This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json) Hash identifier: NAkA04hssJGWIfaZhCueRNEHr0VCb2SmR0NXTIo+H4o= Subject key identifier: 5B:0F:38:92:CC:0A:8E:52:75:E8:19:E1:9B:CF:63:FB:B3:6F:72:16 Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63 Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63 Certificate serial: 0281 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft Manifest number: 027B Signing time: Mon 22 Dec 2025 04:14:01 +0000 Manifest this update: Mon 22 Dec 2025 04:14:00 +0000 Manifest next update: Wed 24 Dec 2025 04:14:00 +0000 Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: fbrfSY1g7nEM/ZRWggB1FBTWcl4FiFpIxem/V+Xhn+s=) 2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=) 3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=) 4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=) 5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 24 Dec 2025 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63 Validity Not Before: Dec 22 04:14:00 2025 GMT Not After : Dec 24 04:14:00 2025 GMT Subject: CN=6948c589-5fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:87:9a:8b:46:d9:b5:2b:8d:72:cc:f8:bc: aa:6b:19:20:c2:35:2b:34:4b:a7:d5:07:0e:9c:78: 56:be:32:f8:64:00:e7:07:96:1e:26:57:67:d0:cd: 27:b6:25:d9:4e:10:b2:2b:59:d4:81:fd:b4:58:0d: 05:62:14:d7:91:e3:e7:d5:d4:a6:3a:e0:c6:ec:2e: 67:b7:e6:1e:13:6d:96:36:90:76:af:ca:a3:d2:30: 7c:a2:d2:e1:4e:9c:f6:f3:af:94:52:b7:1c:56:08: 2d:25:60:42:1e:70:b1:48:ea:c4:35:72:35:40:9e: c6:0a:f4:1f:55:2f:a4:00:f7:12:4b:f8:1c:b2:62: a2:0e:95:ce:ce:79:04:f2:0c:6c:c7:00:89:17:86: f6:fc:51:f1:0e:14:4d:6d:da:5e:d3:2f:a3:22:ed: 44:72:33:39:ca:bb:68:0f:c0:55:44:d9:b1:67:c2: 9a:d1:21:35:a8:09:c4:b6:7c:43:5a:04:fc:f7:43: dc:2f:5a:90:1d:3f:7a:57:cb:95:d2:02:f4:91:0c: 65:d4:24:7e:f8:8a:9b:9d:75:61:65:0b:a3:f0:f5: 0c:1f:31:a7:84:f9:6d:03:45:62:74:35:40:62:ac: df:cb:00:d3:44:23:57:92:1d:a9:b5:96:2a:a7:45: 10:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:38:92:CC:0A:8E:52:75:E8:19:E1:9B:CF:63:FB:B3:6F:72:16 X509v3 Authority Key Identifier: keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8c:39:d3:15:52:4e:b5:56:68:73:b7:b4:0e:d6:72:96:2f: 04:08:b2:02:24:04:f2:88:7a:96:4b:8f:7c:0b:b0:bb:58:f3: 3b:af:70:43:b9:ab:57:4a:de:9d:91:cc:d5:ae:31:dd:6e:05: ee:09:3b:68:12:1e:87:43:a3:de:e7:4f:12:dc:8f:cc:46:d2: 6b:2b:ff:05:68:a9:fa:a3:31:29:0c:a9:3f:63:0c:9c:e5:2a: 3e:60:15:bd:dd:96:20:9d:69:33:30:a7:e5:99:16:9f:55:1f: cf:e3:69:ef:72:91:69:66:53:c5:5a:40:34:4d:0b:aa:d6:1b: 34:46:37:e3:bb:4a:45:0f:04:c6:f4:d7:a0:39:31:38:60:21: e3:ef:dd:8e:44:ae:ba:e3:93:87:62:27:d1:fb:e0:6f:85:15: ef:ec:ab:20:90:26:2c:70:82:5f:06:92:8d:66:64:2b:0a:fc: e4:cf:cf:f6:ef:aa:cb:c6:9a:00:ad:62:2b:53:66:55:c0:fe: a9:5f:1d:22:cb:cd:14:2f:f3:07:94:5f:17:be:0c:7a:23:81: 78:7c:97:67:8a:77:81:2b:54:15:37:a5:4f:0b:7a:8b:54:9d: 81:c1:53:a9:f1:a4:6e:56:94:16:bf:c0:e7:12:b5:69:45:61: 69:86:cb:67 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTNBRTBBRjExMC8GA1UEBRMoMDlCMzRFMTMzNjM5RDNCNEVFMzUxNjEzQjhBNjBE NkIxOTAyQUQ2MzAeFw0yNTEyMjIwNDE0MDBaFw0yNTEyMjQwNDE0MDBaMBgxFjAU BgNVBAMTDTY5NDhjNTg5LTVmYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCd44eai0bZtSuNcsz4vKprGSDCNSs0S6fVBw6ceFa+MvhkAOcHlh4mV2fQ zSe2JdlOELIrWdSB/bRYDQViFNeR4+fV1KY64MbsLme35h4TbZY2kHavyqPSMHyi 0uFOnPbzr5RStxxWCC0lYEIecLFI6sQ1cjVAnsYK9B9VL6QA9xJL+ByyYqIOlc7O eQTyDGzHAIkXhvb8UfEOFE1t2l7TL6Mi7URyMznKu2gPwFVE2bFnwprRITWoCcS2 fENaBPz3Q9wvWpAdP3pXy5XSAvSRDGXUJH74ipuddWFlC6Pw9QwfMaeE+W0DRWJ0 NUBirN/LANNEI1eSHam1liqnRRBLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWw84 kswKjlJ16Bnhm89j+7NvchYwHwYDVR0jBBgwFoAUCbNOEzY507TuNRYTuKYNaxkC rWMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjkzQUUwL0JCRTUyRkYyMDBFMTExRUZBRjg0RDYwNzAxNzAwMUIxL0NiTk9F elk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NiTk9Felk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3 MDAxQjEvQ2JOT0V6WTUwN1R1TlJZVHVLWU5heGtDcldNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIjDnTFVJOtVZoc7e0DtZyli8ECLIC JATyiHqWS498C7C7WPM7r3BDuatXSt6dkczVrjHdbgXuCTtoEh6HQ6Pe508S3I/M RtJrK/8FaKn6ozEpDKk/Ywyc5So+YBW93ZYgnWkzMKflmRafVR/P42nvcpFpZlPF WkA0TQuq1hs0Rjfju0pFDwTG9NegOTE4YCHj792ORK6645OHYifR++BvhRXv7Ksg kCYscIJfBpKNZmQrCvzkz8/276rLxpoArWIrU2ZVwP6pXx0iy80UL/MHlF8Xvgx6 I4F4fJdnineBK1QVN6VPC3qLVJ2BwVOp8aRuVpQWv8DnErVpRWFphstn -----END CERTIFICATE-----Generated at Mon Dec 22 15:44:31 2025 by rpki-client