This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json) Hash identifier: eqQYGQ/pz5U1Uw2sDHpxAelkWM53Gl6gP9Ou7CcJ5ZU= Subject key identifier: 0B:25:E6:9D:D9:1F:DF:EF:26:05:90:B5:4D:99:90:80:63:4E:17:3A Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB Certificate serial: 0F61 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft Manifest number: 0F59 Signing time: Tue 16 Dec 2025 00:35:15 +0000 Manifest this update: Tue 16 Dec 2025 00:35:12 +0000 Manifest next update: Thu 18 Dec 2025 00:35:12 +0000 Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: pcq6ToB0+4uMx7vdmujjVbqDr5buoSDDjdloP3Ls8zw=) 2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 18 Dec 2025 00:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3937 (0xf61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB Validity Not Before: Dec 16 00:35:12 2025 GMT Not After : Dec 18 00:35:12 2025 GMT Subject: CN=6940a941-5c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:aa:9b:98:17:a0:f8:21:41:07:8e:d4:00:1b: b6:8f:1e:08:88:83:4d:54:21:77:0b:f9:44:d8:72: e4:75:84:81:cd:a2:7c:ac:f8:26:fa:4d:d1:40:5c: 64:f4:38:92:8a:ac:87:00:e8:03:5c:db:44:fd:78: 5a:84:02:07:e2:ff:55:09:1d:35:53:49:8b:7d:29: 30:db:45:cc:df:38:53:16:7f:72:c3:ba:7d:c5:e2: d5:44:31:7e:c7:b1:8a:24:8e:36:97:da:02:e4:97: 02:63:bc:ae:90:31:ef:d8:e5:75:e9:4e:95:c8:73: ce:2d:59:6b:2d:87:5c:21:50:d8:05:d7:4a:a1:0e: 24:7d:e0:ea:07:1e:48:f3:b8:06:26:19:ad:f9:2c: c3:b3:50:f4:77:1e:e9:c3:8d:55:89:9b:c4:13:55: b3:a3:7f:37:70:82:aa:15:a5:17:32:7a:a2:eb:8c: e1:81:19:b0:ce:f4:42:52:4e:45:f1:25:5c:fc:77: ba:49:28:4f:8b:95:bf:61:3a:dd:cb:9c:4e:1a:d0: 32:6a:90:1b:d0:f3:9b:03:65:64:66:00:9b:b5:2a: 41:d2:c1:a5:5b:74:96:a5:49:ea:4b:b9:de:28:17: 8a:9b:11:64:f1:ab:d2:b1:2e:2c:68:e8:33:37:b1: da:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:25:E6:9D:D9:1F:DF:EF:26:05:90:B5:4D:99:90:80:63:4E:17:3A X509v3 Authority Key Identifier: keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:77:03:9d:e1:f5:20:40:cc:59:c2:e2:20:08:c5:42:33:18: 24:a1:ee:ad:cb:0e:88:6f:6a:14:74:c2:a9:7e:a3:07:1d:58: 68:43:0a:6f:39:18:21:f4:6b:e5:28:83:66:b8:c4:15:13:9f: 4d:15:7d:21:49:2a:9f:da:d5:ca:c0:cb:6b:15:2a:32:e3:28: 78:bc:5d:65:ea:d5:0c:00:be:a7:76:c1:ef:e7:e6:a4:2d:3d: 1b:0d:38:76:e4:5f:4e:34:ed:82:dd:57:99:51:d9:ef:a7:50: 26:b8:80:4f:f1:50:8f:33:16:4e:2a:52:02:e5:a5:64:47:10: b9:0d:fc:2f:69:f9:ee:7a:2d:e3:28:82:a6:52:4e:a5:f4:f6: 15:1f:68:80:86:1e:ab:35:57:93:7f:21:6d:92:30:e6:4c:96: d4:f7:23:a1:70:a6:f5:53:c1:27:46:02:93:7b:07:8a:f9:fa: 2f:29:a5:cf:0a:ed:66:33:ff:09:8a:97:77:6f:8d:ac:d6:b7: 3e:07:11:00:cd:85:51:ed:49:69:68:53:1c:e7:d2:b0:a2:13: 5c:78:4f:0e:e4:bb:e4:69:b0:2f:9a:ed:c6:10:40:b5:ce:d0: b3:69:ca:9e:90:ab:3a:89:83:00:9a:ed:c4:d9:aa:9d:af:69: 1f:2b:17:1e -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgICD2EwDQYJKoZIhvcNAQELBQAwTTEYMBYGA1UEAxMPTEFD TklDVE9BRlJJTklDMTEwLwYDVQQFEyhENUJGODdEQTM0NjZDODJEOEM2RDhFMzRF M0JERDg1QkNEMzlEMkVCMB4XDTI1MTIxNjAwMzUxMloXDTI1MTIxODAwMzUxMlow GDEWMBQGA1UEAxMNNjk0MGE5NDEtNWM5MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPiqm5gXoPghQQeO1AAbto8eCIiDTVQhdwv5RNhy5HWEgc2ifKz4 JvpN0UBcZPQ4koqshwDoA1zbRP14WoQCB+L/VQkdNVNJi30pMNtFzN84UxZ/csO6 fcXi1UQxfsexiiSONpfaAuSXAmO8rpAx79jldelOlchzzi1Zay2HXCFQ2AXXSqEO JH3g6gceSPO4BiYZrfksw7NQ9Hce6cONVYmbxBNVs6N/N3CCqhWlFzJ6ouuM4YEZ sM70QlJORfElXPx3ukkoT4uVv2E63cucThrQMmqQG9DzmwNlZGYAm7UqQdLBpVt0 lqVJ6ku53igXipsRZPGr0rEuLGjoMzex2gMCAwEAAaOCAlYwggJSMB0GA1UdDgQW BBQLJead2R/f7yYFkLVNmZCAY04XOjAfBgNVHSMEGDAWgBTVv4faNGbILYxtjjTj vdhbzTnS6zAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbGFjbmljLzFiLUgyalJteUMy TWJZNDA0NzNZVzgwNTB1cy5jcmwwdgYIKwYBBQUHAQEEajBoMGYGCCsGAQUFBzAC hlpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC9sYWNuaWMtdG8tYWZyaW5pYy5jZXIwTwYD VR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jw a2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ8GCCsGAQUFBwELBIGSMIGP MFYGCCsGAQUFBzALhkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9y eS9sYWNuaWMvMWItSDJqUm15QzJNYlk0MDQ3M1lXODA1MHVzLm1mdDA1BggrBgEF BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDdwOd4fUgQMxZwuIgCMVCMxgk oe6tyw6Ib2oUdMKpfqMHHVhoQwpvORgh9GvlKINmuMQVE59NFX0hSSqf2tXKwMtr FSoy4yh4vF1l6tUMAL6ndsHv5+akLT0bDTh25F9ONO2C3VeZUdnvp1AmuIBP8VCP MxZOKlIC5aVkRxC5Dfwvafnuei3jKIKmUk6l9PYVH2iAhh6rNVeTfyFtkjDmTJbU 9yOhcKb1U8EnRgKTeweK+fovKaXPCu1mM/8Jipd3b42s1rc+BxEAzYVR7UlpaFMc 59KwohNceE8O5LvkabAvmu3GEEC1ztCzacqekKs6iYMAmu3E2aqdr2kfKxce -----END CERTIFICATE-----Generated at Tue Dec 16 14:25:56 2025 by rpki-client