This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json) Hash identifier: wrmNtBUKYF23605ZiIbnkw04AWlhqgaegBUf/cdQG7k= Subject key identifier: 00:34:BF:F7:EB:3B:FF:27:8E:0E:D1:86:D4:F2:DF:66:3A:66:9B:1C Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB Certificate serial: 036A Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft Manifest number: 0368 Signing time: Thu 04 Dec 2025 03:42:14 +0000 Manifest this update: Thu 04 Dec 2025 03:42:14 +0000 Manifest next update: Sat 06 Dec 2025 03:42:14 +0000 Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: KXhDlBHBzd+E9hDDCrMNvAhc3d/1yXyhPdYu9DKovVo=) 2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=) 3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 06 Dec 2025 03:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 874 (0x36a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB Validity Not Before: Dec 4 03:42:14 2025 GMT Not After : Dec 6 03:42:14 2025 GMT Subject: CN=69310316-eb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:4c:a5:80:5b:ae:cc:b9:e9:d4:fe:4b:33: 77:a0:7f:c4:25:26:6c:e7:4a:69:bf:8b:86:b8:f2: 4e:ec:75:04:c1:b1:d5:cc:b2:09:4a:40:28:17:8f: b6:0f:77:9b:b4:b4:3f:31:ab:8a:6b:4d:e3:6a:7b: 94:d2:7f:e9:1b:d9:ac:7b:c2:85:f6:a6:81:de:a5: da:04:c8:9a:05:ff:af:b8:18:b1:14:76:5e:47:1e: b0:85:54:4c:d1:f8:b6:93:7c:bd:5f:f0:87:db:bd: 99:36:25:f2:09:f3:20:ba:59:fd:10:be:7b:44:6b: c5:ee:42:7f:7e:a0:be:e8:58:eb:9c:90:4a:df:09: d8:19:5b:61:eb:c4:8c:38:99:75:b0:2f:24:25:d8: 04:72:57:76:f1:86:e5:d2:e9:7b:1b:e7:65:06:4a: 71:20:93:06:2b:58:c1:a0:b2:5f:8d:5a:fb:25:59: 48:02:35:ab:4c:cd:ff:d8:f5:7d:05:b9:4a:e8:93: 2d:88:18:b4:df:9f:4a:da:1c:04:de:c1:22:bb:70: cb:82:7c:a7:41:ac:a5:0d:ab:11:ae:7d:3d:31:b3: 56:28:dd:82:59:12:b9:3b:03:6b:d8:35:17:1e:6d: bb:35:49:9d:ac:2e:03:1d:ad:92:a7:8c:a6:0b:88: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:34:BF:F7:EB:3B:FF:27:8E:0E:D1:86:D4:F2:DF:66:3A:66:9B:1C X509v3 Authority Key Identifier: keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:a8:ac:73:bc:75:bb:58:e5:fa:9e:61:cc:c4:a8:5e:ca:a4: 5b:fb:ec:f8:9f:a4:f6:be:5b:e4:71:64:63:a6:0d:db:b9:1e: 76:01:94:ab:1d:91:01:fc:6e:3d:19:62:3a:5b:82:b7:07:8d: 7f:e3:72:3a:bb:47:65:5f:21:25:9f:e4:7f:f4:32:be:18:f1: 02:8a:59:d4:49:f1:77:50:da:54:6a:de:f4:cb:2e:89:f7:2f: cf:b5:2c:9c:98:92:90:93:cd:e9:85:81:93:65:61:d3:7b:83: 40:d1:47:16:cd:ee:32:0f:de:2a:fc:93:ca:89:d2:29:a8:28: 28:a5:e4:62:66:50:d1:6a:b9:a2:15:bc:e1:df:d8:b3:25:fc: 8c:24:55:a8:e3:d6:48:53:c5:5f:ec:6a:5a:47:55:54:ab:1c: 8d:83:06:13:c1:34:26:3e:a4:f0:fd:ab:d3:7c:69:e4:a0:af: 7a:18:0c:0a:85:fa:97:34:0f:30:12:95:6c:ea:18:a9:36:b7: 4f:e6:0f:4a:7f:3e:d7:25:83:fd:8f:52:db:36:73:ad:20:8a: 64:dd:49:64:1e:c1:91:9a:d0:ff:23:e0:d7:30:e7:c5:6c:39: bd:d0:c3:e7:b0:28:6b:7a:e1:78:8a:b2:be:d2:5d:9b:c6:ca: e1:f5:4b:62 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA2owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjczMUZBUjExMC8GA1UEBRMoQzY0NzM2MjVFQUVGRDY3MzZDOTA3RDIzMUREOUM1 REJEQjlGNUVBQjAeFw0yNTEyMDQwMzQyMTRaFw0yNTEyMDYwMzQyMTRaMBgxFjAU BgNVBAMTDTY5MzEwMzE2LWViN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDOMkylgFuuzLnp1P5LM3egf8QlJmznSmm/i4a48k7sdQTBsdXMsglKQCgX j7YPd5u0tD8xq4prTeNqe5TSf+kb2ax7woX2poHepdoEyJoF/6+4GLEUdl5HHrCF VEzR+LaTfL1f8IfbvZk2JfIJ8yC6Wf0QvntEa8XuQn9+oL7oWOuckErfCdgZW2Hr xIw4mXWwLyQl2ARyV3bxhuXS6Xsb52UGSnEgkwYrWMGgsl+NWvslWUgCNatMzf/Y 9X0FuUroky2IGLTfn0raHATewSK7cMuCfKdBrKUNqxGufT0xs1Yo3YJZErk7A2vY NRcebbs1SZ2sLgMdrZKnjKYLiDxDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUADS/ 9+s7/yeODtGG1PLfZjpmmxwwHwYDVR0jBBgwFoAUxkc2Jerv1nNskH0jHdnF29uf XqswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkY3MzFGLzkzNDBEODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDL3hrYzJK ZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L3hrYzJKZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2RjczMUYvOTM0MEQ4MjYzNzk3MTFFRTk2RkI3QTMxNEFEOUU2 RkMveGtjMkplcnYxbk5za0gwakhkbkYyOXVmWHFzLm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDcqKxzvHW7WOX6nmHMxKheyqRb++z4n6T2 vlvkcWRjpg3buR52AZSrHZEB/G49GWI6W4K3B41/43I6u0dlXyEln+R/9DK+GPEC ilnUSfF3UNpUat70yy6J9y/PtSycmJKQk83phYGTZWHTe4NA0UcWze4yD94q/JPK idIpqCgopeRiZlDRarmiFbzh39izJfyMJFWo49ZIU8Vf7GpaR1VUqxyNgwYTwTQm PqTw/avTfGnkoK96GAwKhfqXNA8wEpVs6hipNrdP5g9Kfz7XJYP9j1LbNnOtIIpk 3UlkHsGRmtD/I+DXMOfFbDm90MPnsChreuF4irK+0l2bxsrh9Uti -----END CERTIFICATE-----Generated at Thu Dec 4 23:39:59 2025 by rpki-client