Network Voice Platforms
For Service Providers Operating in France
French MAN compliance.
Signalling only.
No media overhead.
The Shout SIP-Switch acts as a Signatory Operator (OPS) under MAN — verifying the caller's right to present a French number, signing the call with an APNF-issued certificate, and forwarding the signed INVITE to your platform. RTP media bypasses entirely.
MAN Signalling Flow
PSTN / Origination Carrier
↓ SIP INVITE (FROM: +33…)
Shout SIP-Switch — OPS (MAN)
Num. Verify
PASSporT Sign
SDP RW
Signalling only — RTP never anchored here
↓ SIP INVITE + Identity: header (dashed)
Customer SBC / Platform
↓ SIP INVITE + Identity: header (dashed)
Terminating Endpoint
Terminating Endpoint
2,000+
Switched calls per unit
20,000
Simultaneous calls per cluster
A / B / C
Attestation levels
24 Seven
Global support
What is MAN?
French caller ID authentication.
Mandated by law since 2024.
Mécanisme d'Authentification des Numéros (MAN) was introduced by the Naegelen Law (n° 2020-901) and has been mandatory for French operators since October 2024. It requires every operator to decode and verify the validity of incoming calls, ensuring the caller is who they say they are and that they have a right to use that number. Transit valid calls to the next operator and automatically block and report fraudulent calls. Authenticate and sign calls that originate on the platform. As of January 2026, operators must mask any French mobile number that fails authentication.
Based on STIR/SHAKEN protocols
Uses PASSporT tokens and the SIP Identity: header — governed by APNF (France), not the FCC or Ofcom.
Signs the Identity header
MAN signature added to Identity header. A French-specific requirement.
APNF certificates only
Certificates are issued by APNF. US/UK STIR/SHAKEN certificates are not valid for France.
Certificate chain
The MAN certificate chain and how the switch fits in.
APNF
Root CA · STI-PA/STI-CA
Issues operator certificates
Operator Cert
Held locally on switch
Downloaded from BCO
Shout SIP-Switch
Signatory Operator (OPS)
Adds Identity: header · FROM · A/B/C
Terminating Operator
Verifies Identity: header
Blocks if invalid or absent
Call Setup Sequence
Five steps. Entirely
in the signalling plane.
The switch processes each call through five discrete steps — all within SIP signalling. At no point does media touch the switch.
Step 01
Inbound INVITE
PSTN carrier sends a SIP INVITE with FROM: +33 number to the Shout PoP. Standard SIP — no specialist config on the originating side. The INVITE may already carry an existing Identity: header.
Step 02
Certificate trust verified
The cert URL is extracted from the Identity: header. The certificate is fetched and verified to chain back to the APNF root CA. Invalid = block.
Step 03
Numbers and level checked
FROM/To in the PASSporT claims are verified to match the actual INVITE headers. Attestation level checked against the customer's configurable policy.
Step 04
PASSporT signed
If the number mutates a new JWT PASSporT token is generated at the correct attestation level (A/B/C) and signed with the switch's APNF-issued private key.
Step 05
Call forwarded, RTP direct
The signed INVITE is forwarded with the Identity: header. SDP is rewritten so media bypasses the switch entirely. Customer infrastructure handles RTP as normal.
Key Capabilities
Everything MAN compliance
requires. Nothing it doesn't.
Built specifically for the French MAN obligation — deployed as a signalling overlay with no changes to your existing media infrastructure.
Signs Identity header
Signs the SIP Identity header per MAN rules — not P-Asserted-Identity. Fully compliant with APNF specification and Naegelen Law.
APNF certificate management
Holds APNF-issued operator certificates, maintains local BCO cache, and handles renewal and revocation automatically.
Zero media overhead
RTP bypasses the switch via SDP rewrite. No hairpinning, no latency addition. Customer infrastructure unchanged.
Certificate trust chain verification
On inbound calls, cert URL extracted from Identity: header, verified to chain back to the APNF root CA. Non-compliant calls blocked.
Attestation level policy
PASSporT number claims verified against actual INVITE. Attestation level checked against configurable customer policy.
High capacity, clusterable
20,000+ simultaneous calls per unit. Multiple units cluster and pool capacity across the estate for linear scaling.
Signing
FROM header · A/B/C attestation
Certificate
APNF-issued · local BCO cache
RTP mode
Direct / pass-through via SDP rewrite
Capacity
20,000+ calls/unit · clusterable
Ready to meet France's MAN obligation?
Talk to our team about deploying the Shout SIP-Switch as your MAN Signatory Operator — signalling only, no changes to your existing media infrastructure.