This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft File: M3RPEtwtkNArK4aFUwjsHAeEk8w.mft (raw, json) Hash identifier: qnuyFEN4YkF8UKNxUgv/4xsyHBtCi6GJuEIQ0UjxLLA= Subject key identifier: 2B:10:53:CC:A2:5B:50:26:3C:DD:FE:CC:BF:C7:93:E6:BD:7E:3C:A7 Authority key identifier: 33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC Certificate issuer: /CN=F36693F7AF/serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC Certificate serial: 0BA6 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft Manifest number: 0BA0 Signing time: Thu 25 Dec 2025 01:10:36 +0000 Manifest this update: Thu 25 Dec 2025 01:10:35 +0000 Manifest next update: Sat 27 Dec 2025 01:10:35 +0000 Files and hashes: 1: M3RPEtwtkNArK4aFUwjsHAeEk8w.crl (hash: sKUZpuSu0CwGJ44Fk5wRhWfV94AO0mP9Mttv6BIXbuQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.crl rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 27 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36693F7AF, serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC Validity Not Before: Dec 25 01:10:35 2025 GMT Not After : Dec 27 01:10:35 2025 GMT Subject: CN=694c8f0c-b149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:34:0b:cb:45:a0:e8:b3:21:09:8f:bd:dc: fb:62:9f:97:94:99:93:d9:e9:a3:ad:65:15:3d:4c: b2:1b:91:50:3b:95:eb:1b:56:b6:89:54:c7:15:b7: ba:5d:a7:02:08:94:32:ee:97:e6:fc:2f:63:f4:6a: 33:4c:a5:95:92:4f:a9:dd:cc:e6:70:cc:02:c2:5b: 79:f5:f7:69:1d:7e:87:34:3c:c8:5c:dc:1c:d7:de: 00:4d:b7:28:fa:ce:9a:7e:27:21:01:9e:33:3d:85: aa:34:a4:e7:f8:a7:bc:b8:0c:95:01:1e:50:0a:6a: dd:63:8d:c0:6f:6a:b0:15:76:69:6a:a3:0a:fc:c0: bc:57:fa:9d:20:1c:e9:30:90:ee:1a:4f:a6:e0:79: 68:3a:c4:4a:35:9b:9a:9a:aa:cc:54:79:a7:cf:1f: 12:91:6f:41:c3:08:75:7a:e2:6c:b9:0c:9f:a7:eb: c8:6a:3f:1c:0b:fa:d3:36:44:40:a0:60:52:ad:77: f5:bc:d5:71:10:15:29:7b:ec:bb:0c:42:4b:5b:0e: 10:5b:c4:d8:ab:43:72:85:d5:27:05:5e:2e:cb:0f: 62:c3:4a:4e:cb:42:1d:4c:2d:86:55:14:08:a4:e7: fd:4e:1c:eb:6a:1e:c7:2a:e1:07:6d:64:2b:8e:cf: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:53:CC:A2:5B:50:26:3C:DD:FE:CC:BF:C7:93:E6:BD:7E:3C:A7 X509v3 Authority Key Identifier: keyid:33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0f:4f:5e:6b:0a:63:36:b7:79:a6:17:0d:77:d5:23:f3:04: b9:2a:4e:a3:e5:37:8f:e1:b6:02:55:03:e3:85:d9:fe:41:7c: 9c:7f:1c:35:f0:f4:42:4c:6b:95:b9:54:f4:10:3e:ac:72:97: c4:23:44:81:cd:76:3f:87:08:ba:15:2e:9b:ab:17:42:2a:46: 68:ac:f5:02:57:9b:87:fb:df:c2:ab:4b:51:fd:6c:5f:1d:29: 1d:c9:9d:a3:0e:c4:a9:09:16:bc:36:57:2d:2b:43:4f:96:69: 72:fd:2f:a5:6d:5d:9a:45:fd:ea:44:d2:04:9a:2f:3f:67:b2: 9c:33:08:4b:88:3a:26:82:13:2a:3e:00:4d:56:b6:2a:4c:e1: 99:43:7a:29:5d:bc:1d:5e:d4:40:98:03:bf:b3:06:38:66:ae: b2:94:0b:29:3b:a9:dc:d9:8c:2c:9e:da:f6:ae:90:ed:d8:85: 81:0d:0f:06:c2:80:ca:cb:fb:1e:cf:ca:ab:a4:a5:5f:fb:4f: 34:0d:d1:7d:29:4f:ed:c6:7b:b5:74:a0:97:94:d0:a8:71:90: 30:fb:cb:a1:0b:a4:89:e0:71:3a:95:27:01:5f:b3:04:29:11: 94:72:f1:f9:71:d1:b5:8e:9a:bf:92:82:de:38:5c:6b:d4:b0: ea:22:2a:82 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjkzRjdBRjExMC8GA1UEBRMoMzM3NDRGMTJEQzJEOTBEMDJCMkI4Njg1NTMwOEVD MUMwNzg0OTNDQzAeFw0yNTEyMjUwMTEwMzVaFw0yNTEyMjcwMTEwMzVaMBgxFjAU BgNVBAMTDTY5NGM4ZjBjLWIxNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCu9jQLy0Wg6LMhCY+93Ptin5eUmZPZ6aOtZRU9TLIbkVA7lesbVraJVMcV t7pdpwIIlDLul+b8L2P0ajNMpZWST6ndzOZwzALCW3n192kdfoc0PMhc3BzX3gBN tyj6zpp+JyEBnjM9hao0pOf4p7y4DJUBHlAKat1jjcBvarAVdmlqowr8wLxX+p0g HOkwkO4aT6bgeWg6xEo1m5qaqsxUeafPHxKRb0HDCHV64my5DJ+n68hqPxwL+tM2 RECgYFKtd/W81XEQFSl77LsMQktbDhBbxNirQ3KF1ScFXi7LD2LDSk7LQh1MLYZV FAik5/1OHOtqHscq4QdtZCuOz56nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKxBT zKJbUCY83f7Mv8eT5r1+PKcwHwYDVR0jBBgwFoAUM3RPEtwtkNArK4aFUwjsHAeE k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY5M0Y3LzhDQkY1NTRDRjlFODExRTc4M0UxRDE0M0Y4QUVBMjI4L00zUlBF dHd0a05Bcks0YUZVd2pzSEFlRWs4dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL00zUlBFdHd0a05Bcks0YUZVd2pzSEFlRWs4dy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjkzRjcvOENCRjU1NENGOUU4MTFFNzgzRTFEMTQzRjhB RUEyMjgvTTNSUEV0d3RrTkFySzRhRlV3anNIQWVFazh3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqD09eawpjNrd5phcNd9Uj8wS5Kk6j 5TeP4bYCVQPjhdn+QXycfxw18PRCTGuVuVT0ED6scpfEI0SBzXY/hwi6FS6bqxdC KkZorPUCV5uH+9/Cq0tR/WxfHSkdyZ2jDsSpCRa8NlctK0NPlmly/S+lbV2aRf3q RNIEmi8/Z7KcMwhLiDomghMqPgBNVrYqTOGZQ3opXbwdXtRAmAO/swY4Zq6ylAsp O6nc2Ywsntr2rpDt2IWBDQ8GwoDKy/sez8qrpKVf+080DdF9KU/txnu1dKCXlNCo cZAw+8uhC6SJ4HE6lScBX7MEKRGUcvH5cdG1jpq/koLeOFxr1LDqIiqC -----END CERTIFICATE-----Generated at Thu Dec 25 12:43:13 2025 by rpki-client