This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json) Hash identifier: JcV/grBYDcn0zdydJLctQs1whMjph6Xvlso5Y5Qt6TE= Subject key identifier: B4:38:BA:4E:D4:C9:E3:B7:A7:F9:11:4D:49:61:22:95:EA:FA:BE:AD Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34 Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34 Certificate serial: 079B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft Manifest number: 079B Signing time: Sun 21 Dec 2025 01:54:22 +0000 Manifest this update: Sun 21 Dec 2025 01:54:22 +0000 Manifest next update: Tue 23 Dec 2025 01:54:22 +0000 Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: tKFS+yvOG/KppVSQmbQ/D0Te7HCnJwLlW+Tm0r9mFNs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 23 Dec 2025 01:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34 Validity Not Before: Dec 21 01:54:22 2025 GMT Not After : Dec 23 01:54:22 2025 GMT Subject: CN=6947534e-7159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:2c:79:5c:1a:ee:f2:1c:e0:4c:54:11:50: c2:f7:f0:72:84:e1:96:cd:c1:0e:4e:76:4c:c2:a2: 14:96:8c:1a:d1:43:59:8f:81:46:00:39:46:04:06: 6d:ae:4d:b7:81:3a:9c:f7:97:9b:74:a5:32:ee:9a: 0a:51:4e:7a:f6:fa:e7:f6:ba:2b:df:65:f6:9c:e5: 24:a6:ba:55:a2:a4:b2:da:db:2e:27:04:42:06:bd: de:c1:ac:9c:f8:d6:27:06:49:76:e3:d2:c4:c3:b3: de:73:c5:4a:af:0b:51:61:f8:17:40:cb:8e:ac:5e: 3c:21:fb:21:9c:e6:4a:d5:bc:e4:d9:9a:f5:0f:25: fe:bd:89:37:71:a1:c3:91:9a:2d:24:d1:7e:69:3e: 2a:ff:25:61:b3:ae:ff:2b:a9:f0:d5:8e:90:aa:45: eb:c0:20:12:ef:85:c3:93:0a:e9:3c:d7:93:36:8a: ee:70:17:c3:ef:c0:a0:32:14:88:dc:1c:04:4f:a0: 1e:10:87:07:5e:bf:82:37:a7:b1:97:0e:1c:06:ec: ea:f1:28:0b:fc:79:53:4a:53:f6:01:31:81:b5:e6: e9:aa:a3:c5:60:a6:03:9d:c1:58:e3:1d:42:20:1b: e4:87:2c:05:1c:16:af:43:c8:55:cc:b2:f5:06:5f: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:BA:4E:D4:C9:E3:B7:A7:F9:11:4D:49:61:22:95:EA:FA:BE:AD X509v3 Authority Key Identifier: keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e2:b0:fd:ba:b4:02:22:03:f4:65:f9:dd:7f:32:77:2a:00: 64:3c:df:e4:d8:9c:b2:9b:a1:34:a5:37:1d:cf:45:22:f1:86: 4d:65:d4:63:d1:2a:34:85:95:ed:9d:f7:79:91:d2:36:c2:07: fb:98:b2:cb:24:4e:c9:71:03:2c:82:c9:1c:c6:dc:7e:6c:32: 6a:bb:fa:64:e1:56:65:6e:14:44:cc:33:d2:d0:cb:e5:0e:33: 60:26:27:d8:0e:88:cf:c5:cb:d6:3b:62:a1:e3:7d:9e:77:a1: 63:e2:db:fb:7d:b6:c6:89:fd:00:87:84:3e:fe:f8:61:dc:57: da:89:48:a0:c9:42:d3:17:72:df:34:ac:26:f2:8d:5f:f2:2e: e8:09:ca:26:ec:ce:f7:4b:49:ef:f3:f7:5b:73:fa:86:19:3a: a6:43:b1:01:08:e7:1a:f3:99:a4:e0:25:06:42:f5:2c:34:3c: aa:57:7d:92:ba:fb:a4:19:98:66:9f:24:fc:59:56:79:d7:41: 7c:7b:d9:90:c3:c0:56:2d:7c:47:01:ba:2b:99:a7:05:e0:e8: 6f:5b:ce:29:36:38:44:62:ca:8d:bd:9a:45:0f:57:a7:e9:ef: d7:5e:0a:84:8c:70:0d:c8:7b:17:d3:7b:ce:5e:55:96:28:d5: 13:45:69:66 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB5swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDYwMDhBRjExMC8GA1UEBRMoNUVFNzcwNjk2NzVCNzVDQTI0N0JGQzVDRDMzMDBC MTdCNUIzOUMzNDAeFw0yNTEyMjEwMTU0MjJaFw0yNTEyMjMwMTU0MjJaMBgxFjAU BgNVBAMTDTY5NDc1MzRlLTcxNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQChCix5XBru8hzgTFQRUML38HKE4ZbNwQ5OdkzCohSWjBrRQ1mPgUYAOUYE Bm2uTbeBOpz3l5t0pTLumgpRTnr2+uf2uivfZfac5SSmulWipLLa2y4nBEIGvd7B rJz41icGSXbj0sTDs95zxUqvC1Fh+BdAy46sXjwh+yGc5krVvOTZmvUPJf69iTdx ocORmi0k0X5pPir/JWGzrv8rqfDVjpCqRevAIBLvhcOTCuk815M2iu5wF8PvwKAy FIjcHARPoB4Qhwdev4I3p7GXDhwG7OrxKAv8eVNKU/YBMYG15umqo8VgpgOdwVjj HUIgG+SHLAUcFq9DyFXMsvUGX1ElAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtDi6 TtTJ47en+RFNSWEiler6vq0wHwYDVR0jBBgwFoAUXudwaWdbdcoke/xc0zALF7Wz nDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ2MDA4Lzc4NTE3NUNBMDg4RDExRUJBQUQxQkM1QkY4QUVBMjI4L1h1ZHdh V2RiZGNva2VfeGMwekFMRjdXem5EUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1h1ZHdhV2RiZGNva2VfeGMwekFMRjdXem5EUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDYwMDgvNzg1MTc1Q0EwODhEMTFFQkFBRDFCQzVCRjhB RUEyMjgvWHVkd2FXZGJkY29rZV94YzB6QUxGN1d6bkRRLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB84rD9urQCIgP0ZfndfzJ3KgBkPN/k 2Jyym6E0pTcdz0Ui8YZNZdRj0So0hZXtnfd5kdI2wgf7mLLLJE7JcQMsgskcxtx+ bDJqu/pk4VZlbhREzDPS0MvlDjNgJifYDojPxcvWO2Kh432ed6Fj4tv7fbbGif0A h4Q+/vhh3FfaiUigyULTF3LfNKwm8o1f8i7oCcom7M73S0nv8/dbc/qGGTqmQ7EB COca85mk4CUGQvUsNDyqV32SuvukGZhmnyT8WVZ510F8e9mQw8BWLXxHAbormacF 4OhvW84pNjhEYsqNvZpFD1en6e/XXgqEjHANyHsX03vOXlWWKNUTRWlm -----END CERTIFICATE-----Generated at Mon Dec 22 00:06:32 2025 by rpki-client