This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft File: 0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json) Hash identifier: 90BmT3qj6spxUX87z2Hd03C3+VaGjrBvWSjG+7+QPCM= Subject key identifier: AA:55:9B:83:EE:AB:4C:BA:7E:7E:5F:FA:0E:68:20:69:8B:05:0B:48 Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D Certificate issuer: /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D Certificate serial: 0856 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft Manifest number: 0844 Signing time: Sat 06 Dec 2025 01:48:18 +0000 Manifest this update: Sat 06 Dec 2025 01:48:18 +0000 Manifest next update: Mon 08 Dec 2025 01:48:17 +0000 Files and hashes: 1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: xqbJvi2biHtOgnOo492ZEDlwfC45vlCU5XYECjfL/Ww=) 2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=) 3: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=) 4: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D Validity Not Before: Dec 6 01:48:18 2025 GMT Not After : Dec 8 01:48:17 2025 GMT Subject: CN=69338b62-8615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:b6:53:82:fd:47:8d:07:79:0c:0e:c3:3c: 97:65:d4:ef:6b:09:f9:37:c0:f1:45:f3:62:a4:20: 5b:d4:ff:44:f2:07:b8:72:a7:8f:d3:99:e8:a8:c2: e1:b8:55:c9:ce:3a:7e:94:01:3a:58:82:4d:77:c4: 8a:72:bd:62:97:b9:08:ea:3b:c2:00:3b:d4:2e:80: 64:7c:38:87:d1:49:f3:91:ab:8c:24:5c:46:f8:3c: 72:b1:b1:55:11:90:af:44:17:2e:7f:3f:03:4d:8c: b7:af:4a:f0:c1:74:96:4f:62:79:40:1d:b6:2b:f3: 9b:a4:d1:52:16:a0:da:43:5e:5d:dc:8b:1a:d8:fb: 11:c8:eb:f7:fe:b4:15:3d:3d:c7:54:2c:b5:5e:ce: ac:4e:de:3d:0e:aa:bc:e3:3e:91:82:9e:4a:a4:c1: fb:da:87:2d:c9:46:61:f0:b6:1b:cf:74:12:4c:f1: 04:fb:da:37:bf:aa:78:42:c5:a0:bc:ce:9a:45:ca: c7:39:a7:fe:6f:f4:3e:00:d7:c9:13:1d:c2:fa:85: 72:a5:07:d6:a6:0a:d9:ba:ab:84:32:3e:02:b7:89: d3:f9:d5:af:57:f7:2b:42:58:e5:6f:43:5b:cf:bd: 8a:f4:72:32:0d:1a:cb:40:e2:94:5e:2d:cc:17:59: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:55:9B:83:EE:AB:4C:BA:7E:7E:5F:FA:0E:68:20:69:8B:05:0B:48 X509v3 Authority Key Identifier: keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:65:7c:7b:15:20:4a:b2:71:54:0a:08:55:96:6c:31:44:b3: 20:e9:64:61:21:05:72:8e:b0:73:a2:fe:b5:ba:49:b7:ca:53: fb:53:75:ea:ec:f1:47:93:24:d0:f5:9c:46:56:15:9a:c1:c4: 5c:fb:15:9b:ef:cd:02:eb:40:2e:17:04:59:c4:51:9d:5b:b0: b8:f5:80:28:e3:b1:24:4c:a1:60:74:23:84:21:1d:cd:c2:9d: e1:66:fa:5a:8b:4e:48:7a:05:4f:6d:0b:de:36:20:7c:c0:35: 7e:88:26:fa:02:ba:c3:e1:30:34:14:c8:d9:68:09:4c:e5:74: ec:c3:c3:4e:39:a9:1d:ef:41:2a:87:c6:39:b3:a1:ee:3e:c3: 86:cd:d5:a5:9e:4e:ba:c9:70:49:64:b1:31:2e:f2:64:5f:4b: 53:24:74:16:f2:a5:b4:db:fc:69:2e:af:31:94:00:a7:90:f7: ae:f6:f9:67:6b:19:f9:de:24:08:7d:e6:2a:02:58:62:77:2d: 3d:25:91:fd:df:ea:0d:43:97:df:b7:2d:7b:42:24:3a:1a:50: 69:fc:e6:40:a9:7b:cd:de:45:14:b6:60:46:32:cc:8f:ce:a9: d6:88:0a:f4:dd:0a:21:ae:da:85:54:54:73:71:8d:e7:a0:bd: 97:6f:7e:f0 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDc4OUNBRjExMC8GA1UEBRMoRDFGN0MwMEVGM0VCMDZFODgxN0NGREMxREI5NjA2 MDQwN0U0OUMwRDAeFw0yNTEyMDYwMTQ4MThaFw0yNTEyMDgwMTQ4MTdaMBgxFjAU BgNVBAMTDTY5MzM4YjYyLTg2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCygbZTgv1HjQd5DA7DPJdl1O9rCfk3wPFF82KkIFvU/0TyB7hyp4/Tmeio wuG4VcnOOn6UATpYgk13xIpyvWKXuQjqO8IAO9QugGR8OIfRSfORq4wkXEb4PHKx sVURkK9EFy5/PwNNjLevSvDBdJZPYnlAHbYr85uk0VIWoNpDXl3cixrY+xHI6/f+ tBU9PcdULLVezqxO3j0OqrzjPpGCnkqkwfvahy3JRmHwthvPdBJM8QT72je/qnhC xaC8zppFysc5p/5v9D4A18kTHcL6hXKlB9amCtm6q4QyPgK3idP51a9X9ytCWOVv Q1vPvYr0cjINGstA4pReLcwXWbP1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqlWb g+6rTLp+fl/6DmggaYsFC0gwHwYDVR0jBBgwFoAU0ffADvPrBuiBfP3B25YGBAfk nA0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3ODlDLzcyRUZBRjRDOTEwMTExRUFCRDNGMjQ3M0Y4QUVBMjI4LzBmZkFE dlByQnVpQmZQM0IyNVlHQkFma25BMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzBmZkFEdlByQnVpQmZQM0IyNVlHQkFma25BMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDc4OUMvNzJFRkFGNEM5MTAxMTFFQUJEM0YyNDczRjhB RUEyMjgvMGZmQUR2UHJCdWlCZlAzQjI1WUdCQWZrbkEwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMZXx7FSBKsnFUCghVlmwxRLMg6WRh IQVyjrBzov61ukm3ylP7U3Xq7PFHkyTQ9ZxGVhWawcRc+xWb780C60AuFwRZxFGd W7C49YAo47EkTKFgdCOEIR3Nwp3hZvpai05IegVPbQveNiB8wDV+iCb6ArrD4TA0 FMjZaAlM5XTsw8NOOakd70Eqh8Y5s6HuPsOGzdWlnk66yXBJZLExLvJkX0tTJHQW 8qW02/xpLq8xlACnkPeu9vlnaxn53iQIfeYqAlhidy09JZH93+oNQ5ffty17QiQ6 GlBp/OZAqXvN3kUUtmBGMsyPzqnWiAr03QohrtqFVFRzcY3noL2Xb37w -----END CERTIFICATE-----Generated at Sat Dec 6 18:14:53 2025 by rpki-client