This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft File: x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json) Hash identifier: L+SsqrrtyIZs5RTie6B+8k6M9ZVlZZOAtsECHawgOwo= Subject key identifier: E9:DF:54:50:A7:0E:8D:8D:BD:70:CC:F9:2E:44:95:21:EE:4B:DA:C1 Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86 Certificate issuer: /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386 Certificate serial: 030D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft Manifest number: 030A Signing time: Tue 09 Dec 2025 03:53:14 +0000 Manifest this update: Tue 09 Dec 2025 03:53:13 +0000 Manifest next update: Thu 11 Dec 2025 03:53:13 +0000 Files and hashes: 1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: GQMUZPo3wqu0HvTWHAfZDwK63H2IJ6wxc5NLPFRHYFA=) 2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=) 3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=) 4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 03:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386 Validity Not Before: Dec 9 03:53:13 2025 GMT Not After : Dec 11 03:53:13 2025 GMT Subject: CN=69379d2a-8441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:04:93:7d:5c:39:ff:8e:84:37:50:28:71: 2b:4b:d8:d7:c7:3a:c2:ce:12:b2:15:6b:35:94:46: 9f:07:f9:e1:6f:13:a5:df:98:64:91:ef:1b:de:cc: 1a:56:21:9f:38:a2:e4:99:ec:c8:2c:8d:e3:3b:51: 55:30:73:f2:30:34:b4:bf:6c:49:83:6b:29:22:14: 96:98:a1:94:aa:01:06:74:49:eb:6a:9e:df:09:ea: 8e:52:a2:64:23:d4:af:49:b1:26:f9:b7:64:22:f8: 5a:46:52:b2:2f:4a:f1:fa:39:1d:53:d6:cb:e6:a6: 1b:0f:d3:99:d3:a2:33:d1:2e:71:c6:d8:83:e9:a1: ba:29:27:f6:60:34:f7:63:e2:70:58:c0:43:3e:c2: 36:f1:20:0b:3c:6e:28:33:2a:02:ee:b9:a6:a0:7f: 60:73:7f:f2:1a:6a:2e:dd:34:d4:ff:62:d9:8d:68: 7a:ad:5d:55:d0:ab:43:9a:98:52:5d:80:89:fb:d9: 5d:e7:8b:69:c8:9e:f2:78:ad:89:b8:a5:40:0b:af: 6a:b3:69:c9:14:02:f3:b2:27:d4:d5:20:2b:69:a3: 19:9d:fd:13:95:e6:ad:d0:50:5d:c5:e6:d7:c5:16: 6d:42:91:d2:4d:6f:e1:0e:c2:84:28:d2:77:ff:fc: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DF:54:50:A7:0E:8D:8D:BD:70:CC:F9:2E:44:95:21:EE:4B:DA:C1 X509v3 Authority Key Identifier: keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:70:22:54:20:6f:67:6c:f1:90:c4:3a:23:e5:cc:a4:fc:62: d1:24:4e:3c:f3:33:2b:15:4f:e9:c6:7a:06:9c:1f:e9:22:ea: a4:b0:2a:bc:64:82:f2:9e:4d:05:5e:8f:55:0b:a9:3c:5b:71: bd:e5:e6:04:b1:46:13:d4:4a:65:40:d7:f3:7b:64:57:e8:e1: 0e:47:b8:03:27:21:d5:d9:5b:b1:f1:40:b0:cf:26:09:59:42: 88:26:a6:09:d0:4a:e4:ab:2f:7e:68:bd:93:68:c2:f3:0d:a0: 96:fa:9e:10:1b:80:85:b7:fe:f1:df:68:b9:23:ca:bc:4b:7c: 98:ac:a7:c3:a5:bc:00:fa:23:ae:34:19:7d:9e:d7:2c:dc:25: af:94:e6:99:b2:97:33:7e:c5:15:01:dc:b5:75:11:f8:3d:8c: 4a:80:14:fe:60:7b:02:a3:cb:b3:bf:20:29:e5:e8:fc:05:04: f9:7c:c9:04:c0:22:aa:62:0c:1d:52:b7:c5:25:42:39:99:0b: 94:fb:dc:6b:3f:ae:1b:73:09:c1:92:2f:ea:23:3e:f8:e4:7e: f0:33:6a:4c:52:07:32:5a:37:34:93:ca:c3:89:62:02:a6:1c: 44:ee:3b:d6:6a:68:c8:af:1a:ef:7f:7b:1e:1e:82:7c:39:1e: bb:b9:62:f8 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzYyOUJBRjExMC8GA1UEBRMoQzdEMzQ2NjY4MkM1MTYwRTIyQjYyNTQ4RTk3RTIx MEZFNEExRTM4NjAeFw0yNTEyMDkwMzUzMTNaFw0yNTEyMTEwMzUzMTNaMBgxFjAU BgNVBAMTDTY5Mzc5ZDJhLTg0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDMPASTfVw5/46EN1AocStL2NfHOsLOErIVazWURp8H+eFvE6XfmGSR7xve zBpWIZ84ouSZ7MgsjeM7UVUwc/IwNLS/bEmDaykiFJaYoZSqAQZ0Setqnt8J6o5S omQj1K9JsSb5t2Qi+FpGUrIvSvH6OR1T1svmphsP05nTojPRLnHG2IPpobopJ/Zg NPdj4nBYwEM+wjbxIAs8bigzKgLuuaagf2Bzf/Iaai7dNNT/YtmNaHqtXVXQq0Oa mFJdgIn72V3ni2nInvJ4rYm4pUALr2qzackUAvOyJ9TVICtpoxmd/ROV5q3QUF3F 5tfFFm1CkdJNb+EOwoQo0nf//HY3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6d9U UKcOjY29cMz5LkSVIe5L2sEwHwYDVR0jBBgwFoAUx9NGZoLFFg4itiVI6X4hD+Sh 44YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkM2MjlCL0UwOTM2NkMwODQ3QzExRUU5MEIwNDQ0NjRBRDlFNkZDL3g5Tkda b0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3g5Tkdab0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QzYyOUIvRTA5MzY2QzA4NDdDMTFFRTkwQjA0NDQ2NEFE OUU2RkMveDlOR1pvTEZGZzRpdGlWSTZYNGhELVNoNDRZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDcCJUIG9nbPGQxDoj5cyk/GLRJE48 8zMrFU/pxnoGnB/pIuqksCq8ZILynk0FXo9VC6k8W3G95eYEsUYT1EplQNfze2RX 6OEOR7gDJyHV2Vux8UCwzyYJWUKIJqYJ0Erkqy9+aL2TaMLzDaCW+p4QG4CFt/7x 32i5I8q8S3yYrKfDpbwA+iOuNBl9ntcs3CWvlOaZspczfsUVAdy1dRH4PYxKgBT+ YHsCo8uzvyAp5ej8BQT5fMkEwCKqYgwdUrfFJUI5mQuU+9xrP64bcwnBki/qIz74 5H7wM2pMUgcyWjc0k8rDiWICphxE7jvWamjIrxrvf3seHoJ8OR67uWL4 -----END CERTIFICATE-----Generated at Tue Dec 9 12:19:15 2025 by rpki-client