This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json) Hash identifier: aYm6xRF+8+NXZQJj3DG6FafjLJfCWmyV/CuCbRRrMFU= Subject key identifier: A3:4C:65:C5:3C:2A:E3:DD:89:C0:0E:59:72:AD:49:31:A4:ED:E6:2E Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35 Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735 Certificate serial: 0378 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft Manifest number: 0372 Signing time: Tue 09 Dec 2025 03:40:46 +0000 Manifest this update: Tue 09 Dec 2025 03:40:46 +0000 Manifest next update: Thu 11 Dec 2025 03:40:46 +0000 Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: xReO+NdfPoJP8DroileXpR+mOeszQO4GsgvvyIlG8rQ=) 2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=) 3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=) 4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=) 5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=) 6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 03:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735 Validity Not Before: Dec 9 03:40:46 2025 GMT Not After : Dec 11 03:40:46 2025 GMT Subject: CN=69379a3e-3141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:73:f1:4e:1e:c5:5d:82:4b:2d:d5:98:0f:9e: 16:a2:4a:00:fd:5d:af:ef:8b:24:06:7c:f8:b1:e1: a8:03:fb:29:74:a7:fe:d1:22:0c:6c:6a:ec:5a:c6: 02:17:07:de:dd:f4:8c:c9:e0:7d:71:cf:a4:ff:4d: 38:1f:43:d4:d1:3f:d0:96:f4:6a:05:25:2e:26:22: 81:77:93:9c:f2:49:83:7e:de:5a:e8:ba:c2:0e:7f: b6:9d:fd:3e:bc:7a:2b:c3:23:22:c6:99:63:5c:15: d8:12:ec:c7:82:eb:b6:fb:78:ef:dc:9f:f8:f7:f5: 82:87:8d:96:bc:85:74:3e:2f:b3:ca:14:29:2a:2c: 16:a4:8b:b2:20:89:66:dd:e8:97:6d:79:31:ec:a0: 2f:e1:93:65:7a:44:d2:a8:55:74:5a:75:43:24:c2: 0b:25:12:af:42:0a:20:28:36:66:99:a5:5c:47:ee: 7c:87:5f:f6:c3:3b:0d:01:9a:2a:b1:80:6f:7a:08: a5:65:b6:c7:28:d0:46:d3:5f:f2:0d:56:7d:ec:db: c4:d3:80:70:33:18:a1:3d:78:ed:cf:a7:3e:ab:0b: eb:cb:fc:26:f9:78:d3:f3:42:c1:84:5e:5b:e8:c1: 97:a1:7b:98:80:48:91:89:01:6d:94:91:60:6e:fb: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:65:C5:3C:2A:E3:DD:89:C0:0E:59:72:AD:49:31:A4:ED:E6:2E X509v3 Authority Key Identifier: keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:89:78:61:f3:e3:e4:46:03:1b:c0:0c:d2:e9:f5:57:c3:98: 18:2f:fa:fa:0f:58:ae:76:b6:06:69:ee:7e:9d:66:b5:f7:8f: 1d:22:c2:51:3d:1e:68:f6:fa:7f:d3:56:19:6e:68:bd:a9:da: 3b:d9:b5:41:0f:99:a7:57:4d:8d:c1:e1:6c:9d:9c:86:5c:6b: 94:e0:f8:3a:d3:5f:4e:c6:96:30:44:35:6e:dc:e0:fc:1a:c4: 50:12:69:64:e3:38:85:2e:27:57:64:5e:55:1c:e7:91:b3:ab: 18:e8:62:19:fb:91:d8:a3:a4:7f:34:3b:c6:6f:31:a3:a0:e1: b2:97:21:b0:54:c3:97:59:04:ab:ff:7b:7a:90:ff:d1:d6:d5: 0b:5b:c0:00:ce:bb:41:7d:99:34:e9:c6:d6:81:70:14:a9:80: 3b:24:1d:f4:6d:ce:54:3c:d6:7c:5b:97:30:fb:22:a2:23:97: cc:57:62:74:8d:61:b3:d1:45:9e:c9:ce:15:e1:f3:4e:3b:0a: 9d:07:c9:b7:88:d3:de:5a:ec:91:e7:73:d6:68:12:56:5a:60: 2a:41:f4:89:77:99:b5:48:0b:fa:d2:fd:8f:1c:ba:a0:c9:e5: 45:9e:a4:96:fe:74:f4:a2:cb:62:8d:7f:1e:93:c8:62:8d:d0: 02:57:47:7e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTdCOTlBRjExMC8GA1UEBRMoQjQxMDlCRURDNDc3ODcyN0UyNEU5QTM3N0NDNjE3 QkMwN0MwQTczNTAeFw0yNTEyMDkwMzQwNDZaFw0yNTEyMTEwMzQwNDZaMBgxFjAU BgNVBAMTDTY5Mzc5YTNlLTMxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDqc/FOHsVdgkst1ZgPnhaiSgD9Xa/viyQGfPix4agD+yl0p/7RIgxsauxa xgIXB97d9IzJ4H1xz6T/TTgfQ9TRP9CW9GoFJS4mIoF3k5zySYN+3lrousIOf7ad /T68eivDIyLGmWNcFdgS7MeC67b7eO/cn/j39YKHjZa8hXQ+L7PKFCkqLBaki7Ig iWbd6JdteTHsoC/hk2V6RNKoVXRadUMkwgslEq9CCiAoNmaZpVxH7nyHX/bDOw0B miqxgG96CKVltsco0EbTX/INVn3s28TTgHAzGKE9eO3Ppz6rC+vL/Cb5eNPzQsGE XlvowZehe5iASJGJAW2UkWBu+4y1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUo0xl xTwq492JwA5Zcq1JMaTt5i4wHwYDVR0jBBgwFoAUtBCb7cR3hyfiTpo3fMYXvAfA pzUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk3Qjk5LzExRkUzNjAwMzc2MDExRUVBMjhBMjEyQzRBRDlFNkZDL3RCQ2I3 Y1IzaHlmaVRwbzNmTVlYdkFmQXB6VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3RCQ2I3Y1IzaHlmaVRwbzNmTVlYdkFmQXB6VS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTdCOTkvMTFGRTM2MDAzNzYwMTFFRUEyOEEyMTJDNEFE OUU2RkMvdEJDYjdjUjNoeWZpVHBvM2ZNWVh2QWZBcHpVLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2iXhh8+PkRgMbwAzS6fVXw5gYL/r6 D1iudrYGae5+nWa1948dIsJRPR5o9vp/01YZbmi9qdo72bVBD5mnV02NweFsnZyG XGuU4Pg6019OxpYwRDVu3OD8GsRQEmlk4ziFLidXZF5VHOeRs6sY6GIZ+5HYo6R/ NDvGbzGjoOGylyGwVMOXWQSr/3t6kP/R1tULW8AAzrtBfZk06cbWgXAUqYA7JB30 bc5UPNZ8W5cw+yKiI5fMV2J0jWGz0UWeyc4V4fNOOwqdB8m3iNPeWuyR53PWaBJW WmAqQfSJd5m1SAv60v2PHLqgyeVFnqSW/nT0ostijX8ek8hijdACV0d+ -----END CERTIFICATE-----Generated at Tue Dec 9 12:05:56 2025 by rpki-client