This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File: ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier: aTAVRWDKgD7FjZOw6Wm2W1iHLt5aupTMP+S5JWUsjR8=
Subject key identifier: 24:9B:4B:BF:60:0F:2C:3F:30:65:78:BD:1F:64:A0:30:D0:F9:E9:62
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 0E94
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number: 0E8A
Signing time: Sat 20 Dec 2025 01:00:27 +0000
Manifest this update: Sat 20 Dec 2025 01:00:26 +0000
Manifest next update: Mon 22 Dec 2025 01:00:26 +0000
Files and hashes: 1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: uqPGf6NYT8YWXRmpJdfABVbTCsL1jAkvi2zA1Vi8rK8=)
2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Dec 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3732 (0xe94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Dec 20 01:00:26 2025 GMT
Not After : Dec 22 01:00:26 2025 GMT
Subject: CN=6945f52b-baa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:49:d9:95:26:e5:db:0a:fe:de:dd:bb:b0:
26:ac:ff:18:68:a4:ed:5c:a5:66:62:37:5d:a6:bf:
7a:f1:46:6c:ae:fe:1c:66:51:b4:4f:c6:76:12:5d:
20:11:a4:89:e5:0a:40:f7:18:ee:e5:e7:db:8a:80:
bb:fe:a6:b5:38:07:32:d5:40:94:cc:a0:ce:db:ef:
28:c4:40:c7:be:7b:97:db:b6:07:47:68:66:9d:48:
6e:6e:9c:e0:d3:49:87:e6:12:68:27:f4:e4:c6:f0:
51:1d:ca:51:7f:df:ae:a2:e1:f2:33:0c:c6:91:cc:
3b:79:b3:cf:67:f4:9d:57:db:ed:1a:99:bd:87:03:
f7:0e:46:1a:7b:0b:9c:e4:fe:f0:d3:3a:16:b9:96:
6f:97:b9:bc:80:46:36:21:fd:31:f3:08:26:70:bc:
20:15:d1:b5:74:9b:8f:04:52:1b:a9:d6:a4:8b:14:
0e:82:c5:9d:95:7b:85:a5:98:c7:20:6b:4b:3f:1a:
54:9f:64:a6:73:9a:a5:fa:30:8e:58:68:11:3a:93:
58:d8:f3:b1:f7:3b:92:cd:14:95:95:8e:25:e7:43:
2d:49:ff:1b:75:60:42:b4:b4:1b:45:08:e2:9c:69:
80:8c:85:54:cd:5c:e6:c1:56:8c:34:ff:ff:bd:4f:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:4B:BF:60:0F:2C:3F:30:65:78:BD:1F:64:A0:30:D0:F9:E9:62
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:3f:38:cd:75:b5:d1:43:0d:fc:d3:ed:da:cd:2d:49:5f:38:
e4:0b:b4:66:e4:73:77:9a:6d:21:e9:fb:04:34:e6:02:39:b7:
61:44:3e:48:07:72:de:4d:7a:f8:5e:d4:e1:42:80:bb:a7:a2:
96:47:b7:a5:5d:cf:1e:c9:de:3c:9b:60:f0:4c:30:ac:b4:ca:
eb:89:d8:76:95:7c:05:6c:6d:a5:c4:07:8b:f5:a1:54:ba:66:
c3:70:55:ba:8a:39:a1:11:20:d9:8d:59:c4:5b:cb:30:36:cf:
31:8b:8f:b2:db:0f:91:2a:60:74:d4:f8:33:16:5e:59:82:7f:
9a:a5:aa:97:88:a5:c4:e7:3b:4b:d9:ab:18:59:9e:56:89:73:
40:3f:00:52:09:36:ad:b5:00:88:e4:66:32:87:32:42:94:53:
53:2c:ef:ff:77:fd:8e:1f:1a:32:b7:b8:56:94:c1:2f:cf:c1:
29:cd:6a:27:a0:5c:cd:f0:0c:5b:96:dd:bc:02:21:03:04:b8:
08:42:32:a0:05:51:9b:06:5d:2e:78:96:c9:63:39:01:ab:d5:
a7:82:3e:37:a5:23:2f:9c:4e:e7:9a:3f:cd:87:ab:70:0d:78:
37:a8:79:52:c6:f0:90:d1:44:02:3f:e6:7a:b2:6d:b5:1e:e1:
10:17:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:32:38 2025 by rpki-client