This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json) Hash identifier: 7pC5sJP1T3iNS84el1TqfYe8jUrhxcclmQnBrKLr7wA= Subject key identifier: 70:9D:62:B7:13:F8:D5:81:2D:9A:48:BE:1C:58:CA:09:9B:C5:A2:53 Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7 Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7 Certificate serial: 0F1A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft Manifest number: 0F19 Signing time: Tue 09 Dec 2025 00:52:48 +0000 Manifest this update: Tue 09 Dec 2025 00:52:48 +0000 Manifest next update: Thu 11 Dec 2025 00:52:48 +0000 Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: QGADXpsKLVLAOwDxM1EsN6QUA13LzUgCXqEl0ck7rIM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 00:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3866 (0xf1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7 Validity Not Before: Dec 9 00:52:48 2025 GMT Not After : Dec 11 00:52:48 2025 GMT Subject: CN=693772e0-3e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e5:a2:92:7a:1d:45:40:3a:9b:31:13:64:a2: df:4a:28:9e:e1:57:d0:cd:e7:26:42:fa:87:01:db: e6:39:0c:0e:d4:be:f2:2f:b6:b1:12:cf:50:82:58: fd:0b:ea:90:bf:10:1e:69:7a:03:73:52:5f:f4:a1: a4:62:f5:58:a6:d2:87:08:2a:09:d1:c8:4c:36:f3: 53:48:93:a6:e3:a3:ac:1b:76:48:3c:62:d3:d9:d0: 2b:3b:75:49:c1:c4:72:31:8c:d6:cb:70:ab:61:15: 84:50:da:35:26:b4:08:61:e5:29:8b:d7:5d:c0:bf: bf:27:93:c7:23:ae:b1:1d:27:93:07:7f:e9:ba:21: 1a:78:84:2f:f2:82:41:f0:ff:1c:49:c6:79:47:d3: 56:0b:fd:63:d2:17:84:24:d2:31:40:65:81:e2:02: 04:19:a8:4a:eb:b1:c4:1d:f0:c9:df:ee:c3:60:25: 04:28:96:bb:ab:6f:ae:7c:bd:58:a7:09:63:71:c9: 90:ec:62:5e:69:32:f5:ed:ea:41:cd:22:9e:0d:6e: 93:ad:d9:22:f0:47:a6:be:17:30:2b:e8:9b:6f:bf: a4:04:dd:1a:32:88:9f:89:84:75:00:99:d9:d1:8a: 1c:be:8e:4f:87:ff:10:8b:a0:43:a2:97:51:36:5b: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:62:B7:13:F8:D5:81:2D:9A:48:BE:1C:58:CA:09:9B:C5:A2:53 X509v3 Authority Key Identifier: keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:67:20:7c:47:bd:55:b8:8c:3d:c9:6d:bb:ca:39:df:dd:d7: 7e:0a:ef:34:00:6c:f0:b5:f1:21:2f:77:12:6b:6f:47:c8:24: 33:87:0c:fa:5f:fd:d8:cb:f4:83:11:bf:6e:33:d5:8a:f1:5d: 3b:fc:b8:8b:17:7f:1a:6a:b3:10:1d:3d:1e:e5:5c:5f:12:94: 52:5b:6d:86:cf:93:cb:00:b6:78:64:ad:fe:11:c2:5d:66:39: c7:a6:a1:38:72:49:1c:74:af:ac:bc:56:2a:42:d9:e9:06:03: 5e:c9:23:35:99:96:60:d9:1e:1b:e4:26:41:a1:35:9b:3a:44: c6:e9:35:df:50:0d:46:16:27:6e:ba:7d:e8:73:a0:ab:f9:d7: f8:88:83:19:e6:cf:81:b1:90:23:a0:9c:73:e5:a5:b4:a0:78: 8b:bf:10:62:1c:ea:e5:fd:de:0e:b8:34:6d:1d:19:c1:3b:65: ca:34:63:12:d2:1b:07:1d:60:1e:15:71:34:79:a4:2b:10:db: 96:7e:ad:19:2a:8f:cc:ac:fe:dc:d6:fe:79:b4:2e:10:47:9d: 2e:12:1a:5a:49:21:fa:5d:6e:30:1d:e6:d6:e5:42:b0:ad:ab: 25:ab:2c:01:d6:97:93:3f:55:7b:81:4e:17:7d:9f:8f:08:06: 3a:4c:d5:42 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDxowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkZEMUVBRjExMC8GA1UEBRMoNDEyRDE5RjlBNEUxN0EwNEQwOUJBREM5MDJBQjBC MDkwODI0RUFENzAeFw0yNTEyMDkwMDUyNDhaFw0yNTEyMTEwMDUyNDhaMBgxFjAU BgNVBAMTDTY5Mzc3MmUwLTNlM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDz5aKSeh1FQDqbMRNkot9KKJ7hV9DN5yZC+ocB2+Y5DA7UvvIvtrESz1CC WP0L6pC/EB5pegNzUl/0oaRi9Vim0ocIKgnRyEw281NIk6bjo6wbdkg8YtPZ0Cs7 dUnBxHIxjNbLcKthFYRQ2jUmtAhh5SmL113Av78nk8cjrrEdJ5MHf+m6IRp4hC/y gkHw/xxJxnlH01YL/WPSF4Qk0jFAZYHiAgQZqErrscQd8Mnf7sNgJQQolrurb658 vVinCWNxyZDsYl5pMvXt6kHNIp4NbpOt2SLwR6a+FzAr6Jtvv6QE3RoyiJ+JhHUA mdnRihy+jk+H/xCLoEOil1E2W/EpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcJ1i txP41YEtmki+HFjKCZvFolMwHwYDVR0jBBgwFoAUQS0Z+aThegTQm63JAqsLCQgk 6tcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZGRDFFLzFBQUUyNjBDMzE2NTExRTVBRTY2NjA2N0Y4QUVBMjI4L1FTMFot YVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1FTMFotYVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkZEMUUvMUFBRTI2MEMzMTY1MTFFNUFFNjY2MDY3RjhB RUEyMjgvUVMwWi1hVGhlZ1RRbTYzSkFxc0xDUWdrNnRjLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACZyB8R71VuIw9yW27yjnf3dd+Cu80 AGzwtfEhL3cSa29HyCQzhwz6X/3Yy/SDEb9uM9WK8V07/LiLF38aarMQHT0e5Vxf EpRSW22Gz5PLALZ4ZK3+EcJdZjnHpqE4ckkcdK+svFYqQtnpBgNeySM1mZZg2R4b 5CZBoTWbOkTG6TXfUA1GFiduun3oc6Cr+df4iIMZ5s+BsZAjoJxz5aW0oHiLvxBi HOrl/d4OuDRtHRnBO2XKNGMS0hsHHWAeFXE0eaQrENuWfq0ZKo/MrP7c1v55tC4Q R50uEhpaSSH6XW4wHebW5UKwraslqywB1peTP1V7gU4XfZ+PCAY6TNVC -----END CERTIFICATE-----Generated at Tue Dec 9 12:06:15 2025 by rpki-client