This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json) Hash identifier: CE2GLXkGrU6DtoetS0qdclVWQ+PIdBob6xyQkBTpiZY= Subject key identifier: FD:AD:4F:CC:30:1A:C9:F2:1B:BD:D5:DC:EC:9B:A8:F1:8B:22:8B:44 Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E Certificate serial: 04FB Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft Manifest number: 04F7 Signing time: Mon 19 Jan 2026 03:00:41 +0000 Manifest this update: Mon 19 Jan 2026 03:00:40 +0000 Manifest next update: Wed 21 Jan 2026 03:00:40 +0000 Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: i8uzJ+Oenpm2QgBAEZgIYJtF/g0iEKeS6JUOSQSUyE0=) 2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=) 3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 21 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E Validity Not Before: Jan 19 03:00:40 2026 GMT Not After : Jan 21 03:00:40 2026 GMT Subject: CN=696d9e59-9622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:fa:d0:4b:32:1b:5b:06:48:0d:8f:30:4a: de:21:fa:2b:7a:3a:e5:da:87:b3:10:f7:28:55:e8: 7c:84:d9:68:65:d4:09:fe:9e:ce:fd:18:9c:cb:66: 56:c9:3c:ed:a4:45:3d:cb:06:51:ab:8b:85:7b:08: 7e:57:f6:85:20:e0:cd:f0:6a:09:a9:2f:db:05:5e: 6c:9e:7d:e6:3a:89:16:d6:a8:e5:57:60:d9:b5:e7: db:5e:6b:17:05:5a:51:3a:eb:00:c5:fc:3d:25:c2: 93:3e:e8:0e:d0:16:7f:96:b4:da:ad:d7:21:bd:df: 8d:d7:c2:c0:f6:c3:eb:d2:46:be:02:46:8c:da:9f: ad:3a:dd:a3:17:74:a2:fd:2b:fd:38:62:24:2e:c7: 94:34:8c:f9:a5:4f:e0:2c:9a:97:69:06:de:05:72: 88:f5:f4:9e:2b:6f:39:0c:9f:38:2c:19:19:95:9f: a2:9d:04:cb:c0:00:4f:0a:c0:5c:0b:dc:b2:cd:dd: 8c:f3:fb:bc:c1:34:ea:62:84:18:f2:f1:fc:33:e4: 23:93:26:d2:1c:c3:21:52:b5:39:35:e6:e8:b5:a5: b6:97:42:8f:5b:e6:e0:13:21:71:71:79:8e:7f:00: 5e:42:d1:09:5f:14:d0:25:5c:d4:71:13:d4:56:13: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AD:4F:CC:30:1A:C9:F2:1B:BD:D5:DC:EC:9B:A8:F1:8B:22:8B:44 X509v3 Authority Key Identifier: keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f4:ee:a8:14:28:f7:12:34:e5:4d:f3:97:89:7b:c8:e2:f1: 09:cd:82:bc:66:6c:74:bf:26:2c:db:84:18:20:a3:80:28:85: ab:23:55:b7:b4:6d:ea:71:da:03:7f:d5:21:bd:06:a5:7c:ed: 1f:5a:c0:c2:d6:e7:cb:f9:a0:06:47:4b:54:81:55:04:e7:06: 1b:86:11:2b:e1:e8:ac:32:15:7e:72:f4:b9:39:d2:77:2a:45: 88:cd:cd:7a:dd:ef:be:5c:9d:b4:2f:3d:d6:33:52:d6:37:8f: 2d:a3:a4:1d:8e:d4:cc:8d:0f:bf:56:0e:81:5b:84:b6:7d:84: e5:ce:02:46:da:b8:3f:f1:09:34:51:c7:7d:d0:2e:5e:5f:91: f5:d3:e2:d3:50:1a:42:69:c3:03:a5:c6:92:9a:69:03:8c:80: 2c:08:45:8c:a1:91:48:d8:5d:32:e5:09:6b:80:9d:7a:39:43: b8:ad:a1:c3:0d:66:23:90:72:aa:02:eb:50:61:ad:fb:04:8f: d4:e7:7f:d3:5c:46:4e:20:84:49:3d:e3:49:22:3e:e5:5c:13: 0e:42:c1:98:a2:8d:2e:75:1f:30:96:28:73:d5:4b:ed:09:c9: 68:b0:a4:47:8c:b4:d0:c6:47:ab:c0:a4:a5:f5:09:a6:6c:0d: bf:7f:b8:20 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBPswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDdGRjBBRjExMC8GA1UEBRMoOTIwNDQxMkExRjEyQkNENUQyQjNDRTM5OTFBQ0VG Njk3NkM4ODY1RTAeFw0yNjAxMTkwMzAwNDBaFw0yNjAxMjEwMzAwNDBaMBgxFjAU BgNVBAMTDTY5NmQ5ZTU5LTk2MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDAW/rQSzIbWwZIDY8wSt4h+it6OuXah7MQ9yhV6HyE2Whl1An+ns79GJzL ZlbJPO2kRT3LBlGri4V7CH5X9oUg4M3wagmpL9sFXmyefeY6iRbWqOVXYNm159te axcFWlE66wDF/D0lwpM+6A7QFn+WtNqt1yG9343XwsD2w+vSRr4CRozan6063aMX dKL9K/04YiQux5Q0jPmlT+AsmpdpBt4Fcoj19J4rbzkMnzgsGRmVn6KdBMvAAE8K wFwL3LLN3Yzz+7zBNOpihBjy8fwz5COTJtIcwyFStTk15ui1pbaXQo9b5uATIXFx eY5/AF5C0QlfFNAlXNRxE9RWExttAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/a1P zDAayfIbvdXc7Juo8Ysii0QwHwYDVR0jBBgwFoAUkgRBKh8SvNXSs845kazvaXbI hl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3RkYwL0EyOEFDMTBBMzJBOTExRURBNEU1QzlEQ0YxMjIyNDY4L2tnUkJL aDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2tnUkJLaDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDdGRjAvQTI4QUMxMEEzMkE5MTFFREE0RTVDOURDRjEy MjI0Njgva2dSQktoOFN2TlhTczg0NWthenZhWGJJaGw0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ9O6oFCj3EjTlTfOXiXvI4vEJzYK8 Zmx0vyYs24QYIKOAKIWrI1W3tG3qcdoDf9UhvQalfO0fWsDC1ufL+aAGR0tUgVUE 5wYbhhEr4eisMhV+cvS5OdJ3KkWIzc163e++XJ20Lz3WM1LWN48to6QdjtTMjQ+/ Vg6BW4S2fYTlzgJG2rg/8Qk0Ucd90C5eX5H10+LTUBpCacMDpcaSmmkDjIAsCEWM oZFI2F0y5QlrgJ16OUO4raHDDWYjkHKqAutQYa37BI/U53/TXEZOIIRJPeNJIj7l XBMOQsGYoo0udR8wlihz1UvtCclosKRHjLTQxkerwKSl9QmmbA2/f7gg -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:52 2026 by rpki-client