This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json) Hash identifier: BqcwJTQb/LZF9l/yv8x58VzTqEor2Bvx1ld4NrdCnKc= Subject key identifier: 29:B3:50:61:F5:F9:69:81:04:3C:11:A5:58:DE:2E:49:6B:0C:51:3B Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20 Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520 Certificate serial: 03BC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft Manifest number: 03B3 Signing time: Tue 09 Dec 2025 03:32:06 +0000 Manifest this update: Tue 09 Dec 2025 03:32:06 +0000 Manifest next update: Thu 11 Dec 2025 03:32:06 +0000 Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: S6xgU1Z5tPQhDHURVap8+dtdTiv6YE38nUmP5ZKkSRU=) 2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=) 3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=) 4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=) 5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 03:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520 Validity Not Before: Dec 9 03:32:06 2025 GMT Not After : Dec 11 03:32:06 2025 GMT Subject: CN=69379836-0215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:49:14:7b:4a:1d:6c:5c:9b:fb:ff:61:98:ca: 1e:0a:ad:df:d8:c6:7f:79:58:c6:dd:0d:0e:45:f8: cb:ca:bd:f4:e5:fb:dc:b1:ac:d6:db:f6:d4:09:96: f1:32:0c:03:9c:34:83:0b:31:c6:fa:b5:4b:8e:1f: ac:05:c4:c4:a0:77:a8:ae:38:9f:b0:ec:f7:bf:9c: 3c:06:37:49:d0:54:95:5b:a6:2d:d1:b5:c4:04:ed: 9f:9d:a9:34:8d:e9:25:e5:b6:73:fc:82:43:f5:60: 64:2c:ce:83:ca:4a:7b:5c:2c:5d:64:aa:6b:d3:12: 9d:a2:32:fd:d9:b4:7f:e6:7d:eb:e7:f8:b2:17:0f: 5f:2a:1c:51:4c:43:19:6a:58:8f:68:d1:9f:50:e8: 6c:0e:f2:34:83:ed:c0:39:01:8c:0f:de:0c:a2:ce: 1a:1a:65:cb:44:1d:1b:a1:3a:8a:58:52:10:f0:b5: c9:a9:b9:21:b6:60:e8:b1:3b:55:1a:de:37:d9:76: 12:04:33:46:44:9a:d0:83:c4:ec:86:07:39:9d:5c: b0:db:43:5b:8a:2f:bf:2a:d6:9d:55:d9:0c:b6:00: c8:6f:b9:82:4b:8e:70:26:6e:d4:d8:1b:9b:8a:96: e6:31:c8:48:92:9f:57:3c:19:ca:fa:97:0b:2c:de: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B3:50:61:F5:F9:69:81:04:3C:11:A5:58:DE:2E:49:6B:0C:51:3B X509v3 Authority Key Identifier: keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:47:29:d9:ac:11:44:1c:58:54:1f:27:2a:23:08:32:9c:3c: 49:1a:21:4b:52:75:33:73:d7:86:74:f3:80:44:54:29:56:5b: 9f:15:6b:4b:d8:4c:b4:35:31:48:8a:d9:98:32:c6:df:c2:49: 4a:f5:83:2e:c5:b2:e8:6c:b9:e9:f9:ab:d5:18:bd:78:9b:b5: f4:ec:1d:27:e1:f3:00:4c:da:06:81:da:76:e2:f8:1d:f9:08: 23:57:83:81:68:8e:65:75:b8:a8:b2:81:57:2b:7a:e8:c3:53: 4c:5f:8c:11:5d:8e:dd:a7:6b:8b:74:15:81:37:34:44:e2:aa: 9b:24:fd:1c:9e:fa:21:2d:a1:d5:71:ec:d9:ed:53:30:e2:60: ec:d7:62:76:0e:59:f2:34:6c:f4:62:f4:96:27:b4:d7:81:0f: d8:4a:fa:58:1b:c4:24:7a:b7:06:ad:f3:d7:59:df:53:4b:3a: 98:db:87:78:c4:a7:7f:a5:b4:a5:28:17:a4:7e:1f:96:08:b6: 3b:ec:62:b2:b6:9f:33:27:05:05:85:98:10:4f:a0:59:e4:6f: 66:f2:c5:60:8d:c8:72:65:98:0c:61:ab:25:3f:f4:f5:e5:6f: b2:af:99:1c:2f:c1:4d:a6:dc:63:9e:07:5c:e1:cf:d6:9f:ea: 87:cd:dc:53 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RThCRjdBRjExMC8GA1UEBRMoQzczM0VEMUE3Njc0MjBFRUY1M0UwNTYxODc4MTBC RTM5MzRBQTUyMDAeFw0yNTEyMDkwMzMyMDZaFw0yNTEyMTEwMzMyMDZaMBgxFjAU BgNVBAMTDTY5Mzc5ODM2LTAyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDrSRR7Sh1sXJv7/2GYyh4Krd/Yxn95WMbdDQ5F+MvKvfTl+9yxrNbb9tQJ lvEyDAOcNIMLMcb6tUuOH6wFxMSgd6iuOJ+w7Pe/nDwGN0nQVJVbpi3RtcQE7Z+d qTSN6SXltnP8gkP1YGQszoPKSntcLF1kqmvTEp2iMv3ZtH/mfevn+LIXD18qHFFM QxlqWI9o0Z9Q6GwO8jSD7cA5AYwP3gyizhoaZctEHRuhOopYUhDwtcmpuSG2YOix O1Ua3jfZdhIEM0ZEmtCDxOyGBzmdXLDbQ1uKL78q1p1V2Qy2AMhvuYJLjnAmbtTY G5uKluYxyEiSn1c8Gcr6lwss3vwDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKbNQ YfX5aYEEPBGlWN4uSWsMUTswHwYDVR0jBBgwFoAUxzPtGnZ0IO71PgVhh4EL45NK pSAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkU4QkY3L0VFRTZFRkFDMEFBMjExRUVBQTFFMjE0MzRBRDlFNkZDL3h6UHRH blowSU83MVBnVmhoNEVMNDVOS3BTQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3h6UHRHblowSU83MVBnVmhoNEVMNDVOS3BTQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RThCRjcvRUVFNkVGQUMwQUEyMTFFRUFBMUUyMTQzNEFE OUU2RkMveHpQdEduWjBJTzcxUGdWaGg0RUw0NU5LcFNBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYRynZrBFEHFhUHycqIwgynDxJGiFL UnUzc9eGdPOARFQpVlufFWtL2Ey0NTFIitmYMsbfwklK9YMuxbLobLnp+avVGL14 m7X07B0n4fMATNoGgdp24vgd+QgjV4OBaI5ldbiosoFXK3row1NMX4wRXY7dp2uL dBWBNzRE4qqbJP0cnvohLaHVcezZ7VMw4mDs12J2DlnyNGz0YvSWJ7TXgQ/YSvpY G8QkercGrfPXWd9TSzqY24d4xKd/pbSlKBekfh+WCLY77GKytp8zJwUFhZgQT6BZ 5G9m8sVgjchyZZgMYaslP/T15W+yr5kcL8FNptxjngdc4c/Wn+qHzdxT -----END CERTIFICATE-----Generated at Tue Dec 9 12:18:05 2025 by rpki-client