDryfUOsjLcB26ZTUA8KY+8iJOspyFU7UWcb4DmQ3b4wrQ4TU SSh6+S1CAI+uXF8GB+tzlg1cxygCp+CTSK3TZ6JNYoZxV1fAsN0kc9NEcqqIifl4 thmB6jyQwbbxSPBpJ9kK6MIj2zwrSwNYHcOwutWmZQpUseuxMBzvM/4DPSAucIGZ e9wXpaGhJ2Gw4DOoca7AReUfuFG7WhKwi9izpEBYFzv80Jna+M5zRW/tpDv0ArTm oZueaqRgPPyp1Aw= -----END CERTIFICATE-----Generated at Wed Jan 7 00:58:11 2026 by rpki-client