This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier: F6NZ0cUSx16Q7p2FILDiHryvAv448IqAF9kQantqbUs=
Subject key identifier: D1:86:1C:EE:B2:F4:30:1F:C2:81:8B:CA:01:F3:9E:0C:B1:D5:D7:22
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer: /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial: 0379
Authority info access: rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number: 0378
Signing time: Mon 22 Dec 2025 03:42:26 +0000
Manifest this update: Mon 22 Dec 2025 03:42:25 +0000
Manifest next update: Wed 24 Dec 2025 03:42:25 +0000
Files and hashes: 1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: +92xDvBn1di/LhCW/ICqtnI+KR1BcA0xZWFiZsuDXHM=)
2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 24 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Validity
Not Before: Dec 22 03:42:25 2025 GMT
Not After : Dec 24 03:42:25 2025 GMT
Subject: CN=6948be22-3ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:fd:bc:b8:b0:3e:2a:77:52:16:49:d8:bd:
0f:64:20:0e:71:dc:7e:65:89:7b:9a:6f:29:aa:24:
84:9f:a9:13:00:7c:0e:da:a4:4b:a1:32:17:48:98:
2b:da:10:62:f7:cf:38:d7:47:3f:cc:45:e4:01:a6:
11:a5:07:b5:d5:b4:17:1d:0f:29:e6:2f:ae:48:e7:
61:b4:8f:db:cb:81:2b:e1:43:af:fa:7d:73:58:b8:
69:ce:c0:f2:50:d7:a9:0a:6d:82:20:32:85:39:0b:
30:5d:b5:c0:2b:02:a7:01:0c:c3:3a:35:a8:5e:47:
45:c4:63:91:fa:02:93:cc:77:c5:13:ea:81:af:ab:
6f:83:ed:3e:88:0e:53:29:ed:68:f7:68:67:5a:bd:
28:75:e1:81:d0:ac:5c:f5:77:66:db:6e:43:ac:99:
dc:01:be:6a:19:7a:f2:2e:52:d1:55:75:6b:ee:58:
33:f5:af:be:61:7f:33:bb:e5:12:5b:06:6c:1a:a1:
ae:ec:a5:0e:ea:a0:ae:5c:48:c6:83:3a:65:b4:b8:
a1:de:aa:d1:42:a9:80:de:11:98:5b:b3:16:fe:a0:
87:c1:8e:9a:da:a9:af:45:76:8e:4a:e7:cf:cf:26:
26:83:8d:6b:1c:3b:df:75:10:af:3e:7b:09:4c:6c:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:86:1C:EE:B2:F4:30:1F:C2:81:8B:CA:01:F3:9E:0C:B1:D5:D7:22
X509v3 Authority Key Identifier:
keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f2:25:dd:3c:bd:75:cd:3f:bd:a8:5e:97:a0:b5:13:c9:59:
6d:d5:39:7a:c9:06:8d:6b:0e:16:5f:5f:26:b2:36:72:24:a8:
2e:95:92:4d:d8:82:b5:b1:59:4f:01:5a:9f:40:8e:54:b6:44:
0d:bf:5d:ed:8a:5f:a2:fa:9b:54:58:5f:31:54:d3:83:7b:c0:
32:de:5d:dc:c7:c9:30:07:ee:78:1a:e0:85:80:e5:b8:a6:8e:
0f:63:ae:dd:e3:66:82:c2:39:fc:a1:83:74:3c:b4:ae:f3:f7:
bd:6a:3a:47:59:4c:9d:9a:c4:36:3a:ec:d0:ad:0f:1d:8a:ac:
54:1c:42:70:21:66:94:d9:83:9b:0a:5d:04:ce:1b:61:63:21:
2c:32:c0:ac:b6:9d:6b:0b:e5:83:97:a9:51:19:9e:60:9c:7d:
41:a1:ba:32:a4:5d:f8:c8:6b:dd:8e:c6:c5:88:cc:56:92:e6:
16:c3:10:95:d7:3c:17:2f:d1:92:0f:dd:b5:81:93:b4:c1:cf:
dc:bf:db:1b:be:20:9d:e3:9e:83:93:51:18:32:f8:e3:2a:ac:
22:67:05:a0:0e:a5:98:31:a6:78:ca:38:0b:2f:43:7d:bd:02:
f8:e6:85:9c:33:97:3d:9c:b2:16:6a:5e:d7:bf:a5:0e:8b:22:
ac:ef:6a:27
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNTEyMjIwMzQyMjVaFw0yNTEyMjQwMzQyMjVaMBgxFjAU
BgNVBAMTDTY5NDhiZTIyLTNiYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRqf28uLA+KndSFknYvQ9kIA5x3H5liXuabymqJISfqRMAfA7apEuhMhdI
mCvaEGL3zzjXRz/MReQBphGlB7XVtBcdDynmL65I52G0j9vLgSvhQ6/6fXNYuGnO
wPJQ16kKbYIgMoU5CzBdtcArAqcBDMM6NaheR0XEY5H6ApPMd8UT6oGvq2+D7T6I
DlMp7Wj3aGdavSh14YHQrFz1d2bbbkOsmdwBvmoZevIuUtFVdWvuWDP1r75hfzO7
5RJbBmwaoa7spQ7qoK5cSMaDOmW0uKHeqtFCqYDeEZhbsxb+oIfBjpraqa9Fdo5K
58/PJiaDjWscO991EK8+ewlMbDNVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU0YYc
7rL0MB/CgYvKAfOeDLHV1yIwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf8iXdPL11zT+9qF6XoLUTyVlt1Tl6yQaN
aw4WX18msjZyJKgulZJN2IK1sVlPAVqfQI5UtkQNv13til+i+ptUWF8xVNODe8Ay
3l3cx8kwB+54GuCFgOW4po4PY67d42aCwjn8oYN0PLSu8/e9ajpHWUydmsQ2OuzQ
rQ8diqxUHEJwIWaU2YObCl0EzhthYyEsMsCstp1rC+WDl6lRGZ5gnH1BoboypF34
yGvdjsbFiMxWkuYWwxCV1zwXL9GSD921gZO0wc/cv9sbviCd456Dk1EYMvjjKqwi
ZwWgDqWYMaZ4yjgLL0N9vQL45oWcM5c9nLIWal7Xv6UOiyKs72on
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:32:09 2025 by rpki-client