This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft File: LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json) Hash identifier: aQ4wmp6cOOedvSKr9RB7p6lzMWWJb1hiERF9jJHeitY= Subject key identifier: 4E:37:9C:28:97:08:44:49:AC:81:44:AD:CA:60:C8:00:F6:75:87:6A Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA Certificate issuer: /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA Certificate serial: 0429 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft Manifest number: 0426 Signing time: Sat 20 Dec 2025 03:18:40 +0000 Manifest this update: Sat 20 Dec 2025 03:18:39 +0000 Manifest next update: Mon 22 Dec 2025 03:18:39 +0000 Files and hashes: 1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: Mm5Q72EFy9h/X110b66rvqpFh7iH+04b3xiT8emyMg8=) 2: 31E6ED6E5E4A11F0B9EEF8F1DAE4EC9C.roa (hash: wY2O3owjl7AYpJtBNGgcE5jUl65qutwOOti84IXPCgg=) 3: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (hash: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=) 4: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA Validity Not Before: Dec 20 03:18:39 2025 GMT Not After : Dec 22 03:18:39 2025 GMT Subject: CN=69461590-9cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:35:97:fa:58:bc:3f:01:3c:2d:6a:66:07: 85:48:f3:2a:cd:4f:0a:ee:4b:b9:61:6d:a3:eb:e5: a0:86:48:51:bb:80:66:35:86:b8:4d:64:e1:9c:98: 7a:bc:52:55:ab:9b:ab:23:b5:b4:7a:19:c2:65:f7: 49:74:da:82:e4:d9:c9:61:1c:05:39:fc:0a:66:d5: f9:6b:be:96:cb:c3:c0:de:e9:87:f5:88:d7:02:b9: e8:c0:f1:3b:ba:2d:df:ab:b3:61:b0:5d:8a:dd:c1: 54:37:de:c0:2b:ed:2b:8d:80:13:5e:aa:b1:9e:fe: 70:fb:00:8a:a9:e0:0b:a2:04:16:10:3b:be:59:bc: f5:63:b1:87:63:d5:08:9c:7a:be:90:f1:da:89:6d: a0:9d:26:c1:26:72:f0:ec:78:0a:59:af:91:2d:59: 70:e7:7a:a7:3a:0c:3a:b5:c1:8b:ba:fb:1f:89:f4: ee:49:59:83:d3:7c:74:f3:16:83:47:40:72:34:71: fc:cc:c4:f1:dc:61:57:5e:2f:41:cb:41:37:28:30: 27:ec:34:08:4d:ee:04:c0:2a:9d:42:f8:35:15:43: 11:7f:e2:00:c1:ad:f3:bb:46:8d:4c:23:6d:ed:c6: 1f:9c:51:27:ca:01:24:e7:79:50:28:2e:5a:66:db: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:37:9C:28:97:08:44:49:AC:81:44:AD:CA:60:C8:00:F6:75:87:6A X509v3 Authority Key Identifier: keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3e:6c:7c:02:21:a9:af:0f:31:25:a2:58:f8:05:25:9d:bd: b7:60:62:6a:6a:f4:22:9c:3a:08:db:6b:84:42:d5:a5:83:0f: 63:b1:5e:51:e3:e0:77:de:03:dd:3f:71:34:e0:c7:be:95:2c: d6:a5:67:b7:52:78:56:27:61:09:d4:1b:f3:71:c8:ed:76:ea: 02:73:2b:7e:00:20:af:69:78:42:4d:c8:7c:a1:d3:6e:60:47: 77:e5:9c:1b:55:38:5b:7e:09:d6:6f:d9:6e:4f:e4:7a:ca:42: 5f:16:7d:6e:e9:90:47:e5:88:e5:e3:ea:26:b4:12:37:56:90: 82:3a:38:12:2d:98:ad:34:d7:59:6f:37:72:c7:a6:94:02:6a: f3:6f:78:57:9c:d8:8d:59:d9:25:e2:6b:27:3d:34:4e:fd:77: d8:62:ba:2f:2c:d6:04:7c:95:72:29:36:98:4b:6d:40:83:6a: 03:06:7f:43:11:5e:ea:66:1a:d2:54:d3:af:e6:a9:e9:9c:e5: be:b4:75:95:a2:a5:01:e8:b3:59:a8:bb:21:e2:14:1b:7b:2c: 61:2b:be:6b:52:a8:4c:3a:7d:3c:f7:42:e7:be:c7:ba:67:da: 9b:f1:f9:40:4b:c8:fc:10:9f:e5:dc:75:25:c3:70:97:20:7f: 02:cd:8b:a9 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NzVDMkJBRjExMC8GA1UEBRMoMkQ5MUM5RjI1NUMwOTgzNDc0QTRENEM2MEU4RkUw RUMzMUVFQjdFQTAeFw0yNTEyMjAwMzE4MzlaFw0yNTEyMjIwMzE4MzlaMBgxFjAU BgNVBAMTDTY5NDYxNTkwLTljYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+XDWX+li8PwE8LWpmB4VI8yrNTwruS7lhbaPr5aCGSFG7gGY1hrhNZOGc mHq8UlWrm6sjtbR6GcJl90l02oLk2clhHAU5/Apm1flrvpbLw8De6Yf1iNcCuejA 8Tu6Ld+rs2GwXYrdwVQ33sAr7SuNgBNeqrGe/nD7AIqp4AuiBBYQO75ZvPVjsYdj 1Qicer6Q8dqJbaCdJsEmcvDseApZr5EtWXDneqc6DDq1wYu6+x+J9O5JWYPTfHTz FoNHQHI0cfzMxPHcYVdeL0HLQTcoMCfsNAhN7gTAKp1C+DUVQxF/4gDBrfO7Ro1M I23txh+cUSfKASTneVAoLlpm20QrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTjec KJcIREmsgUStymDIAPZ1h2owHwYDVR0jBBgwFoAULZHJ8lXAmDR0pNTGDo/g7DHu t+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjc1QzJCL0M2MTk1NEFBQjgzODExRURCMTcxN0JCMUYxMjIyNDY4L0xaSEo4 bFhBbURSMHBOVEdEb19nN0RIdXQtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0xaSEo4bFhBbURSMHBOVEdEb19nN0RIdXQtby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NzVDMkIvQzYxOTU0QUFCODM4MTFFREIxNzE3QkIxRjEy MjI0NjgvTFpISjhsWEFtRFIwcE5UR0RvX2c3REh1dC1vLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHPmx8AiGprw8xJaJY+AUlnb23YGJq avQinDoI22uEQtWlgw9jsV5R4+B33gPdP3E04Me+lSzWpWe3UnhWJ2EJ1Bvzccjt duoCcyt+ACCvaXhCTch8odNuYEd35ZwbVThbfgnWb9luT+R6ykJfFn1u6ZBH5Yjl 4+omtBI3VpCCOjgSLZitNNdZbzdyx6aUAmrzb3hXnNiNWdkl4msnPTRO/XfYYrov LNYEfJVyKTaYS21Ag2oDBn9DEV7qZhrSVNOv5qnpnOW+tHWVoqUB6LNZqLsh4hQb eyxhK75rUqhMOn0890Lnvse6Z9qb8flAS8j8EJ/l3HUlw3CXIH8CzYup -----END CERTIFICATE-----Generated at Sat Dec 20 20:27:47 2025 by rpki-client