This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json) Hash identifier: K09Gua7+KEBgq/9SGiJLh1kCBekQTs3UhPE0ZbayTaA= Subject key identifier: 00:DF:80:4A:BA:F0:10:94:DD:5A:99:96:F1:E8:46:B8:C9:98:23:F4 Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77 Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77 Certificate serial: 0239 Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft Manifest number: 0239 Signing time: Fri 02 Jan 2026 04:34:12 +0000 Manifest this update: Fri 02 Jan 2026 04:34:11 +0000 Manifest next update: Sun 04 Jan 2026 04:34:11 +0000 Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: Vac/lte0DYu8q1Ea+qFyZrcFh9Hpf8CDa8GcB54h7RA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77 Validity Not Before: Jan 2 04:34:11 2026 GMT Not After : Jan 4 04:34:11 2026 GMT Subject: CN=69574ac4-3578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:8c:06:09:f2:31:ab:83:4f:53:7b:35:56: 6e:36:e2:cc:bb:1b:15:c2:ad:e3:4f:f0:a8:1c:cf: c1:07:62:3e:21:44:4f:ae:85:9d:52:70:75:22:04: a2:8a:8e:47:2b:49:a1:c4:7c:43:2c:08:c3:1d:4c: 09:19:4b:02:8a:4b:0d:bd:65:fb:90:34:23:f0:0f: 59:6d:de:87:93:b6:4f:63:b4:a8:f2:0e:a2:84:ce: 31:84:71:c8:a8:0f:fe:2a:6a:60:9c:42:04:24:fc: a2:00:bd:da:74:7f:98:f5:a8:d0:ed:4f:ee:c9:a0: 80:36:0e:2e:92:3e:4d:83:64:1e:65:e5:2b:e1:7e: 46:2e:bd:ca:17:60:0f:ba:f9:1d:c7:77:09:73:26: c7:52:39:90:6c:ef:eb:eb:f1:0c:d7:1a:77:e1:c3: 51:7c:39:6e:a0:65:1f:83:e9:91:9f:80:ce:2a:2b: 03:6f:4f:ff:09:b4:28:05:87:a4:e6:4d:71:5e:9d: 37:e6:2f:ed:3f:b7:54:9c:fc:2f:66:41:aa:ee:5b: ba:fa:55:cb:27:8a:f5:aa:1a:53:f4:88:ee:87:2d: ff:6a:2a:21:2f:dc:3a:99:cf:b2:24:fb:31:8b:d4: 85:0e:0f:fe:54:b7:dc:3c:d2:6f:cc:84:09:5b:3f: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DF:80:4A:BA:F0:10:94:DD:5A:99:96:F1:E8:46:B8:C9:98:23:F4 X509v3 Authority Key Identifier: keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b9:57:35:ef:b4:8f:b1:47:65:38:ee:12:a6:82:fe:89:00: e6:f4:d0:4e:1d:b5:54:ed:9e:3b:07:82:1b:2e:d7:93:7a:18: d3:8c:4d:c2:ed:b5:89:02:44:1d:6c:7f:e7:6e:b9:4c:4b:d8: 86:89:ea:a4:c3:ae:e3:04:10:94:c8:ca:97:8e:13:be:0a:1f: 20:de:af:11:dd:89:d9:f7:99:e5:57:f0:05:9f:c6:4f:b5:4c: 51:dd:b2:c5:7a:44:38:3e:93:85:8d:8d:da:7f:eb:86:47:70: 28:f7:29:9d:6a:d4:06:84:d2:15:1f:c4:d2:bb:73:53:0c:2b: bf:b9:6c:83:84:57:40:95:30:3c:e4:18:83:e5:2a:84:c4:ec: 19:43:44:04:6b:95:dc:15:57:82:e6:17:4e:43:99:ff:3c:1e: 2a:6f:80:7e:99:cd:65:22:10:d8:0b:11:f6:d3:4a:2a:c9:19: 02:12:f7:cf:a3:9e:4c:16:96:b0:cc:5e:12:77:36:1f:83:16: fa:f6:d6:6e:c5:e9:46:fd:f8:a2:55:a3:86:09:5b:b9:2b:d1: 2f:a5:e5:3d:82:c3:fd:b8:81:52:bc:a6:f7:ff:3b:71:36:95: 4c:7a:53:7b:c3:4b:ee:19:d4:46:62:d0:76:ad:91:ff:7d:f7: 8c:a5:b0:f2 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDJDQjFBUjExMC8GA1UEBRMoQTZBMzQzQjI3RjlGNzYyQUU0MUNGN0M1QkM2QjUx MTRDMjg4NUE3NzAeFw0yNjAxMDIwNDM0MTFaFw0yNjAxMDQwNDM0MTFaMBgxFjAU BgNVBAMTDTY5NTc0YWM0LTM1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDewowGCfIxq4NPU3s1Vm424sy7GxXCreNP8Kgcz8EHYj4hRE+uhZ1ScHUi BKKKjkcrSaHEfEMsCMMdTAkZSwKKSw29ZfuQNCPwD1lt3oeTtk9jtKjyDqKEzjGE ccioD/4qamCcQgQk/KIAvdp0f5j1qNDtT+7JoIA2Di6SPk2DZB5l5SvhfkYuvcoX YA+6+R3HdwlzJsdSOZBs7+vr8QzXGnfhw1F8OW6gZR+D6ZGfgM4qKwNvT/8JtCgF h6TmTXFenTfmL+0/t1Sc/C9mQaruW7r6VcsnivWqGlP0iO6HLf9qKiEv3DqZz7Ik +zGL1IUOD/5Ut9w80m/MhAlbP6DBAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAN+A SrrwEJTdWpmW8ehGuMmYI/QwHwYDVR0jBBgwFoAUpqNDsn+fdirkHPfFvGtRFMKI WncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQyQ0IxLzQyODBDRTYwMzQ4OTExRUZBQTE4NjZBMjc2MkU5NTFBL3BxTkRz bi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L3BxTkRzbi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDJDQjEvNDI4MENFNjAzNDg5MTFFRkFBMTg2NkEyNzYyRTk1 MUEvcHFORHNuLWZkaXJrSFBmRnZHdFJGTUtJV25jLm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEuVc177SPsUdlOO4SpoL+iQDm9NBOHbVU 7Z47B4IbLteTehjTjE3C7bWJAkQdbH/nbrlMS9iGieqkw67jBBCUyMqXjhO+Ch8g 3q8R3YnZ95nlV/AFn8ZPtUxR3bLFekQ4PpOFjY3af+uGR3Ao9ymdatQGhNIVH8TS u3NTDCu/uWyDhFdAlTA85BiD5SqExOwZQ0QEa5XcFVeC5hdOQ5n/PB4qb4B+mc1l IhDYCxH200oqyRkCEvfPo55MFpawzF4SdzYfgxb69tZuxelG/fiiVaOGCVu5K9Ev peU9gsP9uIFSvKb3/ztxNpVMelN7w0vuGdRGYtB2rZH/ffeMpbDy -----END CERTIFICATE-----Generated at Fri Jan 2 18:24:40 2026 by rpki-client