This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft File: KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json) Hash identifier: KhUsm6VCuv4zonQSaZWvZJLv0IgrdjhNHp8l6sp3co4= Subject key identifier: 93:72:5F:4A:0B:A4:39:76:53:33:58:51:8B:25:A3:00:CA:7B:16:41 Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65 Certificate issuer: /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665 Certificate serial: 0DED Authority info access: rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft Manifest number: 0DED Signing time: Thu 11 Dec 2025 01:01:13 +0000 Manifest this update: Thu 11 Dec 2025 01:01:12 +0000 Manifest next update: Sat 13 Dec 2025 01:01:12 +0000 Files and hashes: 1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: AcIMr22+soJjBh4SSc3iv0Ov8ZDpE6sLYBc5Rms7Wm4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 13 Dec 2025 00:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3565 (0xded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665 Validity Not Before: Dec 11 01:01:12 2025 GMT Not After : Dec 13 01:01:12 2025 GMT Subject: CN=693a17d9-fd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:95:74:0c:db:f3:64:82:b4:9a:74:66:4e: 94:4e:81:f7:6b:65:70:5c:00:2a:46:a0:77:de:8d: ed:db:06:13:99:ab:5b:92:df:e5:18:9d:95:ac:64: c7:bc:80:40:80:cf:f2:e7:33:03:fa:a5:7f:8e:2b: 4c:b6:57:2f:60:22:41:86:63:bf:28:4f:2d:de:13: 49:d7:cd:63:85:0e:45:1b:7b:14:0b:b6:bc:a3:4c: fb:5c:91:00:ef:00:11:1a:0a:04:0a:66:af:63:57: 0f:16:87:40:32:64:a7:e4:cb:f1:6c:db:94:11:e8: 2d:39:92:4c:f7:f9:c4:c2:a6:f1:9e:3f:ea:4a:a2: 3d:52:c4:e9:92:05:77:19:94:f4:41:fe:c7:b8:f4: 70:e5:b4:82:27:d7:5d:e0:47:e7:51:c1:eb:6b:86: 66:2c:be:2a:dc:3f:e8:b1:91:3b:55:b0:e2:98:cd: 77:76:2b:64:a8:2f:c6:e5:cd:e7:ca:d1:bc:4d:cf: 93:23:e3:b3:6f:ca:e6:1d:3a:1b:75:f3:0f:5d:c5: 0b:a7:cc:02:1f:03:43:97:b2:09:cc:28:ef:d5:a1: a5:d9:52:e1:3e:98:12:6f:a3:d1:f8:7a:63:e8:23: f6:3e:5a:7b:ba:34:18:c5:79:a2:50:83:0c:a0:15: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:72:5F:4A:0B:A4:39:76:53:33:58:51:8B:25:A3:00:CA:7B:16:41 X509v3 Authority Key Identifier: keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:01:d8:b2:8d:d7:24:52:ac:e6:92:db:b8:7a:c2:fc:10:5d: d1:03:c8:d2:c4:9f:f9:88:ca:76:42:45:50:1f:e8:24:6b:ca: 73:40:41:76:28:45:b2:93:41:ba:6e:db:3d:ef:fd:22:ba:45: c0:f7:e0:2c:1c:5d:cf:c8:bb:10:d8:34:b4:e9:bf:e4:72:06: bf:b8:34:9b:27:dd:14:c3:b5:e2:07:1f:d3:58:6a:60:32:0a: 6c:38:42:36:d0:d5:45:5d:46:f0:f6:6e:ee:4b:93:2b:37:72: ce:d7:af:4b:81:a2:ba:e4:b7:93:f4:5d:7a:0a:e7:58:2a:8c: ac:34:f7:5e:22:6c:19:58:54:29:93:34:ee:85:a3:28:31:10: 14:a6:a1:72:c9:97:66:68:b5:08:3d:fa:17:96:37:ca:3a:52: ad:3e:ec:7a:d6:4d:98:23:9f:cd:e1:e2:34:14:88:70:03:24: ed:2d:68:8f:20:a1:e7:86:be:1a:63:aa:ac:bd:87:f2:b8:a7: 86:88:a0:e0:1e:37:8e:c2:1c:01:9b:39:8e:b5:a6:86:a4:ff: 83:76:d4:5d:c0:00:61:d2:4c:77:4c:ca:81:c5:d9:a3:3e:72: 6a:1f:0e:3d:fc:6b:49:75:96:d4:97:62:a9:18:94:3f:85:48: bb:78:45:52 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICDe0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QjQ5RkFSSTExMC8GA1UEBRMoMjlDMERERTI0MzA1RjIwRTRFNUFEMEJCRkRDMDBG RjE3NDhDQTY2NTAeFw0yNTEyMTEwMTAxMTJaFw0yNTEyMTMwMTAxMTJaMBgxFjAU BgNVBAMTDTY5M2ExN2Q5LWZkMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwsZV0DNvzZIK0mnRmTpROgfdrZXBcACpGoHfeje3bBhOZq1uS3+UYnZWs ZMe8gECAz/LnMwP6pX+OK0y2Vy9gIkGGY78oTy3eE0nXzWOFDkUbexQLtryjTPtc kQDvABEaCgQKZq9jVw8Wh0AyZKfky/Fs25QR6C05kkz3+cTCpvGeP+pKoj1SxOmS BXcZlPRB/se49HDltIIn113gR+dRwetrhmYsvircP+ixkTtVsOKYzXd2K2SoL8bl zefK0bxNz5Mj47NvyuYdOht18w9dxQunzAIfA0OXsgnMKO/VoaXZUuE+mBJvo9H4 emPoI/Y+Wnu6NBjFeaJQgwygFZw3AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUk3Jf SgukOXZTM1hRiyWjAMp7FkEwHwYDVR0jBBgwFoAUKcDd4kMF8g5OWtC7/cAP8XSM pmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkI0OUZBLzhFOTcyRUNDMUMxQzExRTY5OUVBNDUwQ0Y4QUVBMjI4L0tjRGQ0 a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl L0tjRGQ0a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2QjQ5RkEvOEU5NzJFQ0MxQzFDMTFFNjk5RUE0NTBDRjhBRUEy MjgvS2NEZDRrTUY4ZzVPV3RDN19jQVA4WFNNcG1VLm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoAdiyjdckUqzmktu4esL8EF3RA8jSxJ/5 iMp2QkVQH+gka8pzQEF2KEWyk0G6bts97/0iukXA9+AsHF3PyLsQ2DS06b/kcga/ uDSbJ90Uw7XiBx/TWGpgMgpsOEI20NVFXUbw9m7uS5MrN3LO169LgaK65LeT9F16 CudYKoysNPdeImwZWFQpkzTuhaMoMRAUpqFyyZdmaLUIPfoXljfKOlKtPux61k2Y I5/N4eI0FIhwAyTtLWiPIKHnhr4aY6qsvYfyuKeGiKDgHjeOwhwBmzmOtaaGpP+D dtRdwABh0kx3TMqBxdmjPnJqHw49/GtJdZbUl2KpGJQ/hUi7eEVS -----END CERTIFICATE-----Generated at Thu Dec 11 20:09:46 2025 by rpki-client