This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft File: qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json) Hash identifier: OY+s5phEBQYF6aNWUaWPEGXysVlj6G7/m03UF88p+7w= Subject key identifier: DB:46:48:3A:0C:69:1E:57:E7:0D:2C:F9:F5:EF:2B:16:9D:E4:42:C7 Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50 Certificate issuer: /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750 Certificate serial: 05B4 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft Manifest number: 05B2 Signing time: Fri 19 Dec 2025 02:38:07 +0000 Manifest this update: Fri 19 Dec 2025 02:38:06 +0000 Manifest next update: Sun 21 Dec 2025 02:38:06 +0000 Files and hashes: 1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: Yn4R/M4tir1Sglnv7COdD/+tfBpwH/s8ZgY6/OALYLo=) 2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=) 3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750 Validity Not Before: Dec 19 02:38:06 2025 GMT Not After : Dec 21 02:38:06 2025 GMT Subject: CN=6944ba8f-1694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:23:7a:e1:ca:d8:1f:7f:19:6f:29:16:9b: 62:9f:e9:2c:70:32:67:42:b3:4d:ba:5f:0e:1a:32: c4:dd:0d:d6:9c:03:db:40:04:77:ce:59:90:77:0f: 33:65:0d:d4:18:bb:08:bd:d4:ae:f1:6d:ad:0b:67: ce:55:5c:00:54:78:84:18:26:cb:59:9a:b8:03:34: f4:8c:48:2c:13:4d:a3:4e:9d:03:de:96:bc:c6:13: 26:25:52:a4:4e:1b:d0:64:1f:26:f8:bb:12:60:25: a4:1e:59:0f:ad:5e:51:32:9b:0d:f3:83:8b:57:42: 68:c0:79:80:60:56:7c:db:38:5b:cd:b6:ad:ef:3b: b3:14:35:54:e2:46:25:35:1c:76:b2:b5:a2:d0:73: bd:dc:70:25:a5:44:d9:95:6c:32:99:b6:8e:0f:cb: 9f:09:f4:88:b4:db:a8:6f:47:f6:1a:ba:c5:b4:fc: 49:60:dd:91:dc:86:7c:53:88:38:b7:50:9c:57:65: bf:2a:71:28:97:50:70:00:6e:c4:11:44:fd:fc:4a: 90:5d:c3:30:7c:75:15:72:01:70:f7:04:43:b2:15: 1d:7b:00:70:1c:ce:7c:1e:a9:00:07:20:3f:04:85: 8f:e6:56:89:11:ac:76:05:ab:71:ea:73:a7:b8:ee: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:46:48:3A:0C:69:1E:57:E7:0D:2C:F9:F5:EF:2B:16:9D:E4:42:C7 X509v3 Authority Key Identifier: keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:34:c3:53:17:c8:ad:c0:6a:e6:3a:ca:c8:03:94:07:4b:96: 4a:61:3d:a5:e8:e7:18:37:de:a9:1a:b1:2d:3c:f9:ec:4c:d4: ac:54:10:10:79:8b:69:f6:0e:1b:31:f4:22:9e:5b:a9:59:50: d5:2e:7a:d3:3f:76:68:05:14:cc:46:ee:d9:ef:21:4e:40:f6: 48:83:b7:fb:f7:31:41:77:53:69:18:a0:e7:c9:59:02:49:c0: b3:9f:26:52:02:78:ce:39:0c:fb:f1:d5:dd:1a:dc:94:bb:1d: ec:46:5b:4d:e5:2a:8b:46:45:cc:91:ef:5a:c1:a6:11:0f:6e: 17:af:84:b9:2b:1e:39:00:4b:20:c5:43:d2:ee:5e:4f:b0:b6: 8e:18:d1:9d:20:7e:3b:d0:32:37:08:bd:b9:53:89:c0:7f:01: c4:36:8f:8e:c1:7d:5f:d2:24:5e:79:84:b2:7c:45:28:d4:1c: 40:cf:7b:78:47:f4:bb:3f:1d:58:3e:c9:99:c2:d4:ec:a7:87: 3a:a4:46:81:80:97:06:30:54:16:23:dd:84:ce:18:bd:e4:37: bc:51:29:e5:78:2f:11:97:21:35:2f:ed:f1:66:10:de:97:dd: 73:9a:2b:23:58:f0:8e:c6:2e:fb:c0:f4:5e:40:3a:ae:53:28: a9:3c:cb:01 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjI4RTlBRjExMC8GA1UEBRMoQThFRDlGREM5NzY5RUY2RDM3NDFCOUREQUU3MjNE MzE4MTY1RTc1MDAeFw0yNTEyMTkwMjM4MDZaFw0yNTEyMjEwMjM4MDZaMBgxFjAU BgNVBAMTDTY5NDRiYThmLTE2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCpLyN64crYH38ZbykWm2Kf6SxwMmdCs026Xw4aMsTdDdacA9tABHfOWZB3 DzNlDdQYuwi91K7xba0LZ85VXABUeIQYJstZmrgDNPSMSCwTTaNOnQPelrzGEyYl UqROG9BkHyb4uxJgJaQeWQ+tXlEymw3zg4tXQmjAeYBgVnzbOFvNtq3vO7MUNVTi RiU1HHaytaLQc73ccCWlRNmVbDKZto4Py58J9Ii026hvR/YausW0/Elg3ZHchnxT iDi3UJxXZb8qcSiXUHAAbsQRRP38SpBdwzB8dRVyAXD3BEOyFR17AHAcznweqQAH ID8EhY/mVokRrHYFq3Hqc6e47s5NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU20ZI OgxpHlfnDSz59e8rFp3kQscwHwYDVR0jBBgwFoAUqO2f3Jdp7203QbndrnI9MYFl 51AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjYyOEU5L0ZDRENEMTI0ODMzMjExRUM4OTBBMEJBRjVBNDBENTc3L3FPMmYz SmRwNzIwM1FibmRybkk5TVlGbDUxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPMmYzSmRwNzIwM1FibmRybkk5TVlGbDUxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjI4RTkvRkNEQ0QxMjQ4MzMyMTFFQzg5MEEwQkFGNUE0 MEQ1NzcvcU8yZjNKZHA3MjAzUWJuZHJuSTlNWUZsNTFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTNMNTF8itwGrmOsrIA5QHS5ZKYT2l 6OcYN96pGrEtPPnsTNSsVBAQeYtp9g4bMfQinlupWVDVLnrTP3ZoBRTMRu7Z7yFO QPZIg7f79zFBd1NpGKDnyVkCScCznyZSAnjOOQz78dXdGtyUux3sRltN5SqLRkXM ke9awaYRD24Xr4S5Kx45AEsgxUPS7l5PsLaOGNGdIH470DI3CL25U4nAfwHENo+O wX1f0iReeYSyfEUo1BxAz3t4R/S7Px1YPsmZwtTsp4c6pEaBgJcGMFQWI92Ezhi9 5De8USnleC8RlyE1L+3xZhDel91zmisjWPCOxi77wPReQDquUyipPMsB -----END CERTIFICATE-----Generated at Sat Dec 20 01:13:13 2025 by rpki-client