This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json) Hash identifier: 1icNS6SbI2YcHPb525ue2WrVhpIGH0xcD2/fXaDnhG0= Subject key identifier: 40:F7:15:85:53:AD:3A:7B:FF:D9:30:0D:97:93:E5:AA:D9:08:5D:C1 Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB Certificate serial: 0F66 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft Manifest number: 0F5E Signing time: Sun 21 Dec 2025 00:35:16 +0000 Manifest this update: Sun 21 Dec 2025 00:35:13 +0000 Manifest next update: Tue 23 Dec 2025 00:35:13 +0000 Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: tav7BgOMw057pAudufB/7xKStgwHHq6GLZo8maZjgF8=) 2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 23 Dec 2025 00:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3942 (0xf66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB Validity Not Before: Dec 21 00:35:13 2025 GMT Not After : Dec 23 00:35:13 2025 GMT Subject: CN=694740c1-9e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:7f:bb:84:19:35:73:26:4c:ee:47:a9:0b: 90:0a:53:f3:30:1d:49:fb:b8:61:90:18:b8:31:04: 62:96:a4:05:ee:90:cd:6c:f4:3e:03:00:37:31:32: 29:87:24:23:25:57:60:0f:1e:07:4c:29:51:c1:09: 33:b6:e6:b6:a4:0f:7f:89:ae:99:7d:3e:a6:e4:88: 15:a4:14:48:a4:e6:77:63:e1:38:96:2b:df:07:c8: cb:7f:6a:10:7c:2d:b4:e6:7c:88:f9:fc:4a:85:cd: 04:31:a8:9b:d1:4c:15:df:38:9b:1f:e5:94:af:f1: 24:7b:1f:dd:5c:5c:79:15:13:09:1e:c2:af:78:fd: 8d:8f:f2:ac:72:0d:3a:7d:de:dc:e5:8b:c8:5e:13: 26:6f:93:4c:aa:89:30:ac:77:75:2f:3f:66:34:bf: fc:eb:7c:b8:87:8c:2c:52:c5:02:4c:59:bc:ea:f5: 4d:23:46:45:74:f6:69:e8:5c:b3:61:7d:31:8a:cf: ca:d1:61:a3:e0:51:dd:af:00:8e:65:d9:ce:03:17: ab:da:83:ed:62:ac:a5:e1:b8:48:d3:d9:77:94:32: a8:cf:14:91:f6:89:4f:5a:69:2b:be:55:da:52:a7: bf:06:41:fe:e1:88:8b:00:e8:e5:5f:5a:10:3b:cd: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F7:15:85:53:AD:3A:7B:FF:D9:30:0D:97:93:E5:AA:D9:08:5D:C1 X509v3 Authority Key Identifier: keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:38:cf:53:29:2c:be:a1:7a:c5:13:d4:34:ca:f2:54:c6:e3: 39:99:bc:d2:ac:e6:46:cd:3c:fc:fe:11:10:76:5c:a9:ba:8b: 78:f1:4a:2a:26:6a:fa:0b:64:15:bc:7c:3c:af:d6:39:24:d1: fb:20:73:20:f8:4c:3c:01:ec:bc:c3:1a:db:34:f4:4d:0b:c6: 32:3a:1b:5a:76:09:20:a3:27:96:19:c5:b5:a9:96:f0:29:5b: 3b:a6:8c:42:fe:19:19:9c:b1:ec:08:ca:1d:82:bf:57:20:dd: b3:82:86:97:2d:a7:79:c5:69:0a:83:fb:dc:96:4e:7a:cf:61: 4e:25:fd:dd:93:a5:c3:4e:2f:e9:d9:07:7b:2b:de:c2:54:2c: d6:60:53:0f:51:29:fe:76:de:55:86:48:5f:81:84:90:c4:9f: b3:a8:ca:cf:ac:f2:5a:bb:fa:3e:9c:e5:f7:27:02:1b:5e:3d: 5e:0a:40:6f:20:97:14:77:87:c4:06:13:0a:b7:dd:5c:fe:1b: 3c:ff:bc:ec:68:e0:2f:c3:75:5a:d9:38:a2:2d:bd:ca:ce:54: 39:4e:31:08:98:07:ab:5f:66:ae:9f:5e:b4:6a:d5:b6:36:95: d6:20:cd:2e:f9:c3:32:12:70:d7:38:b3:04:ef:8c:8e:ca:fa: 5f:08:da:cc -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgICD2YwDQYJKoZIhvcNAQELBQAwTTEYMBYGA1UEAxMPTEFD TklDVE9BRlJJTklDMTEwLwYDVQQFEyhENUJGODdEQTM0NjZDODJEOEM2RDhFMzRF M0JERDg1QkNEMzlEMkVCMB4XDTI1MTIyMTAwMzUxM1oXDTI1MTIyMzAwMzUxM1ow GDEWMBQGA1UEAxMNNjk0NzQwYzEtOWU5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOC7f7uEGTVzJkzuR6kLkApT8zAdSfu4YZAYuDEEYpakBe6QzWz0 PgMANzEyKYckIyVXYA8eB0wpUcEJM7bmtqQPf4mumX0+puSIFaQUSKTmd2PhOJYr 3wfIy39qEHwttOZ8iPn8SoXNBDGom9FMFd84mx/llK/xJHsf3VxceRUTCR7Cr3j9 jY/yrHINOn3e3OWLyF4TJm+TTKqJMKx3dS8/ZjS//Ot8uIeMLFLFAkxZvOr1TSNG RXT2aehcs2F9MYrPytFho+BR3a8AjmXZzgMXq9qD7WKspeG4SNPZd5QyqM8UkfaJ T1ppK75V2lKnvwZB/uGIiwDo5V9aEDvNVyMCAwEAAaOCAlYwggJSMB0GA1UdDgQW BBRA9xWFU606e//ZMA2Xk+Wq2QhdwTAfBgNVHSMEGDAWgBTVv4faNGbILYxtjjTj vdhbzTnS6zAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbGFjbmljLzFiLUgyalJteUMy TWJZNDA0NzNZVzgwNTB1cy5jcmwwdgYIKwYBBQUHAQEEajBoMGYGCCsGAQUFBzAC hlpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC9sYWNuaWMtdG8tYWZyaW5pYy5jZXIwTwYD VR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jw a2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ8GCCsGAQUFBwELBIGSMIGP MFYGCCsGAQUFBzALhkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9y eS9sYWNuaWMvMWItSDJqUm15QzJNYlk0MDQ3M1lXODA1MHVzLm1mdDA1BggrBgEF BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2OM9TKSy+oXrFE9Q0yvJUxuM5 mbzSrOZGzTz8/hEQdlypuot48UoqJmr6C2QVvHw8r9Y5JNH7IHMg+Ew8Aey8wxrb NPRNC8YyOhtadgkgoyeWGcW1qZbwKVs7poxC/hkZnLHsCModgr9XIN2zgoaXLad5 xWkKg/vclk56z2FOJf3dk6XDTi/p2Qd7K97CVCzWYFMPUSn+dt5VhkhfgYSQxJ+z qMrPrPJau/o+nOX3JwIbXj1eCkBvIJcUd4fEBhMKt91c/hs8/7zsaOAvw3Va2Tii Lb3KzlQ5TjEImAerX2aun160atW2NpXWIM0u+cMyEnDXOLME74yOyvpfCNrM -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:40 2025 by rpki-client