This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft File: -MJNS9gKXwIabYXN0P8HaD3hcWc.mft (raw, json) Hash identifier: d+0/UxWkcmr6y4kDN0z+oaBv/lGywvzo+zo+RvgfCqo= Subject key identifier: F3:2C:2A:CF:11:06:2D:66:B3:50:D2:73:4F:1B:AB:8F:43:7E:10:EA Authority key identifier: F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67 Certificate issuer: /CN=F36FCE84AF/serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167 Certificate serial: 04F9 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft Manifest number: 04F7 Signing time: Sun 21 Dec 2025 02:54:21 +0000 Manifest this update: Sun 21 Dec 2025 02:54:20 +0000 Manifest next update: Tue 23 Dec 2025 02:54:20 +0000 Files and hashes: 1: -MJNS9gKXwIabYXN0P8HaD3hcWc.crl (hash: 13ffhbq6Tav1/+qz/0i7jrk0ur29f2euWJVIc2/aK/0=) 2: 6B81950217F211ED90291AC3F1222468.roa (hash: 9rMuozHD63olOv1qL+NCuYVweBLtAzHOnZZr7cPZiqE=) 3: D8C3181A903911EDA6ED2F8BF1222468.roa (hash: 9oYuZpgRg7gfP3iqjBXKbTbo2hKXqsEWnWr1xA+1M28=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 23 Dec 2025 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FCE84AF, serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167 Validity Not Before: Dec 21 02:54:20 2025 GMT Not After : Dec 23 02:54:20 2025 GMT Subject: CN=6947615d-aa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:93:7b:56:db:30:41:71:bd:0f:58:fb:5e: 05:e5:54:68:2b:83:5a:3b:a2:31:ae:b9:47:9f:7a: 63:db:06:6d:5a:23:b6:a6:b9:5e:ae:4c:ad:29:7f: 33:35:ff:14:4e:5d:9c:6f:42:12:e0:ba:43:23:61: 1f:cf:74:b9:8c:a9:22:df:a7:27:9d:4c:41:f3:99: 53:5c:a1:85:db:d4:ee:43:43:f1:4d:2e:50:cd:80: 3b:e4:e5:0a:e8:f1:6b:28:45:95:fd:02:99:e5:96: 6d:05:53:ef:1c:f8:3f:d2:0d:6e:02:6d:78:3d:ba: 2a:1c:c0:df:c3:e0:e6:05:74:8c:85:fe:aa:a3:9f: 36:18:fd:93:94:5a:22:62:9e:95:ff:76:18:ef:e1: 76:e6:01:f4:c4:84:c8:a6:c1:b1:47:c7:a3:e1:04: 69:d4:f7:4e:4e:0a:6b:96:2e:78:2c:f1:56:33:9e: 2e:6a:37:3f:68:bb:57:e3:44:27:20:ae:7b:14:13: 10:60:6d:72:60:44:76:80:ab:0c:5e:ac:04:6a:3f: 4b:58:d6:ce:69:54:9d:38:b9:7b:73:7f:63:35:da: 28:3f:a7:07:7e:b5:f6:64:fc:c5:5c:34:17:4a:4c: c5:2e:74:d6:90:92:19:7e:4c:d4:53:eb:93:7f:d6: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2C:2A:CF:11:06:2D:66:B3:50:D2:73:4F:1B:AB:8F:43:7E:10:EA X509v3 Authority Key Identifier: keyid:F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:bb:10:5c:c7:a9:dd:2d:32:75:63:e7:d8:8f:96:f1:02:c8: 45:bf:c3:6d:b4:c6:79:86:8e:37:0f:6b:1a:09:f3:d2:1c:c4: bb:fd:48:20:83:96:2f:f2:11:cc:ba:35:bd:66:29:46:3f:9c: 3b:a5:b0:29:ac:89:ef:6c:6b:b8:33:81:3e:5a:2b:ea:72:7f: db:1b:cc:a2:00:ec:eb:e2:1c:2e:b1:58:0a:8c:2b:4b:55:9a: 91:3c:03:3c:2d:ab:c0:f3:70:b8:16:c6:9c:cd:3c:45:e4:04: bc:d4:c7:50:cd:66:89:bb:b1:1f:ef:50:38:cb:6f:49:86:9f: 20:7f:72:f0:a4:de:24:ae:be:21:db:c1:a7:fe:4e:fb:7c:51: 58:27:24:2b:3b:55:7a:1f:83:a9:5b:29:4c:51:38:f6:ab:aa: 33:a3:84:44:86:46:bf:24:3d:90:8b:01:d1:35:40:52:6a:7c: 5d:21:3a:2a:05:62:fa:1e:20:53:81:17:c8:62:dd:fc:2f:2f: 09:94:95:e8:d5:0d:30:b3:9a:fd:c3:83:36:66:3b:8a:45:ae: 24:9a:82:3f:ee:a1:6e:0d:87:e2:e3:92:09:f0:ca:12:c2:d9: d5:87:a5:04:09:0f:e8:dc:91:24:98:5f:96:83:34:4d:44:d1: 91:f9:2c:b3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkNFODRBRjExMC8GA1UEBRMoRjhDMjRENEJEODBBNUYwMjFBNkQ4NUNERDBGRjA3 NjgzREUxNzE2NzAeFw0yNTEyMjEwMjU0MjBaFw0yNTEyMjMwMjU0MjBaMBgxFjAU BgNVBAMTDTY5NDc2MTVkLWFhMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDAQpN7VtswQXG9D1j7XgXlVGgrg1o7ojGuuUefemPbBm1aI7amuV6uTK0p fzM1/xROXZxvQhLgukMjYR/PdLmMqSLfpyedTEHzmVNcoYXb1O5DQ/FNLlDNgDvk 5Qro8WsoRZX9Apnllm0FU+8c+D/SDW4CbXg9uiocwN/D4OYFdIyF/qqjnzYY/ZOU WiJinpX/dhjv4XbmAfTEhMimwbFHx6PhBGnU905OCmuWLngs8VYzni5qNz9ou1fj RCcgrnsUExBgbXJgRHaAqwxerARqP0tY1s5pVJ04uXtzf2M12ig/pwd+tfZk/MVc NBdKTMUudNaQkhl+TNRT65N/1nwBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8ywq zxEGLWazUNJzTxurj0N+EOowHwYDVR0jBBgwFoAU+MJNS9gKXwIabYXN0P8HaD3h cWcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZDRTg0L0E4RTEzMzY4MTdGMTExRUQ5Rjk4QThDMEYxMjIyNDY4Ly1NSk5T OWdLWHdJYWJZWE4wUDhIYUQzaGNXYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLy1NSk5TOWdLWHdJYWJZWE4wUDhIYUQzaGNXYy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkNFODQvQThFMTMzNjgxN0YxMTFFRDlGOThBOEMwRjEy MjI0NjgvLU1KTlM5Z0tYd0lhYllYTjBQOEhhRDNoY1djLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiuxBcx6ndLTJ1Y+fYj5bxAshFv8Nt tMZ5ho43D2saCfPSHMS7/Uggg5Yv8hHMujW9ZilGP5w7pbAprInvbGu4M4E+Wivq cn/bG8yiAOzr4hwusVgKjCtLVZqRPAM8LavA83C4FsaczTxF5AS81MdQzWaJu7Ef 71A4y29Jhp8gf3LwpN4krr4h28Gn/k77fFFYJyQrO1V6H4OpWylMUTj2q6ozo4RE hka/JD2QiwHRNUBSanxdIToqBWL6HiBTgRfIYt38Ly8JlJXo1Q0ws5r9w4M2ZjuK Ra4kmoI/7qFuDYfi45IJ8MoSwtnVh6UECQ/o3JEkmF+WgzRNRNGR+Syz -----END CERTIFICATE-----Generated at Sun Dec 21 17:25:23 2025 by rpki-client