This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json) Hash identifier: onQ4P1q3+Yd8xJG0kgqGwESZza3ngxF5d2YQtcxC5mc= Subject key identifier: BD:87:01:54:98:4B:EC:EB:6A:35:64:29:EE:39:A2:6D:30:ED:BE:A7 Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20 Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520 Certificate serial: 03CE Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft Manifest number: 03C5 Signing time: Sat 27 Dec 2025 03:33:17 +0000 Manifest this update: Sat 27 Dec 2025 03:33:16 +0000 Manifest next update: Mon 29 Dec 2025 03:33:16 +0000 Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: C5+zV+ASKEoYL6CjMk2RD3hDBu/3X/Gafmmmwp+l5Ts=) 2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=) 3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=) 4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=) 5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 29 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520 Validity Not Before: Dec 27 03:33:16 2025 GMT Not After : Dec 29 03:33:16 2025 GMT Subject: CN=694f537c-dae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:fa:62:87:bc:56:a4:95:d2:09:dc:28:74: 26:e2:81:bd:3c:a3:b7:b4:de:31:35:75:76:1f:a9: 47:02:58:02:b9:05:59:22:bd:d6:31:02:e5:d1:d3: 09:f5:36:c1:8a:df:ed:cc:b7:78:eb:7b:04:06:af: 33:c7:25:c3:69:fb:2c:e5:16:cf:57:b1:f4:e3:c2: 28:d8:f8:c7:b3:f6:5e:0a:36:a5:01:ab:b9:a6:fa: 27:4b:9a:31:6e:45:9c:18:6a:30:b7:18:f2:4b:9b: 55:8c:c0:a7:f9:26:9f:84:ba:df:18:80:88:07:ae: 50:76:fa:69:a5:1b:ac:07:6b:28:f3:76:64:b1:0e: c9:16:32:01:57:c3:64:1f:c0:85:37:24:46:66:bf: a1:b5:39:3b:c7:19:a6:c5:9d:f4:bd:a8:70:83:ab: c4:26:70:06:1a:1f:3f:79:f9:15:18:c9:2c:c9:21: 8d:49:01:08:c5:52:17:0c:b4:03:3f:65:95:a0:b1: 28:e3:c8:3b:87:df:bc:eb:41:9d:d7:7f:69:49:4b: e1:b4:8a:80:06:d0:37:b0:1c:60:1a:6c:35:cf:56: 1c:8b:88:84:5c:1c:53:83:da:13:e6:f4:a3:84:38: d6:2d:6a:b7:30:8b:77:2d:fe:72:23:29:53:66:33: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:87:01:54:98:4B:EC:EB:6A:35:64:29:EE:39:A2:6D:30:ED:BE:A7 X509v3 Authority Key Identifier: keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7b:7b:00:71:8b:f8:ca:9e:25:00:26:e3:8f:11:0d:1f:93: 7c:75:c6:92:9f:7f:72:d2:e0:ce:26:18:70:33:75:e7:77:51: 11:b6:7f:d9:38:f3:ca:66:98:eb:77:cc:88:ca:f1:63:8f:31: f2:18:d4:52:18:72:5c:4a:b3:06:02:4d:86:2a:cf:12:26:81: 0c:8c:e7:ac:88:b5:5a:e6:52:f7:2d:62:d5:8e:80:71:cb:54: 7b:01:ad:4d:cd:6e:31:e2:52:18:1b:23:b4:a4:89:fe:32:42: d0:c7:df:16:37:24:94:b0:18:af:e8:44:e7:49:b7:7d:fc:08: eb:96:c4:a2:4b:15:06:92:b5:70:c8:c0:cd:d2:bf:af:88:1f: 45:da:86:aa:5b:6a:2f:f0:49:9e:7b:25:b1:f0:f1:da:59:04: aa:7b:ef:82:9d:79:2f:33:68:14:c0:3a:cf:e0:40:98:af:c2: 03:df:65:89:ee:41:fe:63:a4:ed:d7:28:72:86:bd:90:7f:b6: 70:93:b4:77:7a:11:23:ab:4f:8e:e0:0b:f6:d3:f6:d3:37:91: 6d:e6:02:39:87:ae:72:81:2d:2d:bc:26:86:b9:34:c5:ea:81: 3b:f5:0b:70:40:ec:4b:d5:04:3c:c0:7c:dc:e8:14:18:61:fc: 25:a4:0e:b9 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA84wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RThCRjdBRjExMC8GA1UEBRMoQzczM0VEMUE3Njc0MjBFRUY1M0UwNTYxODc4MTBC RTM5MzRBQTUyMDAeFw0yNTEyMjcwMzMzMTZaFw0yNTEyMjkwMzMzMTZaMBgxFjAU BgNVBAMTDTY5NGY1MzdjLWRhZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC1r/pih7xWpJXSCdwodCbigb08o7e03jE1dXYfqUcCWAK5BVkivdYxAuXR 0wn1NsGK3+3Mt3jrewQGrzPHJcNp+yzlFs9XsfTjwijY+Mez9l4KNqUBq7mm+idL mjFuRZwYajC3GPJLm1WMwKf5Jp+Eut8YgIgHrlB2+mmlG6wHayjzdmSxDskWMgFX w2QfwIU3JEZmv6G1OTvHGabFnfS9qHCDq8QmcAYaHz95+RUYySzJIY1JAQjFUhcM tAM/ZZWgsSjjyDuH37zrQZ3Xf2lJS+G0ioAG0DewHGAabDXPVhyLiIRcHFOD2hPm 9KOEONYtarcwi3ct/nIjKVNmM30ZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvYcB VJhL7OtqNWQp7jmibTDtvqcwHwYDVR0jBBgwFoAUxzPtGnZ0IO71PgVhh4EL45NK pSAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkU4QkY3L0VFRTZFRkFDMEFBMjExRUVBQTFFMjE0MzRBRDlFNkZDL3h6UHRH blowSU83MVBnVmhoNEVMNDVOS3BTQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3h6UHRHblowSU83MVBnVmhoNEVMNDVOS3BTQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RThCRjcvRUVFNkVGQUMwQUEyMTFFRUFBMUUyMTQzNEFE OUU2RkMveHpQdEduWjBJTzcxUGdWaGg0RUw0NU5LcFNBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBe3sAcYv4yp4lACbjjxENH5N8dcaS n39y0uDOJhhwM3Xnd1ERtn/ZOPPKZpjrd8yIyvFjjzHyGNRSGHJcSrMGAk2GKs8S JoEMjOesiLVa5lL3LWLVjoBxy1R7Aa1NzW4x4lIYGyO0pIn+MkLQx98WNySUsBiv 6ETnSbd9/AjrlsSiSxUGkrVwyMDN0r+viB9F2oaqW2ov8EmeeyWx8PHaWQSqe++C nXkvM2gUwDrP4ECYr8ID32WJ7kH+Y6Tt1yhyhr2Qf7Zwk7R3ehEjq0+O4Av20/bT N5Ft5gI5h65ygS0tvCaGuTTF6oE79QtwQOxL1QQ8wHzc6BQYYfwlpA65 -----END CERTIFICATE-----Generated at Sat Dec 27 04:43:55 2025 by rpki-client