This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft File: LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json) Hash identifier: DlPagsqncDRuP//871L6dgeCGAO0QOaa8Lu4kFOE3K8= Subject key identifier: 7E:22:BD:D4:F0:EF:AC:C8:B8:90:E2:98:C9:39:82:31:A7:38:68:A4 Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA Certificate issuer: /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA Certificate serial: 041D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft Manifest number: 041A Signing time: Mon 08 Dec 2025 03:17:18 +0000 Manifest this update: Mon 08 Dec 2025 03:17:17 +0000 Manifest next update: Wed 10 Dec 2025 03:17:17 +0000 Files and hashes: 1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: 2ExGgTA2FNm18A2P3WHDfW6oiGxL07F1P7Sj0t+6Pco=) 2: 31E6ED6E5E4A11F0B9EEF8F1DAE4EC9C.roa (hash: wY2O3owjl7AYpJtBNGgcE5jUl65qutwOOti84IXPCgg=) 3: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (hash: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=) 4: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA Validity Not Before: Dec 8 03:17:17 2025 GMT Not After : Dec 10 03:17:17 2025 GMT Subject: CN=6936433e-368e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:ea:49:9c:c3:ba:f0:ce:10:1e:d8:e9:ce: 30:c1:31:aa:66:9c:8c:7b:a7:12:14:80:f1:33:c5: bc:63:2f:ac:d9:6b:34:ae:a0:43:f5:bb:17:5c:e8: d4:96:88:21:e4:b3:e3:ec:97:af:d5:c7:72:33:6b: f5:4d:9e:23:b3:33:64:a7:71:6e:10:c8:b9:d4:25: ab:aa:6a:b5:70:e9:ef:5a:25:ef:44:9f:76:b7:fa: c4:59:06:01:c9:08:4a:74:80:c8:dc:ef:07:a4:5e: 2e:cf:7a:f5:f2:fa:29:76:13:48:ff:53:78:4e:29: fe:0a:4f:7c:28:6f:f3:e5:6c:95:5c:32:be:c3:49: e7:59:e8:11:c6:9f:d1:d4:58:5b:7c:45:1a:37:aa: 46:93:d9:81:7c:03:a2:02:9c:68:c7:5d:f7:20:7a: bf:5f:c9:fb:53:c6:ec:27:b4:02:31:86:fc:f5:51: 74:10:eb:84:ab:a2:b4:e2:ea:20:f6:af:c0:9f:22: b3:ad:59:df:de:e0:62:0b:02:d5:23:6d:c7:85:26: d5:76:c3:25:f2:36:d8:d6:7e:53:0b:71:0b:0c:78: 28:b0:02:ff:53:9c:eb:d5:9a:aa:bd:ae:20:89:06: b5:74:0c:90:9c:70:fe:77:06:31:25:dd:45:bc:65: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:22:BD:D4:F0:EF:AC:C8:B8:90:E2:98:C9:39:82:31:A7:38:68:A4 X509v3 Authority Key Identifier: keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:3d:df:64:42:4b:73:fd:1c:cc:98:a5:d8:82:5a:4d:71:d6: 83:02:5b:2a:82:9f:72:c1:51:fe:59:d7:a8:5d:f3:d0:ab:33: d9:db:78:9a:90:0a:0f:7f:67:02:16:01:e4:28:c7:14:eb:e0: 2b:58:3f:3c:b9:41:03:91:6a:5e:eb:10:e6:32:10:cb:1e:26: a2:6b:d5:65:b3:da:ca:8b:50:71:8b:35:0a:bd:24:c0:4d:99: dc:c4:ca:b3:6d:4e:2b:35:be:28:26:85:8d:40:b2:80:c3:df: 05:5b:41:a2:f7:51:bd:ca:e3:97:24:12:de:ff:25:91:cd:7c: 1c:51:28:45:ee:e9:1d:b7:85:f4:a3:89:28:8a:20:50:8d:5a: 34:2c:d1:5d:e2:b5:56:fd:77:15:c0:9d:cd:fd:d2:27:48:d7: d3:10:a4:f8:42:73:9e:40:06:18:16:61:18:3a:c6:6f:02:ce: 84:cc:f2:cb:73:19:ad:3b:ab:f4:83:f2:dd:ab:fc:c4:a7:d9: f8:2c:34:da:21:c3:0d:c4:ad:1a:18:d8:56:42:69:aa:18:a5: 0f:6b:9c:2e:41:d8:84:74:6f:ce:06:f3:26:86:22:b3:63:4f: c9:8f:db:5c:f3:c0:51:44:35:c0:d2:4e:ca:26:f8:e5:a9:e3: 51:56:06:c6 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NzVDMkJBRjExMC8GA1UEBRMoMkQ5MUM5RjI1NUMwOTgzNDc0QTRENEM2MEU4RkUw RUMzMUVFQjdFQTAeFw0yNTEyMDgwMzE3MTdaFw0yNTEyMTAwMzE3MTdaMBgxFjAU BgNVBAMTDTY5MzY0MzNlLTM2OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCt3+pJnMO68M4QHtjpzjDBMapmnIx7pxIUgPEzxbxjL6zZazSuoEP1uxdc 6NSWiCHks+Psl6/Vx3Iza/VNniOzM2SncW4QyLnUJauqarVw6e9aJe9En3a3+sRZ BgHJCEp0gMjc7wekXi7PevXy+il2E0j/U3hOKf4KT3wob/PlbJVcMr7DSedZ6BHG n9HUWFt8RRo3qkaT2YF8A6ICnGjHXfcger9fyftTxuwntAIxhvz1UXQQ64SrorTi 6iD2r8CfIrOtWd/e4GILAtUjbceFJtV2wyXyNtjWflMLcQsMeCiwAv9TnOvVmqq9 riCJBrV0DJCccP53BjEl3UW8ZSibAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfiK9 1PDvrMi4kOKYyTmCMac4aKQwHwYDVR0jBBgwFoAULZHJ8lXAmDR0pNTGDo/g7DHu t+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjc1QzJCL0M2MTk1NEFBQjgzODExRURCMTcxN0JCMUYxMjIyNDY4L0xaSEo4 bFhBbURSMHBOVEdEb19nN0RIdXQtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0xaSEo4bFhBbURSMHBOVEdEb19nN0RIdXQtby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NzVDMkIvQzYxOTU0QUFCODM4MTFFREIxNzE3QkIxRjEy MjI0NjgvTFpISjhsWEFtRFIwcE5UR0RvX2c3REh1dC1vLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZPd9kQktz/RzMmKXYglpNcdaDAlsq gp9ywVH+WdeoXfPQqzPZ23iakAoPf2cCFgHkKMcU6+ArWD88uUEDkWpe6xDmMhDL Hiaia9Vls9rKi1BxizUKvSTATZncxMqzbU4rNb4oJoWNQLKAw98FW0Gi91G9yuOX JBLe/yWRzXwcUShF7ukdt4X0o4koiiBQjVo0LNFd4rVW/XcVwJ3N/dInSNfTEKT4 QnOeQAYYFmEYOsZvAs6EzPLLcxmtO6v0g/Ldq/zEp9n4LDTaIcMNxK0aGNhWQmmq GKUPa5wuQdiEdG/OBvMmhiKzY0/Jj9tc88BRRDXA0k7KJvjlqeNRVgbG -----END CERTIFICATE-----Generated at Mon Dec 8 20:54:06 2025 by rpki-client