This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft File: BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json) Hash identifier: tYe0WnDP5nkGGaD7umyXeucDB8C4vW4gMxO1uK+/HqA= Subject key identifier: 15:B0:00:8A:FF:00:56:CC:32:60:9F:45:54:D4:C9:C3:44:A3:09:81 Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8 Certificate issuer: /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8 Certificate serial: 04DB Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft Manifest number: 04D5 Signing time: Sat 20 Dec 2025 03:01:18 +0000 Manifest this update: Sat 20 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: Lf6F+ixEDDF+txqa4OUqe7wMGaM06icO4eCRTNVma8o=) 2: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=) 3: 835DF5F834EE11ED901FCEEDF1222468.roa (hash: 7FPE0FhlSAjUMelmubiUwThbu0o5YNAG9Z3oUXP8EmA=) 4: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=) 5: 18EA1A1EEFEA11EDBAF5D7884AD9E6FC.roa (hash: Suhxb/oULjMaEZsuBizxaGFSrHq0egh0mczTJVoAnnw=) 6: 4540A8D0EFEA11EDA6943F894AD9E6FC.roa (hash: YdysxgceL5KQtLTnwMeNCOiB4lPOcf1FskePKjG3oJk=) 7: BDCCC46234EE11EDACB45CEEF1222468.roa (hash: bWeTuDjLwjcjXXalbVQak4qGcRcTM2Bs7Q2hhXrJ914=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8 Validity Not Before: Dec 20 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=6946117e-1904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:0e:9a:ff:77:bf:ef:07:b3:fa:51:62:77: 7d:09:f9:ab:8f:c0:fe:27:09:f7:8c:0b:4e:fc:40: 05:66:4f:6a:36:79:b2:0a:85:a9:48:df:1d:74:43: ff:5d:9b:28:e6:51:52:64:a3:be:3e:ed:d3:53:ac: 4a:da:c1:20:1e:64:d6:83:23:d6:07:d4:d2:0f:6b: 2d:b0:d4:ab:64:98:c4:04:f9:3e:6b:39:19:1f:ba: c1:02:90:42:eb:6f:7a:23:14:18:1e:45:d0:7e:01: d2:db:d9:cc:3b:2c:a5:36:a1:ac:11:a9:c0:dd:61: 8b:ec:fd:c7:f4:e8:93:40:67:17:76:e3:62:4c:af: 6b:25:b6:19:41:0d:d3:a0:72:e8:1b:23:2b:eb:d0: cc:12:f5:da:ae:b5:fb:f4:ee:c1:3a:c9:e6:ff:11: bc:39:54:c5:ff:ac:2e:ee:ad:83:38:e4:db:7b:b4: f1:bf:5c:ab:76:83:94:fd:08:42:4a:e0:ce:cd:81: 4d:de:1d:a9:51:8a:80:60:90:d9:02:f8:1f:3d:37: 28:50:62:47:a0:d9:f0:6a:96:8e:62:58:dc:dc:ed: 76:da:77:1b:2a:2f:94:03:18:84:ff:8f:d1:2a:27: 25:2f:72:1c:20:d0:24:df:6c:34:91:52:d1:55:ea: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B0:00:8A:FF:00:56:CC:32:60:9F:45:54:D4:C9:C3:44:A3:09:81 X509v3 Authority Key Identifier: keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a7:0e:1c:6c:a4:a0:f9:49:79:44:52:0f:5a:f6:19:bf:2b: f9:bf:bf:97:d4:be:f7:11:57:c3:ea:c8:42:bb:35:ce:32:39: 23:5a:ab:66:45:b1:78:f8:18:8c:80:e0:15:71:1d:5b:ff:07: a8:20:f0:90:96:c6:6c:5a:ba:90:c9:29:2b:a4:83:45:36:a7: 58:88:01:47:c8:aa:9b:0b:1e:2e:9f:be:88:93:b8:21:88:76: 49:14:35:85:9d:28:de:ce:47:6d:4b:59:f9:c1:52:d0:f7:7c: 78:55:74:fb:aa:c6:80:ca:b5:69:6a:cd:54:50:31:43:0d:80: e1:1e:f3:c3:e2:d3:18:c0:59:bc:20:dc:84:79:fd:6f:2f:60: 59:96:25:d8:4e:66:6c:28:ec:67:c1:58:2d:d2:f0:cd:02:12: b0:2d:63:f1:c2:b1:14:b3:49:f0:73:79:66:f4:91:46:e7:36: 3f:f4:05:45:44:ba:05:10:87:4d:e0:51:c5:01:71:06:83:b0: b1:ca:33:2f:13:3c:98:88:d4:27:39:b9:47:11:98:f9:41:5d: 70:e9:fa:d7:a4:b6:9d:6d:70:42:15:1a:91:7c:4c:89:82:8f: bf:d4:4a:29:be:1e:d1:e2:b8:c7:dd:1e:c7:d4:35:9f:84:5d: 04:83:a4:7c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBNswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NkRBNDNBRjExMC8GA1UEBRMoMDYyMDk3M0M0QUExOTRCNjlGNDc3RDlCRUQ1NTk3 Qzk0RDBERDBGODAeFw0yNTEyMjAwMzAxMTdaFw0yNTEyMjIwMzAxMTdaMBgxFjAU BgNVBAMTDTY5NDYxMTdlLTE5MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+xQ6a/3e/7wez+lFid30J+auPwP4nCfeMC078QAVmT2o2ebIKhalI3x10 Q/9dmyjmUVJko74+7dNTrErawSAeZNaDI9YH1NIPay2w1KtkmMQE+T5rORkfusEC kELrb3ojFBgeRdB+AdLb2cw7LKU2oawRqcDdYYvs/cf06JNAZxd242JMr2slthlB DdOgcugbIyvr0MwS9dqutfv07sE6yeb/Ebw5VMX/rC7urYM45Nt7tPG/XKt2g5T9 CEJK4M7NgU3eHalRioBgkNkC+B89NyhQYkeg2fBqlo5iWNzc7XbadxsqL5QDGIT/ j9EqJyUvchwg0CTfbDSRUtFV6tLNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFbAA iv8AVswyYJ9FVNTJw0SjCYEwHwYDVR0jBBgwFoAUBiCXPEqhlLafR32b7VWXyU0N 0PgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjZEQTQzLzI0QTREOTQ2MzRFRTExRUQ4OEVDRDBFQ0YxMjIyNDY4L0JpQ1hQ RXFobExhZlIzMmI3VldYeVUwTjBQZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0JpQ1hQRXFobExhZlIzMmI3VldYeVUwTjBQZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NkRBNDMvMjRBNEQ5NDYzNEVFMTFFRDg4RUNEMEVDRjEy MjI0NjgvQmlDWFBFcWhsTGFmUjMyYjdWV1h5VTBOMFBnLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/pw4cbKSg+Ul5RFIPWvYZvyv5v7+X 1L73EVfD6shCuzXOMjkjWqtmRbF4+BiMgOAVcR1b/weoIPCQlsZsWrqQySkrpINF NqdYiAFHyKqbCx4un76Ik7ghiHZJFDWFnSjezkdtS1n5wVLQ93x4VXT7qsaAyrVp as1UUDFDDYDhHvPD4tMYwFm8INyEef1vL2BZliXYTmZsKOxnwVgt0vDNAhKwLWPx wrEUs0nwc3lm9JFG5zY/9AVFRLoFEIdN4FHFAXEGg7CxyjMvEzyYiNQnOblHEZj5 QV1w6frXpLadbXBCFRqRfEyJgo+/1Eopvh7R4rjH3R7H1DWfhF0Eg6R8 -----END CERTIFICATE-----Generated at Sun Dec 21 00:42:43 2025 by rpki-client