This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft File: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft (raw, json) Hash identifier: zKAAsRztw4W4lVNDsB3rs5B7RtZFVFs/c6/c33yeJgk= Subject key identifier: 84:21:B7:EA:CE:39:A3:5C:58:82:0F:C7:B7:B1:2A:B2:B6:E8:85:7E Authority key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07 Certificate issuer: /CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207 Certificate serial: 0672 Authority info access: rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft Manifest number: 0672 Signing time: Thu 25 Dec 2025 02:18:41 +0000 Manifest this update: Thu 25 Dec 2025 02:18:40 +0000 Manifest next update: Sat 27 Dec 2025 02:18:40 +0000 Files and hashes: 1: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl (hash: 7o2FE5tgFf3nOxSQ0UnjGXBXgpqn7ArSf0kkfRLSqoY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 27 Dec 2025 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207 Validity Not Before: Dec 25 02:18:40 2025 GMT Not After : Dec 27 02:18:40 2025 GMT Subject: CN=694c9f01-c141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:b3:b7:18:f4:2d:4c:0d:b8:ab:b3:6e:3a: 20:ca:6f:80:1e:cf:72:70:54:42:2a:62:4f:7f:0e: dd:60:24:ec:55:7b:af:09:5d:36:ec:fc:41:72:fc: 35:6e:f0:28:11:9c:fc:b7:02:06:0a:6d:62:f0:e9: c4:35:a7:fb:9a:a2:e1:b8:c6:dd:ad:fb:9a:58:3d: 3b:bc:65:2e:40:07:1d:6f:5d:c8:3a:08:0b:3d:fe: 4d:95:e9:ac:1b:c8:74:e2:38:22:3f:5e:f8:a4:da: b6:13:a8:6a:ac:56:81:af:6f:e2:ed:f9:0d:d0:e7: 9a:f9:32:f0:18:6d:e2:83:0e:41:fd:93:db:b6:c2: ec:78:f8:73:5f:23:8f:8e:d4:10:6e:87:1d:3c:c7: 63:3d:64:08:ad:38:56:cf:4b:73:c8:fa:23:2c:2f: b9:2d:2c:14:e1:57:4f:9c:5f:91:91:fd:21:7f:03: 7a:6c:a6:a4:7e:da:58:d8:66:c5:29:63:9b:e6:12: 05:6b:b4:a3:ca:bb:c8:3f:4d:43:64:8c:97:71:d3: 96:a3:42:27:ed:e1:f9:aa:9b:13:55:fa:51:11:9f: 23:ea:dc:80:4d:f9:ad:69:41:4a:47:dc:2b:65:bc: 04:b1:2c:a6:08:e3:12:b6:5c:31:7c:db:24:60:27: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:21:B7:EA:CE:39:A3:5C:58:82:0F:C7:B7:B1:2A:B2:B6:E8:85:7E X509v3 Authority Key Identifier: keyid:04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:56:e9:31:71:13:78:94:00:78:83:bb:08:08:cf:75:72:f0: 47:b3:72:49:c6:eb:c9:e0:fb:8c:60:83:6b:bf:74:43:a8:96: a5:15:a6:31:2b:99:93:35:f0:0b:0e:1b:46:92:9e:09:61:ca: 04:73:e8:c3:e4:2e:74:86:b6:45:ce:f7:47:92:90:b4:2f:5f: 68:c8:b2:44:fd:42:6d:57:42:03:b9:57:78:14:0b:aa:2e:bd: 2b:e4:11:45:23:9c:bf:59:6b:53:64:65:e2:94:72:bc:1e:d4: 55:a0:04:38:3c:4b:c1:9b:ff:4d:07:32:3f:1d:c1:77:ee:0a: 97:29:8d:63:17:69:95:79:c7:97:96:9a:0c:bf:a3:fa:2b:28: 1c:58:74:57:ad:ab:6a:0c:7d:06:fc:ae:f8:cc:3f:c3:15:7d: 84:fa:71:48:0b:ac:a0:ce:01:50:fc:4d:85:1a:a7:4d:fc:04: d7:6b:a1:9b:cc:f7:53:50:07:18:ff:5c:bd:a5:a5:95:36:22: 6a:39:ad:79:02:ed:b1:6c:2d:ca:0e:ce:8e:e0:1d:a4:10:c1: c0:fa:18:fc:7a:a2:85:92:00:97:84:e5:c7:29:a0:b8:76:7c: 03:58:e9:f0:69:52:af:84:eb:1e:84:f9:8f:b0:c8:8a:63:36: 9d:c0:b4:a4 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTU4MjZSSTExMC8GA1UEBRMoMDRDOTBCMEY2QjZFNTk5NEY2NjU4N0UzNzBGN0Y3 Q0JFNjYxMTIwNzAeFw0yNTEyMjUwMjE4NDBaFw0yNTEyMjcwMjE4NDBaMBgxFjAU BgNVBAMTDTY5NGM5ZjAxLWMxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0LrO3GPQtTA24q7NuOiDKb4Aez3JwVEIqYk9/Dt1gJOxVe68JXTbs/EFy /DVu8CgRnPy3AgYKbWLw6cQ1p/uaouG4xt2t+5pYPTu8ZS5ABx1vXcg6CAs9/k2V 6awbyHTiOCI/Xvik2rYTqGqsVoGvb+Lt+Q3Q55r5MvAYbeKDDkH9k9u2wux4+HNf I4+O1BBuhx08x2M9ZAitOFbPS3PI+iMsL7ktLBThV0+cX5GR/SF/A3pspqR+2ljY ZsUpY5vmEgVrtKPKu8g/TUNkjJdx05ajQift4fmqmxNV+lERnyPq3IBN+a1pQUpH 3CtlvASxLKYI4xK2XDF82yRgJw5HAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUhCG3 6s45o1xYgg/Ht7EqsrbohX4wHwYDVR0jBBgwFoAUBMkLD2tuWZT2ZYfjcPf3y+Zh EgcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE1ODI2LzQ0NTkyNTFDRjA1NzExRUJBNUM4RDEzOEQ4QTAxNENFL0JNa0xE MnR1V1pUMlpZZmpjUGYzeS1aaEVnYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl L0JNa0xEMnR1V1pUMlpZZmpjUGYzeS1aaEVnYy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2MTU4MjYvNDQ1OTI1MUNGMDU3MTFFQkE1QzhEMTM4RDhBMDE0 Q0UvQk1rTEQydHVXWlQyWllmamNQZjN5LVpoRWdjLm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDTVukxcRN4lAB4g7sICM91cvBHs3JJxuvJ 4PuMYINrv3RDqJalFaYxK5mTNfALDhtGkp4JYcoEc+jD5C50hrZFzvdHkpC0L19o yLJE/UJtV0IDuVd4FAuqLr0r5BFFI5y/WWtTZGXilHK8HtRVoAQ4PEvBm/9NBzI/ HcF37gqXKY1jF2mVeceXlpoMv6P6KygcWHRXratqDH0G/K74zD/DFX2E+nFIC6yg zgFQ/E2FGqdN/ATXa6GbzPdTUAcY/1y9paWVNiJqOa15Au2xbC3KDs6O4B2kEMHA +hj8eqKFkgCXhOXHKaC4dnwDWOnwaVKvhOsehPmPsMiKYzadwLSk -----END CERTIFICATE-----Generated at Thu Dec 25 07:23:18 2025 by rpki-client