This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json) Hash identifier: aV6OBAVg4nQv1Dzm32luWXtP/RbdyQwl6AgUt0CON8Q= Subject key identifier: 5A:C5:31:9F:2A:C5:93:7B:D3:1A:E0:AC:B8:97:E7:C1:EB:2F:5A:FA Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7 Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7 Certificate serial: 0F2D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft Manifest number: 0F2C Signing time: Sun 28 Dec 2025 00:52:47 +0000 Manifest this update: Sun 28 Dec 2025 00:52:47 +0000 Manifest next update: Tue 30 Dec 2025 00:52:47 +0000 Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: vp1U4li7K3guND4QWGKb9wOU7NH2CSb++yEi4b41Wj0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 30 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3885 (0xf2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7 Validity Not Before: Dec 28 00:52:47 2025 GMT Not After : Dec 30 00:52:47 2025 GMT Subject: CN=69507f5f-502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:36:d0:d4:c2:0b:29:16:31:b9:52:fd:1f:d6: 84:76:40:fa:aa:dc:41:77:84:f4:2f:7b:c3:57:01: 9b:d6:05:13:d0:67:f2:e4:60:c3:a1:2b:e2:eb:ec: 2b:4d:29:be:a2:73:f4:d0:fc:7a:6f:cc:30:7e:65: 3e:35:7f:b9:20:00:1f:72:a1:03:b7:75:61:ed:04: f2:7a:a9:80:f3:5c:5c:07:8c:3d:fd:d2:f3:ec:b6: ac:b6:20:93:ec:6c:ac:93:7e:50:55:ca:db:14:6b: 19:c6:ad:6f:0a:3c:a5:d4:b9:fb:ac:a1:1a:3a:3c: 0e:06:60:2e:ee:74:4e:d4:ae:25:f9:81:23:9a:dd: 5b:12:fd:7f:85:68:64:d5:e0:20:ea:cc:76:e9:ee: cc:d4:bd:ad:c5:82:5c:59:c2:2f:82:08:83:5c:28: dd:d4:c3:56:70:8d:9e:b6:1d:3f:c7:f2:29:bf:dd: e5:d6:14:4b:58:24:51:86:b7:f0:91:03:19:d9:b1: c4:cd:75:70:07:0b:cc:47:c3:91:b4:7d:d7:86:65: 87:54:fa:4a:3c:98:27:a8:ec:aa:f1:6d:a8:45:34: 74:0b:43:03:69:f8:17:cd:7a:17:81:c5:ee:41:56: ca:c8:67:b7:49:fe:c5:89:dc:36:df:d5:7e:8f:40: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C5:31:9F:2A:C5:93:7B:D3:1A:E0:AC:B8:97:E7:C1:EB:2F:5A:FA X509v3 Authority Key Identifier: keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5f:4b:bf:f9:f8:da:5d:f8:a3:ae:8a:61:83:e5:f2:cb:56: 09:69:67:3c:60:e4:77:a5:5f:08:ec:bf:6e:49:e3:0c:3f:2a: 04:33:65:ae:e9:ec:ad:30:af:70:52:73:9c:af:b5:b2:79:08: 6d:48:3a:f8:2f:3a:4f:27:82:24:8b:9e:fd:f4:ad:99:eb:8a: c4:3a:b3:18:ce:6c:c0:a3:02:f7:66:4a:90:f0:13:12:7b:4c: 52:16:d0:74:0b:4d:48:a4:98:05:e9:55:05:d3:58:9e:38:81: 2a:b0:b6:e4:fc:d9:82:8f:32:e7:57:93:25:b3:ab:b5:18:45: b5:f1:b8:dc:fb:15:7a:f3:b5:93:98:f2:80:92:19:80:ea:df: 51:09:f4:de:56:c0:c6:04:d2:9c:b7:18:a9:04:11:a4:7e:0f: 21:95:2a:6b:5e:3c:28:11:27:3d:2b:64:a1:e1:83:8a:6f:22: fc:16:e6:f0:e3:2f:1f:19:68:ba:48:b0:69:f2:a1:77:ef:26: 92:55:30:34:d8:cc:9b:d0:9d:40:0b:78:95:7c:57:0e:97:75: 67:81:85:18:59:66:fb:5d:ac:bc:3a:6e:e4:ae:1a:a0:3d:88: 6b:a1:3e:cf:50:d6:c8:8d:cb:20:c7:15:bc:49:fe:e3:09:0b: d2:ef:87:17 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDy0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkZEMUVBRjExMC8GA1UEBRMoNDEyRDE5RjlBNEUxN0EwNEQwOUJBREM5MDJBQjBC MDkwODI0RUFENzAeFw0yNTEyMjgwMDUyNDdaFw0yNTEyMzAwMDUyNDdaMBgxFjAU BgNVBAMTDTY5NTA3ZjVmLTUwMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCcNtDUwgspFjG5Uv0f1oR2QPqq3EF3hPQve8NXAZvWBRPQZ/LkYMOhK+Lr 7CtNKb6ic/TQ/HpvzDB+ZT41f7kgAB9yoQO3dWHtBPJ6qYDzXFwHjD390vPstqy2 IJPsbKyTflBVytsUaxnGrW8KPKXUufusoRo6PA4GYC7udE7UriX5gSOa3VsS/X+F aGTV4CDqzHbp7szUva3FglxZwi+CCINcKN3Uw1ZwjZ62HT/H8im/3eXWFEtYJFGG t/CRAxnZscTNdXAHC8xHw5G0fdeGZYdU+ko8mCeo7KrxbahFNHQLQwNp+BfNeheB xe5BVsrIZ7dJ/sWJ3Dbf1X6PQK/7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWsUx nyrFk3vTGuCsuJfnwesvWvowHwYDVR0jBBgwFoAUQS0Z+aThegTQm63JAqsLCQgk 6tcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZGRDFFLzFBQUUyNjBDMzE2NTExRTVBRTY2NjA2N0Y4QUVBMjI4L1FTMFot YVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1FTMFotYVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkZEMUUvMUFBRTI2MEMzMTY1MTFFNUFFNjY2MDY3RjhB RUEyMjgvUVMwWi1hVGhlZ1RRbTYzSkFxc0xDUWdrNnRjLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMX0u/+fjaXfijrophg+Xyy1YJaWc8 YOR3pV8I7L9uSeMMPyoEM2Wu6eytMK9wUnOcr7WyeQhtSDr4LzpPJ4Iki5799K2Z 64rEOrMYzmzAowL3ZkqQ8BMSe0xSFtB0C01IpJgF6VUF01ieOIEqsLbk/NmCjzLn V5Mls6u1GEW18bjc+xV687WTmPKAkhmA6t9RCfTeVsDGBNKctxipBBGkfg8hlSpr XjwoESc9K2Sh4YOKbyL8Fubw4y8fGWi6SLBp8qF37yaSVTA02Myb0J1AC3iVfFcO l3VngYUYWWb7Xay8Om7krhqgPYhroT7PUNbIjcsgxxW8Sf7jCQvS74cX -----END CERTIFICATE-----Generated at Sun Dec 28 09:07:49 2025 by rpki-client