This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft File: U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json) Hash identifier: kUO3S4Sc6Q8Nl8Lz8Qc7T7Uk6UPBz9ocudJsMQ/77Io= Subject key identifier: 71:7F:83:58:E5:20:F4:41:6A:85:45:66:FE:D1:A4:1A:8B:EF:24:CE Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09 Certificate issuer: /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109 Certificate serial: 0321 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft Manifest number: 031C Signing time: Mon 08 Dec 2025 03:50:01 +0000 Manifest this update: Mon 08 Dec 2025 03:50:00 +0000 Manifest next update: Wed 10 Dec 2025 03:50:00 +0000 Files and hashes: 1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: KZIJTTLCJ7NN6YQ74qHYG5wzpZq0m2JoHl8QqQZcdyI=) 2: 902EBEC6960311EEBE7A780ED25BE465.roa (hash: RI1NH59VXYSwoVvD3QSrzuux5c6I6SJhdTOnik9vzQs=) 3: DBC979D8CFB411F0BD144F9CDAE4EC9C.roa (hash: 4zbQGzXYjWG9pUVTMR7RzWQtxqPrQhTqI/M5Rc7TchA=) 4: 6684D06A960311EEBA07EA0DD25BE465.roa (hash: 43CBfTPYLSaOl2NwiPQTIsa3VBBdU7WdHBgYb3+EOHI=) 5: 790E531095AD11EE9C283379D25BE465.roa (hash: Qj3JkuwJNN7j0VesRDUQ2bCZfvpe+I/vZ/mOS/O0MGI=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109 Validity Not Before: Dec 8 03:50:00 2025 GMT Not After : Dec 10 03:50:00 2025 GMT Subject: CN=69364ae9-3da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:eb:10:86:42:b6:e4:b5:4c:39:48:18:5d: 7d:7a:32:13:67:d8:21:b6:ec:bb:42:87:61:24:32: f2:69:c0:dd:18:3f:61:08:7d:d3:2f:60:51:ff:fa: b3:b9:4e:1d:70:70:47:30:89:c4:3d:6f:64:c7:ae: 2b:4a:df:63:7c:33:03:f2:e4:ce:48:bf:29:3c:31: c8:98:ba:25:b1:66:7d:24:ee:20:d4:44:d0:71:43: 23:a1:0b:92:9a:33:0c:9e:f6:d5:13:17:97:a1:43: 4f:5f:7a:39:98:9d:51:a3:78:ce:21:13:fb:8e:d3: 84:df:dc:b7:41:d1:34:04:80:88:e0:f5:72:ef:bf: 4f:af:85:4c:3b:92:a2:24:49:99:8d:59:59:a3:44: 01:e6:11:71:9b:86:08:7d:de:ac:84:cb:f9:58:4d: 28:63:ba:1e:d6:27:9c:1c:c8:4b:be:f6:82:c5:58: d0:d8:7f:b5:a6:54:25:97:53:b2:80:1d:b6:d8:e1: a7:7b:87:3a:f5:b2:81:8f:3e:e5:30:af:aa:1f:a9: 27:70:c0:62:ee:c0:3f:64:b5:61:2b:28:1d:3d:f8: 7d:17:59:ce:89:6a:39:24:e5:99:e2:90:4f:e6:f3: 9e:33:dc:af:db:26:f1:39:a8:54:86:a7:5c:e9:7f: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7F:83:58:E5:20:F4:41:6A:85:45:66:FE:D1:A4:1A:8B:EF:24:CE X509v3 Authority Key Identifier: keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:24:f4:b8:3b:00:f5:2a:ea:2d:1b:c8:c2:48:f6:93:53:c6: f1:a1:35:92:58:c5:14:a7:68:3c:fd:ce:2e:6e:bc:4a:c0:3c: 79:ed:3a:9d:f0:e4:77:c9:aa:e6:cc:69:25:5a:d4:ca:4a:a2: 05:fb:f1:5b:a7:6a:37:4a:e1:48:ab:85:5d:e3:df:0e:10:6d: 28:aa:0b:96:74:81:42:0c:8e:43:36:83:17:1b:e9:3f:4c:20: 3b:47:2f:79:c8:24:fd:4b:d1:c8:16:6c:6b:f2:a1:8e:d7:19: 58:57:32:b1:1a:00:99:22:84:c2:a0:33:ae:cf:dd:80:4e:22: 53:00:99:34:b4:63:01:5d:4a:5f:9d:d1:e9:db:81:d7:5d:0e: c6:1c:1f:96:42:df:e5:cd:00:0f:7f:10:86:44:5b:bc:0c:21: 03:6d:62:14:6c:f6:aa:b8:d9:24:c7:f2:77:46:5f:7a:ec:8f: 17:d3:89:6f:c2:a6:c2:77:ad:ea:a6:91:c9:86:ba:49:18:b3: 6b:b7:31:35:6d:6b:1a:a8:36:d1:b0:99:20:e0:7b:9c:8d:5e: 8a:6f:e4:51:f5:ff:d7:b2:93:e7:ee:a1:48:e1:f1:1e:0c:7a: 3c:7e:fd:82:ac:e1:67:78:27:97:be:c8:c8:a0:82:27:cb:6d: b2:7d:54:6c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MUYxREFBRjExMC8GA1UEBRMoNTM3NUI2NzhGMzZCOEQ5QzZCNURDMzI4MUI2RjVF QjY3MTZBMTEwOTAeFw0yNTEyMDgwMzUwMDBaFw0yNTEyMTAwMzUwMDBaMBgxFjAU BgNVBAMTDTY5MzY0YWU5LTNkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCxL+sQhkK25LVMOUgYXX16MhNn2CG27LtCh2EkMvJpwN0YP2EIfdMvYFH/ +rO5Th1wcEcwicQ9b2THritK32N8MwPy5M5Ivyk8MciYuiWxZn0k7iDURNBxQyOh C5KaMwye9tUTF5ehQ09fejmYnVGjeM4hE/uO04Tf3LdB0TQEgIjg9XLvv0+vhUw7 kqIkSZmNWVmjRAHmEXGbhgh93qyEy/lYTShjuh7WJ5wcyEu+9oLFWNDYf7WmVCWX U7KAHbbY4ad7hzr1soGPPuUwr6ofqSdwwGLuwD9ktWErKB09+H0XWc6Jajkk5Zni kE/m854z3K/bJvE5qFSGp1zpf01TAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcX+D WOUg9EFqhUVm/tGkGovvJM4wHwYDVR0jBBgwFoAUU3W2ePNrjZxrXcMoG29etnFq EQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjFGMURBLzJEQThGMzdBNzdFMDExRUVBMjMzRUE3QjRBRDlFNkZDL1UzVzJl UE5yalp4clhjTW9HMjlldG5GcUVRay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1UzVzJlUE5yalp4clhjTW9HMjlldG5GcUVRay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MUYxREEvMkRBOEYzN0E3N0UwMTFFRUEyMzNFQTdCNEFE OUU2RkMvVTNXMmVQTnJqWnhyWGNNb0cyOWV0bkZxRVFrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxJPS4OwD1KuotG8jCSPaTU8bxoTWS WMUUp2g8/c4ubrxKwDx57Tqd8OR3yarmzGklWtTKSqIF+/Fbp2o3SuFIq4Vd498O EG0oqguWdIFCDI5DNoMXG+k/TCA7Ry95yCT9S9HIFmxr8qGO1xlYVzKxGgCZIoTC oDOuz92ATiJTAJk0tGMBXUpfndHp24HXXQ7GHB+WQt/lzQAPfxCGRFu8DCEDbWIU bPaquNkkx/J3Rl967I8X04lvwqbCd63qppHJhrpJGLNrtzE1bWsaqDbRsJkg4Huc jV6Kb+RR9f/XspPn7qFI4fEeDHo8fv2CrOFneCeXvsjIoIIny22yfVRs -----END CERTIFICATE-----Generated at Mon Dec 8 17:04:46 2025 by rpki-client