This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft File: KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json) Hash identifier: 666qAwE+c22Fy/qgoqkQx3MIqKu5IYQU9AOSpjdcPPg= Subject key identifier: 42:F5:E2:35:35:66:6E:80:87:0B:2A:B9:78:9C:01:95:D7:B5:CD:19 Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87 Certificate issuer: /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087 Certificate serial: 0354 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft Manifest number: 034B Signing time: Mon 29 Dec 2025 03:50:06 +0000 Manifest this update: Mon 29 Dec 2025 03:50:05 +0000 Manifest next update: Wed 31 Dec 2025 03:50:05 +0000 Files and hashes: 1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: kZC3rWkfZj+KUMEOHzay2N1TJcnmJtOXVXWIxUyQYn8=) 2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=) 3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=) 4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=) 5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=) 6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=) 7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=) 8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=) 9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 31 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087 Validity Not Before: Dec 29 03:50:05 2025 GMT Not After : Dec 31 03:50:05 2025 GMT Subject: CN=6951fa6e-d9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:70:2a:e6:c1:21:5f:2d:ac:b2:ab:32:f9: 66:b8:e9:ad:98:47:17:a2:18:9f:0c:bf:53:44:f9: 43:e7:01:78:7c:39:5d:01:ec:b9:fe:41:fe:0d:d9: 44:1e:fb:f7:94:2c:28:21:bc:59:d0:dc:c8:e9:f0: e3:e0:11:71:20:6a:5e:eb:5c:25:1f:4e:85:14:f8: 0c:5b:19:72:ef:28:87:38:ff:55:c1:2c:83:91:b8: 7a:e5:d4:40:f2:0b:a7:36:84:9a:33:ca:cd:27:c0: 83:45:5f:a4:70:71:03:a5:b5:3e:47:ba:77:f3:c1: 63:79:9f:d2:7b:94:73:42:5e:ab:98:49:55:06:71: c4:e1:cb:b1:de:e0:51:45:83:1e:2c:51:e6:a9:67: 33:2a:f7:b2:ff:6c:6b:e1:49:be:b7:d5:86:a5:a5: 4a:9a:e7:82:64:fb:e8:d2:ed:38:d8:b5:57:63:b0: ca:12:d5:ef:05:21:a2:cf:94:38:f4:f0:3d:1d:b1: a9:40:2a:97:3c:50:c8:7d:b7:fb:97:75:c5:27:63: 2f:20:51:70:df:36:23:53:02:fe:dc:0f:a3:75:1d: bc:91:b7:61:51:95:b7:4b:e3:19:1b:68:27:45:67: b2:b2:e8:72:fb:34:56:f3:b9:55:21:01:72:ed:d4: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:E2:35:35:66:6E:80:87:0B:2A:B9:78:9C:01:95:D7:B5:CD:19 X509v3 Authority Key Identifier: keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:79:6b:1d:c7:e4:e7:51:25:f1:48:be:18:27:6d:3a:65:38: 0f:5c:52:41:85:0a:c1:0d:87:25:8a:51:1a:c0:15:6e:99:37: 91:5e:13:b4:87:c0:dd:33:fb:30:7c:82:37:4f:96:b5:e2:5b: 43:f7:88:2d:47:4c:2f:e8:ef:a8:88:7a:4f:d3:f6:33:ba:28: 73:0b:1b:fa:10:26:4d:72:45:df:c6:d9:55:66:14:a6:8a:46: 87:64:cc:bd:27:13:5c:ce:96:f2:b4:ac:9f:70:27:e8:8f:89: 4f:93:2a:0a:9c:95:8f:23:90:1b:77:59:d2:5d:5a:9c:aa:f1: 93:d1:ad:b1:af:94:22:30:f8:81:56:3c:48:4e:dc:75:01:6b: 8a:24:85:06:8b:c2:77:e1:14:7e:64:05:90:6a:f1:a3:1e:fb: e1:c3:00:c7:3f:a1:7f:7c:32:e2:2e:eb:9f:08:f9:85:e6:ed: 32:50:55:0b:61:64:e4:e6:fb:02:d6:71:53:0c:ef:27:3d:ce: 34:bf:db:f1:af:0e:16:42:3e:48:06:33:d0:ce:fa:4f:d6:0d: da:bf:bd:55:bd:6e:73:46:37:e8:c4:9f:d4:a6:6d:c1:7d:25: ea:c6:a7:14:dc:c7:93:78:af:ee:7a:5e:e3:50:8f:a7:db:39: e0:ad:25:0c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NkNFNkZBRjExMC8GA1UEBRMoMkE3Q0VFNzkxODJCQjg1OTFCQjEzNUREQkZCQkVF OTRDMURGNDA4NzAeFw0yNTEyMjkwMzUwMDVaFw0yNTEyMzEwMzUwMDVaMBgxFjAU BgNVBAMTDTY5NTFmYTZlLWQ5YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCV7nAq5sEhXy2ssqsy+Wa46a2YRxeiGJ8Mv1NE+UPnAXh8OV0B7Ln+Qf4N 2UQe+/eULCghvFnQ3Mjp8OPgEXEgal7rXCUfToUU+AxbGXLvKIc4/1XBLIORuHrl 1EDyC6c2hJozys0nwINFX6RwcQOltT5HunfzwWN5n9J7lHNCXquYSVUGccThy7He 4FFFgx4sUeapZzMq97L/bGvhSb631YalpUqa54Jk++jS7TjYtVdjsMoS1e8FIaLP lDj08D0dsalAKpc8UMh9t/uXdcUnYy8gUXDfNiNTAv7cD6N1HbyRt2FRlbdL4xkb aCdFZ7Ky6HL7NFbzuVUhAXLt1EsFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQvXi NTVmboCHCyq5eJwBlde1zRkwHwYDVR0jBBgwFoAUKnzueRgruFkbsTXdv7vulMHf QIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjZDRTZGL0Q5QTQ2NzZDNjk5QTExRUVCQ0M1RkI2NzRBRDlFNkZDL0tuenVl UmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0tuenVlUmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFE OUU2RkMvS256dWVSZ3J1Rmtic1RYZHY3dnVsTUhmUUljLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbeWsdx+TnUSXxSL4YJ206ZTgPXFJB hQrBDYclilEawBVumTeRXhO0h8DdM/swfII3T5a14ltD94gtR0wv6O+oiHpP0/Yz uihzCxv6ECZNckXfxtlVZhSmikaHZMy9JxNczpbytKyfcCfoj4lPkyoKnJWPI5Ab d1nSXVqcqvGT0a2xr5QiMPiBVjxITtx1AWuKJIUGi8J34RR+ZAWQavGjHvvhwwDH P6F/fDLiLuufCPmF5u0yUFULYWTk5vsC1nFTDO8nPc40v9vxrw4WQj5IBjPQzvpP 1g3av71VvW5zRjfoxJ/Upm3BfSXqxqcU3MeTeK/uel7jUI+n2zngrSUM -----END CERTIFICATE-----Generated at Mon Dec 29 17:44:08 2025 by rpki-client