This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft File: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json) Hash identifier: mCM16CJURw2iUnx7bnZKbcFxeUFKC855QvTgo3Y9sQw= Subject key identifier: 3C:6A:8F:71:5D:E5:81:63:85:45:BA:3A:3D:74:B2:F0:89:84:DE:FE Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E Certificate issuer: /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E Certificate serial: 0334 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft Manifest number: 0332 Signing time: Tue 09 Dec 2025 03:47:13 +0000 Manifest this update: Tue 09 Dec 2025 03:47:12 +0000 Manifest next update: Thu 11 Dec 2025 03:47:12 +0000 Files and hashes: 1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: bVIgUuCv3IBeMTrfsyPERkLh7+1X2kyLHxMvDi2WsTY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 03:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E Validity Not Before: Dec 9 03:47:12 2025 GMT Not After : Dec 11 03:47:12 2025 GMT Subject: CN=69379bc1-3727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:d6:6f:da:ef:94:5c:9f:60:50:91:8b:3b: c9:90:5f:6c:82:02:28:e2:2a:cd:94:5c:40:72:cc: 40:be:38:ea:3a:60:ee:03:e5:6b:04:ff:9e:7f:4e: f9:d8:60:de:d2:e2:9e:9c:a4:2d:ba:e0:6b:10:e4: b7:16:eb:a1:87:21:e6:bd:bc:bb:62:50:09:a1:12: 87:b7:2a:40:76:41:5c:76:7a:b8:1e:c8:31:ff:0e: 4a:85:3e:8d:34:94:8b:74:ef:2e:df:58:1b:00:2c: d2:62:88:b2:ad:37:b2:91:f7:bb:f3:7f:01:a4:f7: d2:7b:10:8b:45:e1:d7:04:22:3e:6d:3a:3e:61:6e: a8:74:99:b6:05:13:cb:fb:d1:03:45:9b:86:45:a0: 51:ed:49:71:31:45:90:1e:b7:e1:72:d1:f3:45:07: 44:67:9f:2d:2d:da:85:81:72:74:cd:ce:c5:db:c2: d2:d2:f5:9e:10:e8:53:d3:54:0c:e5:b4:10:fb:1a: 24:48:0d:d7:65:d1:76:0c:94:76:0d:33:35:88:c4: f4:5a:61:99:38:e4:9a:46:59:6e:48:36:67:d4:cb: db:2f:07:eb:26:1f:b8:de:7e:e9:31:2e:e2:54:77: f5:0f:6c:7e:18:55:d8:e4:0f:af:d4:86:64:8d:ba: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6A:8F:71:5D:E5:81:63:85:45:BA:3A:3D:74:B2:F0:89:84:DE:FE X509v3 Authority Key Identifier: keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f9:23:4f:70:d0:5c:91:36:5b:82:b5:f6:83:eb:4e:dc:67: 76:8b:08:35:73:21:96:9a:c6:fd:3b:df:85:2e:43:58:e4:6c: cd:ff:6f:95:d5:22:99:fa:49:92:87:1a:ae:17:94:0e:59:01: 30:a6:82:9d:3b:f0:04:81:12:7e:65:83:71:cd:8b:0d:30:25: 54:0e:ef:5f:81:a1:c8:67:6e:44:17:ef:6d:6b:95:0b:df:6b: 51:ca:79:92:30:3f:c0:6c:c7:b8:9b:e0:99:5c:84:bf:b4:57: 19:cb:17:52:c8:4b:8c:b6:e2:b6:b4:33:0c:9b:2a:cc:f1:76: 1b:b6:c7:cf:f6:6e:53:21:c9:c9:01:ba:17:81:b4:36:5d:c7: 8b:68:7c:9e:48:5e:eb:19:45:d6:9b:a3:e8:63:61:c5:ea:92: e6:4d:09:a7:84:4d:05:fc:16:0e:af:6a:da:68:fa:68:5f:f4: e4:f0:f8:06:b9:eb:78:2c:11:ba:6b:17:e6:0a:b0:16:8d:01: a7:46:24:de:e1:b9:25:5a:db:81:67:a7:bc:08:23:da:4c:b3: 65:ab:1d:7f:c6:5d:31:ea:74:19:21:40:81:23:5d:35:2d:54: 99:39:7e:d6:4b:1e:38:5d:2c:b5:e3:42:da:1f:f8:d5:10:d5: ce:14:c0:4b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REE5NkRBRjExMC8GA1UEBRMoODAzMDc3N0M3NEQxQUYxMjg5ODEwRTQ0RjVGRUND OUNGMDk3M0EwRTAeFw0yNTEyMDkwMzQ3MTJaFw0yNTEyMTEwMzQ3MTJaMBgxFjAU BgNVBAMTDTY5Mzc5YmMxLTM3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCzfdZv2u+UXJ9gUJGLO8mQX2yCAijiKs2UXEByzEC+OOo6YO4D5WsE/55/ TvnYYN7S4p6cpC264GsQ5LcW66GHIea9vLtiUAmhEoe3KkB2QVx2ergeyDH/DkqF Po00lIt07y7fWBsALNJiiLKtN7KR97vzfwGk99J7EItF4dcEIj5tOj5hbqh0mbYF E8v70QNFm4ZFoFHtSXExRZAet+Fy0fNFB0Rnny0t2oWBcnTNzsXbwtLS9Z4Q6FPT VAzltBD7GiRIDddl0XYMlHYNMzWIxPRaYZk45JpGWW5INmfUy9svB+smH7jefukx LuJUd/UPbH4YVdjkD6/UhmSNuo9rAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPGqP cV3lgWOFRbo6PXSy8ImE3v4wHwYDVR0jBBgwFoAUgDB3fHTRrxKJgQ5E9f7MnPCX Og4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRBOTZELzc5MEEwNDJDNjZDRDExRUU5NTNFRDE3MDRBRDlFNkZDL2dEQjNm SFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2dEQjNmSFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REE5NkQvNzkwQTA0MkM2NkNEMTFFRTk1M0VEMTcwNEFE OUU2RkMvZ0RCM2ZIVFJyeEtKZ1E1RTlmN01uUENYT2c0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBl+SNPcNBckTZbgrX2g+tO3Gd2iwg1 cyGWmsb9O9+FLkNY5GzN/2+V1SKZ+kmShxquF5QOWQEwpoKdO/AEgRJ+ZYNxzYsN MCVUDu9fgaHIZ25EF+9ta5UL32tRynmSMD/AbMe4m+CZXIS/tFcZyxdSyEuMtuK2 tDMMmyrM8XYbtsfP9m5TIcnJAboXgbQ2XceLaHyeSF7rGUXWm6PoY2HF6pLmTQmn hE0F/BYOr2raaPpoX/Tk8PgGuet4LBG6axfmCrAWjQGnRiTe4bklWtuBZ6e8CCPa TLNlqx1/xl0x6nQZIUCBI101LVSZOX7WSx44XSy140LaH/jVENXOFMBL -----END CERTIFICATE-----Generated at Tue Dec 9 12:03:43 2025 by rpki-client