This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json) Hash identifier: HK0MPn4fkwhxM9iNUSJ9RmkLWE3j6TBIr7U7J265F+g= Subject key identifier: 9C:D0:34:87:34:F1:62:A4:AF:D7:FF:56:B5:4C:DD:8E:85:0E:7A:67 Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B Certificate serial: 0F19 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft Manifest number: 0F0D Signing time: Wed 24 Dec 2025 01:02:03 +0000 Manifest this update: Wed 24 Dec 2025 01:02:03 +0000 Manifest next update: Fri 26 Dec 2025 01:02:03 +0000 Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: Eqe/TxXwFpQF6hg1LNPLcvxHNnGf1wZzcohzeMqL3PQ=) 2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=) 3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=) 4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=) 5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=) 6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=) 7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 26 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3865 (0xf19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B Validity Not Before: Dec 24 01:02:03 2025 GMT Not After : Dec 26 01:02:03 2025 GMT Subject: CN=694b3b8b-7a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:5e:3b:87:e6:f6:1c:23:3f:42:d0:b5:6e: ac:9b:fc:11:65:64:ee:1a:a7:20:b2:dd:d1:77:24: 2e:2b:bb:11:43:d1:ed:0a:43:07:38:a2:e6:12:da: 6a:89:02:98:57:30:19:ce:66:da:64:a3:39:44:6a: 98:c6:21:ec:58:a9:65:91:cf:03:8f:c0:fe:5f:5e: 38:0c:5c:cb:d1:08:c8:91:67:8c:e3:a2:4f:40:a8: 3c:e5:c4:6d:fa:46:f8:ef:36:21:3f:f6:36:5d:09: b4:7f:97:d8:6f:b3:ce:b3:d9:2c:1a:d6:ae:78:7a: 9a:14:e1:74:be:d7:81:ce:50:c1:0f:5f:31:f3:22: ef:fb:bd:7d:4e:a3:3e:09:11:a1:ae:91:e8:db:9d: 10:64:f7:5a:6e:96:07:f9:5a:c1:55:f4:71:11:ec: c5:78:2e:d4:29:e5:64:14:4a:df:2e:b8:18:ae:72: 11:07:f1:83:df:66:2e:d7:21:4c:35:8b:0f:ac:a4: 23:43:5c:64:b9:99:64:3f:9f:db:a8:c6:ab:a2:55: 39:24:94:59:ef:72:2d:f2:33:80:2e:cc:6c:d4:7d: c9:8a:3c:3a:3b:90:40:60:7d:ab:60:89:78:eb:78: 87:7c:e5:b3:21:2c:7e:fb:10:32:d1:66:ae:2a:86: 99:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:34:87:34:F1:62:A4:AF:D7:FF:56:B5:4C:DD:8E:85:0E:7A:67 X509v3 Authority Key Identifier: keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:e8:31:b0:34:ab:0f:a2:c2:73:f4:33:36:98:eb:74:03: b5:5b:c3:56:cd:69:d4:f9:1d:b2:e5:20:f4:43:ce:8a:a8:97: 1f:3d:ac:e1:f8:0b:e8:0a:06:24:1f:31:78:99:f6:a1:79:67: bb:24:98:7e:6e:ca:0c:3e:18:1d:97:d7:84:00:58:e0:54:cf: dc:22:43:6f:b9:de:82:c7:cf:23:19:5a:80:55:3a:7d:63:f7: aa:ea:69:84:59:bb:b2:65:58:92:c4:78:bc:e7:1c:37:91:e5: 2c:b3:eb:df:1c:e8:e0:8f:dc:fd:8e:15:12:b5:2e:33:f6:ce: e2:e3:7c:62:8d:50:a2:b3:32:f4:6f:19:1b:99:07:2d:85:7b: fd:2b:7a:07:04:54:a0:18:1d:d8:23:87:4c:c0:95:31:60:90: f1:ab:6c:06:0c:da:b5:bc:ab:79:29:c2:9d:23:18:18:26:4e: f6:91:7e:2d:c2:fb:ea:18:1b:7d:e3:c1:07:78:dc:5d:3e:3c: 81:1f:0d:b5:4a:9b:82:27:d7:e6:74:05:50:6a:4d:b3:d3:e3: dd:a9:8a:37:8c:91:bb:d4:a0:48:dc:bc:74:ab:29:cb:3c:43: 8c:7b:3c:f5:b9:49:07:34:46:11:e4:46:e8:18:f5:86:b9:4b: b3:ba:9f:22 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjBBQ0ZBRjExMC8GA1UEBRMoODgyNjI5ODk1RDhEQjU3QjI1NDFFQTQ4RkExMTI2 MzI1RTI5MDIwQjAeFw0yNTEyMjQwMTAyMDNaFw0yNTEyMjYwMTAyMDNaMBgxFjAU BgNVBAMTDTY5NGIzYjhiLTdhODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0/F47h+b2HCM/QtC1bqyb/BFlZO4apyCy3dF3JC4ruxFD0e0KQwc4ouYS 2mqJAphXMBnOZtpkozlEapjGIexYqWWRzwOPwP5fXjgMXMvRCMiRZ4zjok9AqDzl xG36RvjvNiE/9jZdCbR/l9hvs86z2Swa1q54epoU4XS+14HOUMEPXzHzIu/7vX1O oz4JEaGukejbnRBk91pulgf5WsFV9HER7MV4LtQp5WQUSt8uuBiuchEH8YPfZi7X IUw1iw+spCNDXGS5mWQ/n9uoxquiVTkklFnvci3yM4AuzGzUfcmKPDo7kEBgfatg iXjreId85bMhLH77EDLRZq4qhpmjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnNA0 hzTxYqSv1/9WtUzdjoUOemcwHwYDVR0jBBgwFoAUiCYpiV2NtXslQepI+hEmMl4p AgswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4QUVBMjI4L2lDWXBp VjJOdFhzbFFlcEktaEVtTWw0cEFncy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2lDWXBpVjJOdFhzbFFlcEktaEVtTWw0cEFncy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjBBQ0YvOTI1RTJCRTY1ODZEMTFFNUFFQjU1QzJGRjhB RUEyMjgvaUNZcGlWMk50WHNsUWVwSS1oRW1NbDRwQWdzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVF+gxsDSrD6LCc/QzNpjrdAO1W8NW zWnU+R2y5SD0Q86KqJcfPazh+AvoCgYkHzF4mfaheWe7JJh+bsoMPhgdl9eEAFjg VM/cIkNvud6Cx88jGVqAVTp9Y/eq6mmEWbuyZViSxHi85xw3keUss+vfHOjgj9z9 jhUStS4z9s7i43xijVCiszL0bxkbmQcthXv9K3oHBFSgGB3YI4dMwJUxYJDxq2wG DNq1vKt5KcKdIxgYJk72kX4twvvqGBt948EHeNxdPjyBHw21SpuCJ9fmdAVQak2z 0+PdqYo3jJG71KBI3Lx0qynLPEOMezz1uUkHNEYR5EboGPWGuUuzup8i -----END CERTIFICATE-----Generated at Wed Dec 24 13:12:53 2025 by rpki-client