This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft File: DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json) Hash identifier: +WKzuPdXTBvKE1t8Ioj+ckVUBfoYcgZzPh31ki3U9i8= Subject key identifier: 6E:01:E3:09:42:45:96:18:01:82:5D:62:9A:6F:71:76:CE:77:C1:65 Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Certificate serial: 04F3 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft Manifest number: 04F0 Signing time: Mon 08 Dec 2025 02:54:12 +0000 Manifest this update: Mon 08 Dec 2025 02:54:12 +0000 Manifest next update: Wed 10 Dec 2025 02:54:12 +0000 Files and hashes: 1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: qtzsQL0KErcf8dAEmj0C/PxcvECOVnI1FL9AhoHDeZI=) 2: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (hash: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=) 3: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=) 4: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Validity Not Before: Dec 8 02:54:12 2025 GMT Not After : Dec 10 02:54:12 2025 GMT Subject: CN=69363dd4-9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:1b:03:fa:d1:2e:bd:9e:97:3d:2e:7a:b9: 46:e6:17:92:66:4f:c9:91:f1:9e:9c:d7:4f:37:2f: 57:4a:ba:46:f8:b8:7d:0f:d7:7a:08:a6:97:97:e8: 78:41:92:5d:a4:11:25:81:02:a4:49:63:b9:2f:9d: 29:a7:2b:c3:dd:16:7d:ca:51:44:90:3b:16:08:b4: 15:72:3f:23:5c:1e:57:13:96:1e:70:eb:f7:cf:0d: 32:20:6e:22:c5:96:e9:18:e9:2b:46:7b:f6:b7:7f: ea:22:1d:d4:d8:cf:5c:a7:a6:4b:42:18:13:ec:63: 02:47:6a:5e:84:b0:e1:83:73:72:6c:d0:fc:4a:47: 2a:e9:31:96:4a:a1:91:5b:fa:63:6a:82:0d:dc:b0: f0:b6:58:ad:fd:69:d4:99:ad:9e:65:39:91:f2:19: 47:0a:48:3a:53:f5:5c:f6:cf:22:43:b7:62:3e:b7: f1:5f:79:d2:3a:79:08:0d:0c:82:a9:7e:2f:5a:9e: 2c:01:39:46:9f:39:e1:bd:79:52:c7:54:7e:86:a1: d7:c9:61:e3:61:86:d9:a4:37:ba:43:02:84:65:84: 11:68:28:13:20:d9:0b:15:ee:a4:b3:1c:f3:76:35: d5:2d:65:a4:43:fd:6b:e0:b1:8a:2b:c6:91:e2:22: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:01:E3:09:42:45:96:18:01:82:5D:62:9A:6F:71:76:CE:77:C1:65 X509v3 Authority Key Identifier: keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bf:8f:95:e3:84:ce:a7:71:cc:ee:8b:83:30:9f:d9:39:8f: 01:d8:ac:9c:5d:75:4a:ab:0b:cf:98:02:1d:9d:d1:e8:31:16: 9b:f0:1d:6c:4e:93:21:78:d1:bb:33:d8:7f:ce:30:0b:83:5a: 80:d7:7a:92:d1:7c:01:f7:fd:d2:e3:a6:0b:68:66:6e:14:ef: aa:2f:7e:83:09:1e:38:a7:23:72:f2:62:16:4c:69:f5:4b:8e: 66:6d:a6:41:87:88:55:1b:43:7c:97:50:81:34:38:b0:5a:01: fc:98:56:22:b1:6c:5d:71:ab:87:e6:83:d2:6f:3f:3b:73:b1: 25:05:03:e9:26:16:16:2e:4d:7d:6a:9e:29:bb:ab:d1:08:80: e1:06:e7:1f:61:48:87:7b:0c:1f:ae:38:6c:a9:43:6b:c8:e2: e9:11:79:9b:2a:dc:13:d3:12:a0:58:7c:45:b4:0e:ce:23:83: 5d:b5:1f:d7:93:25:b4:33:ae:73:b4:1e:6f:60:ed:fd:e6:1c: a4:b4:ff:86:f0:77:9d:ab:ad:bd:34:ca:75:f9:0e:b6:48:a4: 91:16:55:68:aa:4b:c6:51:84:2d:e8:d6:87:a0:4e:c3:be:90: 76:23:da:65:bd:56:a7:27:2f:06:34:f6:eb:77:9d:15:c2:1b: cf:88:af:55 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NzREQTdBRjExMC8GA1UEBRMoMEMzREE1MDUyQTFDNEZCNjhGQzYzMTI2NTA2MDYz QjAyQTA0MjE2NjAeFw0yNTEyMDgwMjU0MTJaFw0yNTEyMTAwMjU0MTJaMBgxFjAU BgNVBAMTDTY5MzYzZGQ0LTlhZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDWNhsD+tEuvZ6XPS56uUbmF5JmT8mR8Z6c1083L1dKukb4uH0P13oIppeX 6HhBkl2kESWBAqRJY7kvnSmnK8PdFn3KUUSQOxYItBVyPyNcHlcTlh5w6/fPDTIg biLFlukY6StGe/a3f+oiHdTYz1ynpktCGBPsYwJHal6EsOGDc3Js0PxKRyrpMZZK oZFb+mNqgg3csPC2WK39adSZrZ5lOZHyGUcKSDpT9Vz2zyJDt2I+t/FfedI6eQgN DIKpfi9aniwBOUafOeG9eVLHVH6GodfJYeNhhtmkN7pDAoRlhBFoKBMg2QsV7qSz HPN2NdUtZaRD/WvgsYorxpHiIn4tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbgHj CUJFlhgBgl1imm9xds53wWUwHwYDVR0jBBgwFoAUDD2lBSocT7aPxjEmUGBjsCoE IWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjc0REE3L0M2NjFFRTZFMTRCMzExRURBMTIzNjhGMkYxMjIyNDY4L0REMmxC U29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0REMmxCU29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NzREQTcvQzY2MUVFNkUxNEIzMTFFREExMjM2OEYyRjEy MjI0NjgvREQybEJTb2NUN2FQeGpFbVVHQmpzQ29FSVdZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVv4+V44TOp3HM7ouDMJ/ZOY8B2Kyc XXVKqwvPmAIdndHoMRab8B1sTpMheNG7M9h/zjALg1qA13qS0XwB9/3S46YLaGZu FO+qL36DCR44pyNy8mIWTGn1S45mbaZBh4hVG0N8l1CBNDiwWgH8mFYisWxdcauH 5oPSbz87c7ElBQPpJhYWLk19ap4pu6vRCIDhBucfYUiHewwfrjhsqUNryOLpEXmb KtwT0xKgWHxFtA7OI4NdtR/XkyW0M65ztB5vYO395hyktP+G8Hedq629NMp1+Q62 SKSRFlVoqkvGUYQt6NaHoE7DvpB2I9plvVanJy8GNPbrd50VwhvPiK9V -----END CERTIFICATE-----Generated at Mon Dec 8 17:13:20 2025 by rpki-client