This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft File: gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft (raw, json) Hash identifier: MlXBwzLCeyQFQkebioU2TxHOCKiuYotJQzCjMeiMsXI= Subject key identifier: 9D:41:12:D1:7A:79:47:BF:12:CB:F7:E9:F4:B9:E3:83:C4:B0:12:CC Authority key identifier: 81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED Certificate issuer: /CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED Certificate serial: 0604 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft Manifest number: 0600 Signing time: Mon 08 Dec 2025 02:30:49 +0000 Manifest this update: Mon 08 Dec 2025 02:30:48 +0000 Manifest next update: Wed 10 Dec 2025 02:30:48 +0000 Files and hashes: 1: gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl (hash: /DtmDiaUY0HFh+EXu1NAcIIfxTJXubiGFnJZaIzQX4M=) 2: 34F917D2770411EDA96E30B4F1222468.roa (hash: NZij2AM4xI89XsMRYjuIH/jJ2N0YqmTdzA3GAsQAexw=) 3: A857E4B4770511ED921423B8F1222468.roa (hash: Bc7/VI9MM+4AbL2GJyWDhgCaOvjR0WYY04uCXHG4UF0=) 4: 4C4D3FC0770511EDBC4C07B7F1222468.roa (hash: xDn8Uz1B72aTUeAcFZ9D3J/QnhWoidTK2vjKvVgIRa8=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3652E81AF, serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED Validity Not Before: Dec 8 02:30:48 2025 GMT Not After : Dec 10 02:30:48 2025 GMT Subject: CN=69363859-b89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:d2:a6:ef:67:b2:57:89:3d:1c:17:3f:b5: 76:b1:c5:80:4a:96:31:a5:42:5f:d4:e7:fd:fd:84: 88:f1:69:71:62:05:27:dd:ad:ed:d7:06:a9:7b:9f: aa:c8:24:e2:50:86:dd:3b:ca:4c:4c:91:bb:32:5d: 04:f6:d5:11:05:cf:34:65:38:1f:9e:18:83:26:db: 49:73:d6:55:eb:1e:97:61:20:6d:24:4f:98:78:d5: 3a:73:4a:04:50:81:90:1d:7e:d8:84:f2:12:ef:c2: 69:17:e9:e3:6a:b4:fb:33:b4:fc:30:08:a7:e2:84: 2a:16:98:2a:8e:5e:39:5e:e6:53:8d:4a:8f:b4:60: c3:d2:53:91:8e:f1:b7:fb:13:84:f8:e3:68:98:4b: 79:39:dc:fc:6a:06:eb:1f:a7:e8:4a:9b:ad:10:aa: 00:0c:03:6c:c5:2c:60:10:d5:00:70:03:2e:6c:9c: 64:89:0a:6c:05:3e:82:ae:d8:ee:6d:5d:6e:a8:d8: 65:fb:a9:79:55:10:87:c2:08:d2:b4:21:f9:91:60: d1:f8:e4:89:18:77:33:36:b2:d9:9f:fe:b8:87:6f: 46:22:52:d4:26:6e:7a:7d:c7:c6:cc:f4:18:78:1c: cb:86:c4:58:20:7b:4d:76:c7:14:2e:14:2e:34:57: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:41:12:D1:7A:79:47:BF:12:CB:F7:E9:F4:B9:E3:83:C4:B0:12:CC X509v3 Authority Key Identifier: keyid:81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f2:8d:3e:3a:fd:31:b5:d9:63:93:e0:73:08:1f:89:0d:1b: 46:c1:eb:85:89:41:d0:b1:6c:fc:3f:02:24:bb:e0:55:22:53: 67:4f:b3:6f:87:76:41:4e:a3:2d:df:90:31:1b:7d:69:a6:6d: 0d:8b:14:5a:fd:73:0a:38:9b:b4:d6:2e:71:15:0a:10:27:67: 4c:ab:75:81:6b:f8:37:96:6a:94:a4:d8:ac:0c:ab:9a:40:0d: 1d:08:2d:a8:59:d8:27:50:00:c5:7e:2a:07:67:9f:9f:ad:21: cf:c4:c8:fc:d3:19:80:ef:33:c7:95:bd:19:45:e7:46:71:15: d2:0b:15:e5:02:95:1f:b4:3b:86:cb:83:49:85:e2:0f:51:6b: 26:08:c6:c8:d4:ae:30:1e:3b:58:39:3c:75:83:0f:75:20:4f: c5:63:ca:17:92:df:87:2d:2b:87:19:9c:fd:3f:b6:08:81:4e: 13:2f:47:cf:c7:d9:eb:6d:cb:00:d5:50:11:60:a5:63:14:45: 98:cc:10:4e:ca:15:c4:d6:89:51:94:f6:f9:50:c2:52:df:07: 5e:30:09:60:74:92:11:26:6c:46:8c:a9:46:d1:e6:e6:5a:33: d4:f8:07:9e:94:48:58:e1:b8:5d:cf:ac:da:9d:20:97:a3:fc: f2:08:9b:a1 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTJFODFBRjExMC8GA1UEBRMoODEzMTY0RTUzNURGNUIxQjQzRjhGQTZFMjI1REQw RkE5OENGNkZFRDAeFw0yNTEyMDgwMjMwNDhaFw0yNTEyMTAwMjMwNDhaMBgxFjAU BgNVBAMTDTY5MzYzODU5LWI4OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC8d9Km72eyV4k9HBc/tXaxxYBKljGlQl/U5/39hIjxaXFiBSfdre3XBql7 n6rIJOJQht07ykxMkbsyXQT21REFzzRlOB+eGIMm20lz1lXrHpdhIG0kT5h41Tpz SgRQgZAdftiE8hLvwmkX6eNqtPsztPwwCKfihCoWmCqOXjle5lONSo+0YMPSU5GO 8bf7E4T442iYS3k53PxqBusfp+hKm60QqgAMA2zFLGAQ1QBwAy5snGSJCmwFPoKu 2O5tXW6o2GX7qXlVEIfCCNK0IfmRYNH45IkYdzM2stmf/riHb0YiUtQmbnp9x8bM 9Bh4HMuGxFgge012xxQuFC40V4QrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnUES 0Xp5R78Sy/fp9Lnjg8SwEswwHwYDVR0jBBgwFoAUgTFk5TXfWxtD+PpuIl3Q+pjP b+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjUyRTgxLzJEQTI0NEEwNDE2NzExRUM4NzBBMzA3Q0Q4QTAxNENFL2dURms1 VFhmV3h0RC1QcHVJbDNRLXBqUGItMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2dURms1VFhmV3h0RC1QcHVJbDNRLXBqUGItMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTJFODEvMkRBMjQ0QTA0MTY3MTFFQzg3MEEzMDdDRDhB MDE0Q0UvZ1RGazVUWGZXeHRELVBwdUlsM1EtcGpQYi0wLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO8o0+Ov0xtdljk+BzCB+JDRtGweuF iUHQsWz8PwIku+BVIlNnT7Nvh3ZBTqMt35AxG31ppm0NixRa/XMKOJu01i5xFQoQ J2dMq3WBa/g3lmqUpNisDKuaQA0dCC2oWdgnUADFfioHZ5+frSHPxMj80xmA7zPH lb0ZRedGcRXSCxXlApUftDuGy4NJheIPUWsmCMbI1K4wHjtYOTx1gw91IE/FY8oX kt+HLSuHGZz9P7YIgU4TL0fPx9nrbcsA1VARYKVjFEWYzBBOyhXE1olRlPb5UMJS 3wdeMAlgdJIRJmxGjKlG0ebmWjPU+AeelEhY4bhdz6zanSCXo/zyCJuh -----END CERTIFICATE-----Generated at Mon Dec 8 17:09:04 2025 by rpki-client