This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft File: cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json) Hash identifier: lAJOoyrU5ZGW4NxeFCek0/NUIPOuk0pm78AKsXzk/UY= Subject key identifier: 2F:28:62:C5:D4:AC:BA:7F:D3:B8:34:8A:B1:66:E8:76:B0:69:D4:F8 Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD Certificate issuer: /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD Certificate serial: 06EA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft Manifest number: 06E6 Signing time: Sun 07 Dec 2025 02:04:43 +0000 Manifest this update: Sun 07 Dec 2025 02:04:42 +0000 Manifest next update: Tue 09 Dec 2025 02:04:42 +0000 Files and hashes: 1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: EtVg6IgjFSknoniiJyMYlBRbmOTC3MBw8qvU/dyF1wQ=) 2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=) 3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=) 4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 09 Dec 2025 02:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD Validity Not Before: Dec 7 02:04:42 2025 GMT Not After : Dec 9 02:04:42 2025 GMT Subject: CN=6934e0bb-1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2c:0d:90:90:5e:b8:e3:5e:ad:50:6b:59:a1: 4a:77:bf:fa:68:30:c4:81:20:6c:82:63:55:28:65: 19:cd:11:99:38:e4:e3:7a:0a:4c:5f:1c:5b:2b:b5: d8:b4:11:98:78:d2:0a:bf:f2:03:94:0e:d9:87:6d: b0:0e:5a:42:b7:2a:13:5d:43:4d:a9:8f:2d:86:73: a9:f2:48:b6:b0:a9:dc:c1:70:9e:20:52:97:ae:10: 60:83:3c:bd:a8:19:c8:12:c3:70:31:7e:f9:10:f3: 53:40:22:a6:0f:06:61:fe:88:09:72:bc:49:29:60: 91:ba:26:c1:69:da:2b:01:18:2b:66:51:e1:4f:61: f0:5e:e0:dc:2c:1f:66:10:13:cf:2f:88:35:62:1e: f1:b4:76:c4:56:d2:5a:3c:b5:50:ad:fb:a0:ac:d5: ff:f4:50:4e:98:29:aa:1e:7e:a3:64:18:83:d9:dc: 9c:81:df:54:59:f0:49:3d:8d:44:a8:da:06:7e:d9: 66:4d:79:3a:42:02:fd:b6:61:5e:c1:bb:86:91:94: 8d:8c:36:47:c6:d3:3c:c4:dd:3b:98:d2:11:27:c4: bd:22:a6:0b:b0:01:04:12:5f:f9:6b:a1:11:1b:da: a8:cf:6f:a1:09:57:b6:95:46:8d:f4:5b:17:80:07: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:28:62:C5:D4:AC:BA:7F:D3:B8:34:8A:B1:66:E8:76:B0:69:D4:F8 X509v3 Authority Key Identifier: keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f4:b6:3d:0d:cb:e6:50:ed:87:7e:4b:8b:a4:b6:04:6f:a4: 22:87:46:35:ce:5e:54:df:9c:94:09:04:d7:b3:02:df:81:7d: b1:48:ed:d7:84:0c:0a:e5:60:66:5c:89:f8:a6:e8:0c:88:be: 65:56:55:f4:8a:60:59:b5:79:4e:b9:88:89:ea:f7:b1:14:b1: 26:57:76:c9:3e:03:28:26:1b:1d:cb:a2:68:e2:5e:09:27:d3: 80:c1:39:3e:80:72:97:e4:ea:81:32:a2:80:4a:bc:8f:c7:5f: 55:e1:4d:15:04:5f:aa:38:8e:cd:65:eb:88:76:92:ed:62:c6: d4:0d:f0:80:39:4a:b2:ef:aa:d1:a3:8a:44:73:12:5b:2c:e4: 61:6c:81:e6:8d:5f:c8:b6:a8:2a:c6:3a:57:82:24:de:bc:f6: c0:36:e5:24:03:7f:cf:73:3c:e4:5f:29:17:b1:e9:10:ff:94: 73:7c:ea:84:de:d4:ed:ff:51:04:43:f9:93:23:14:42:d1:45: d1:6b:6c:91:7e:fc:93:50:da:7a:00:d3:da:8d:f6:d9:cd:eb: 81:96:3b:b8:62:d1:d4:68:1d:f1:a9:23:71:d6:a5:63:d6:eb: f0:55:00:00:8a:10:1f:b0:7d:48:68:0a:c9:bf:01:6b:d9:70: 8b:fc:75:27 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBuowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx ODlBN0MyMTZERDAeFw0yNTEyMDcwMjA0NDJaFw0yNTEyMDkwMjA0NDJaMBgxFjAU BgNVBAMTDTY5MzRlMGJiLTE0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDvLA2QkF64416tUGtZoUp3v/poMMSBIGyCY1UoZRnNEZk45ON6CkxfHFsr tdi0EZh40gq/8gOUDtmHbbAOWkK3KhNdQ02pjy2Gc6nySLawqdzBcJ4gUpeuEGCD PL2oGcgSw3AxfvkQ81NAIqYPBmH+iAlyvEkpYJG6JsFp2isBGCtmUeFPYfBe4Nws H2YQE88viDViHvG0dsRW0lo8tVCt+6Cs1f/0UE6YKaoefqNkGIPZ3JyB31RZ8Ek9 jUSo2gZ+2WZNeTpCAv22YV7Bu4aRlI2MNkfG0zzE3TuY0hEnxL0ipguwAQQSX/lr oREb2qjPb6EJV7aVRo30WxeAB4gLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULyhi xdSsun/TuDSKsWbodrBp1PgwHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb9LY9DcvmUO2HfkuLpLYEb6Qih0Y1 zl5U35yUCQTXswLfgX2xSO3XhAwK5WBmXIn4pugMiL5lVlX0imBZtXlOuYiJ6vex FLEmV3bJPgMoJhsdy6Jo4l4JJ9OAwTk+gHKX5OqBMqKASryPx19V4U0VBF+qOI7N ZeuIdpLtYsbUDfCAOUqy76rRo4pEcxJbLORhbIHmjV/ItqgqxjpXgiTevPbANuUk A3/PczzkXykXsekQ/5RzfOqE3tTt/1EEQ/mTIxRC0UXRa2yRfvyTUNp6ANPajfbZ zeuBlju4YtHUaB3xqSNx1qVj1uvwVQAAihAfsH1IaArJvwFr2XCL/HUn -----END CERTIFICATE-----Generated at Sun Dec 7 21:35:06 2025 by rpki-client