This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft File: SmfXXBQJ0u538xkN5zXsl-9jDVg.mft (raw, json) Hash identifier: y+/+1krqjyd2K+LGxk6e1e8/zv05j9HZXFsvNV7oeAc= Subject key identifier: D4:51:3B:55:8F:27:8B:F1:CC:A3:5D:C8:04:D8:90:E0:74:93:80:F0 Authority key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58 Certificate issuer: /CN=F36700DBAF/serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58 Certificate serial: 066A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft Manifest number: 066A Signing time: Sat 20 Dec 2025 02:21:20 +0000 Manifest this update: Sat 20 Dec 2025 02:21:19 +0000 Manifest next update: Mon 22 Dec 2025 02:21:19 +0000 Files and hashes: 1: SmfXXBQJ0u538xkN5zXsl-9jDVg.crl (hash: rWwiy87vV+w9vlUZgCCIcBtz78WWKuTCVLDjOD+a2pg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58 Validity Not Before: Dec 20 02:21:19 2025 GMT Not After : Dec 22 02:21:19 2025 GMT Subject: CN=69460820-1387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:9b:b4:0d:0f:51:a5:08:20:d3:26:5d:86: b4:4d:04:e0:0b:d4:d8:b2:be:c6:58:44:fe:ee:20: d4:ab:c8:86:7b:49:4f:87:55:66:7e:3e:60:b9:fb: f6:f0:02:9a:fe:66:d7:6d:8f:66:a7:52:60:25:76: dd:c0:ec:84:45:ba:68:d6:b0:d4:af:b5:24:da:f8: 81:98:bb:fd:31:d7:50:06:bd:e5:df:83:fe:6d:6d: 7d:ae:5e:25:1b:c8:fa:43:8f:03:dd:df:39:e5:6b: 54:0e:41:07:a3:5d:36:75:f1:2c:cb:38:8f:c5:d9: 29:eb:74:e7:05:9a:95:1b:b8:41:08:20:9b:f0:f4: 51:dc:ab:76:73:54:b3:0d:24:38:db:0b:3e:29:eb: 1d:bb:08:5f:4e:85:ef:d8:d4:ed:f8:e2:db:b8:ad: f1:ac:69:2f:45:b0:3a:bc:72:8a:ea:9c:7b:81:49: bc:d9:dc:5c:50:41:d5:5a:ab:de:38:0e:f2:fb:1b: 78:81:80:0a:17:6c:b6:d1:04:e9:e8:e4:51:23:61: cf:6e:d8:fd:0e:67:83:06:61:8d:93:93:d0:15:75: bb:2e:51:86:51:8f:cb:be:2c:29:84:fa:91:2a:d3: 21:4f:22:5b:54:f6:da:54:20:80:d8:18:3f:70:da: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:51:3B:55:8F:27:8B:F1:CC:A3:5D:C8:04:D8:90:E0:74:93:80:F0 X509v3 Authority Key Identifier: keyid:4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:25:b6:0a:0f:7a:88:66:b7:ba:3c:24:78:f1:96:3f:1f:e3: 26:3a:91:77:4f:e7:3c:e1:33:7c:e1:66:b1:b9:6b:42:52:b5: ce:7f:f2:c0:43:5a:ab:38:fd:fc:0d:d7:00:24:92:d4:3c:77: fb:05:24:5c:7a:39:48:ec:fe:3d:54:27:24:5e:f5:f3:d2:b3: 15:da:76:28:db:57:15:34:06:ff:89:ae:e1:bf:c7:17:c3:b3: 9c:f5:fc:c2:1f:f0:54:66:7d:97:aa:02:94:17:4e:43:f8:c8: 23:74:64:ca:85:ed:e8:18:d0:bf:5a:75:d6:ca:9e:ba:52:09: 32:38:41:43:a2:15:87:92:b6:6c:6a:d1:c1:8b:94:84:d4:f4: 7a:0d:73:34:2c:4b:f1:fc:75:f8:6c:b3:4b:00:bc:f1:dd:89: 68:3f:ff:ba:aa:07:80:3d:19:ed:d7:f0:27:d0:e4:dc:42:d1: a3:41:50:b8:20:3a:85:65:1a:8a:c4:13:6a:48:d6:e9:38:c3: 71:68:fa:24:89:2e:f8:62:ce:6c:f5:a7:bf:e3:39:77:74:15: 66:84:20:52:fb:de:ed:c7:a0:d5:37:69:f9:65:2b:3f:61:e6: 50:ac:b0:fa:eb:48:24:7b:30:4e:b7:95:d5:62:90:4f:fb:83: d8:c1:fb:b3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBmowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NzAwREJBRjExMC8GA1UEBRMoNEE2N0Q3NUMxNDA5RDJFRTc3RjMxOTBERTczNUVD OTdFRjYzMEQ1ODAeFw0yNTEyMjAwMjIxMTlaFw0yNTEyMjIwMjIxMTlaMBgxFjAU BgNVBAMTDTY5NDYwODIwLTEzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDAXpu0DQ9RpQgg0yZdhrRNBOAL1NiyvsZYRP7uINSryIZ7SU+HVWZ+PmC5 +/bwApr+Ztdtj2anUmAldt3A7IRFumjWsNSvtSTa+IGYu/0x11AGveXfg/5tbX2u XiUbyPpDjwPd3znla1QOQQejXTZ18SzLOI/F2SnrdOcFmpUbuEEIIJvw9FHcq3Zz VLMNJDjbCz4p6x27CF9Ohe/Y1O344tu4rfGsaS9FsDq8corqnHuBSbzZ3FxQQdVa q944DvL7G3iBgAoXbLbRBOno5FEjYc9u2P0OZ4MGYY2Tk9AVdbsuUYZRj8u+LCmE +pEq0yFPIltU9tpUIIDYGD9w2jFlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1FE7 VY8ni/HMo13IBNiQ4HSTgPAwHwYDVR0jBBgwFoAUSmfXXBQJ0u538xkN5zXsl+9j DVgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjcwMERCL0Y5QjA4RjAwRjUwMTExRUI5MDk1RTYwNEQ4QTAxNENFL1NtZlhY QlFKMHU1Mzh4a041elhzbC05akRWZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1NtZlhYQlFKMHU1Mzh4a041elhzbC05akRWZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NzAwREIvRjlCMDhGMDBGNTAxMTFFQjkwOTVFNjA0RDhB MDE0Q0UvU21mWFhCUUowdTUzOHhrTjV6WHNsLTlqRFZnLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyJbYKD3qIZre6PCR48ZY/H+MmOpF3 T+c84TN84WaxuWtCUrXOf/LAQ1qrOP38DdcAJJLUPHf7BSRcejlI7P49VCckXvXz 0rMV2nYo21cVNAb/ia7hv8cXw7Oc9fzCH/BUZn2XqgKUF05D+MgjdGTKhe3oGNC/ WnXWyp66UgkyOEFDohWHkrZsatHBi5SE1PR6DXM0LEvx/HX4bLNLALzx3YloP/+6 qgeAPRnt1/An0OTcQtGjQVC4IDqFZRqKxBNqSNbpOMNxaPokiS74Ys5s9ae/4zl3 dBVmhCBS+97tx6DVN2n5ZSs/YeZQrLD660gkezBOt5XVYpBP+4PYwfuz -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:01 2025 by rpki-client