This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json) Hash identifier: Skc2ObG5Z4RpA8vLbo7iANS7+4WZYwfUqVQtd7LqRMc= Subject key identifier: EF:8D:4C:F0:44:76:5F:3A:05:42:E4:AE:CD:B3:D1:34:59:C3:C3:99 Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Certificate serial: 0259 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft Manifest number: 024D Signing time: Mon 08 Dec 2025 04:14:41 +0000 Manifest this update: Mon 08 Dec 2025 04:14:40 +0000 Manifest next update: Wed 10 Dec 2025 04:14:40 +0000 Files and hashes: 1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: rgIPhG1UpBjVJeF3+Lf0C8NU6yPAVbfPu48GPmjYs8M=) 2: 53E9AF201C4A11EF92B1620D7DDC24C2.roa (hash: KdhlIJ+hQm0D2JssqauHu+bI+aH2TH0/RDTYBo7Rfl4=) 3: 6BD3D72C1C4B11EFA0DF5FE57CDC24C2.roa (hash: kVAT6LvKNfd1TJNrUHJDtuhrBoJ6grfJU6Qzk3woG9A=) 4: 3C9F14321C4911EFAAC969317DDC24C2.roa (hash: /gSe9pWPhZ5Kr8gRd+6yNTm4qcpvwit2QsIwfbhWGVc=) 5: EBFBD6E61C4811EF8DA9FC307DDC24C2.roa (hash: Uo9oJGDvBKqk9WcNSro/GD2IK8co4yKnO+0R+FSe34k=) 6: 08C544981C4811EFBA18A22B7DDC24C2.roa (hash: tqhwIQRYgFOkg1i0m9P867NgozM8wyM/qc2l8ldhExg=) 7: 312C885E1C4A11EF9DE586157DDC24C2.roa (hash: GjHEWzUkDA6tsW5/6kpvZ3CU5zKEBXoesmUsNT+Jflo=) 8: 7E241A021C4811EF8F9DAE2C7DDC24C2.roa (hash: hxre5xYuTBxkwQmVRlBLeiMXMr0AnCvaVpMmejl5uhQ=) 9: FE708AD21C4911EF81BE34EA7CDC24C2.roa (hash: ZiopXrdqLTsU+61ziIshjn2/qWu+FsJbH9OdegqZ2vo=) 10: BF6D84E41C4811EF92649B307DDC24C2.roa (hash: Jbh8WY5UNAzz+osRgcagPYaVf8dyK5RVLpOyRMHMYas=) 11: 8604AD081C4911EF8DFB87357DDC24C2.roa (hash: MNoPychVF0mh+syf/DFmicmi7Wi0XntNJ0aJdW/gDe4=) 12: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Validity Not Before: Dec 8 04:14:40 2025 GMT Not After : Dec 10 04:14:40 2025 GMT Subject: CN=693650b1-d9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:ee:42:b4:a3:a1:41:93:23:24:54:09:a1: ed:a2:3f:fa:14:9c:b1:1f:88:a1:48:8d:58:da:1e: e7:e5:70:34:17:b4:a8:35:c1:de:a2:b5:0a:5b:42: 92:0f:2b:73:9c:3e:bf:4d:70:06:a0:12:56:47:da: 10:cf:5f:bd:0a:61:7f:d6:4b:c0:c3:eb:58:ba:ec: 51:c2:10:a9:cd:39:f9:6c:16:2e:73:49:c6:2a:3e: af:a6:e0:2e:9c:ab:73:b2:be:88:d1:4a:4c:25:e9: aa:02:ca:c2:b0:2a:5f:35:a7:f0:b4:ab:6e:4b:f0: a1:ce:6b:08:67:e3:1d:c3:1a:9f:30:87:9f:41:e4: 49:0d:67:bf:c2:8c:4b:3d:e0:bd:8f:30:c1:cc:09: 8c:28:10:14:87:70:d7:04:a4:0b:09:08:56:d1:8a: 12:03:81:5f:b3:27:b7:77:6e:e6:26:8e:73:c5:fd: ff:d2:8a:d3:70:c3:7b:f5:6d:1c:09:bf:aa:52:9d: c1:3f:7b:19:35:83:5c:86:d1:72:2b:fa:c2:4d:b2: 63:b9:21:94:2d:f2:16:78:a6:a4:64:71:3f:7e:3a: 3f:5c:47:bd:7f:ec:11:83:b1:97:a8:0a:a2:3e:b2: 53:c2:8e:37:ab:ff:22:f0:e6:67:5c:15:73:bb:2e: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:4C:F0:44:76:5F:3A:05:42:E4:AE:CD:B3:D1:34:59:C3:C3:99 X509v3 Authority Key Identifier: keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f4:06:f4:12:7a:37:85:c0:ee:d4:b5:6f:27:58:28:93:15: e4:b6:4d:d1:d2:ac:8e:9f:5f:2f:20:58:7c:2f:31:b9:86:28: 48:98:bf:52:01:af:fb:e5:2c:4c:05:b0:4b:09:15:85:99:55: 20:9e:82:9f:a0:0d:e2:f6:da:69:c3:eb:de:c9:92:d5:94:6a: 85:82:2b:a0:7c:17:e4:7a:b7:5d:44:78:e1:fb:83:13:94:ff: 0e:15:ee:63:50:9f:31:c8:f0:c4:df:ad:b9:c4:18:ef:4c:9c: fc:ed:76:65:fe:2c:70:c7:d3:b5:28:80:29:56:68:47:d5:71: e5:83:3b:e2:aa:b8:78:7f:64:b1:3b:b0:33:6b:a7:83:6b:73: cf:be:6d:2a:c6:1a:d8:5e:07:c5:93:54:a7:32:1a:cd:bb:62: e0:72:17:1c:a6:88:28:56:2b:c9:4a:5f:28:8f:ec:99:3e:30: 58:8a:0c:cd:db:f7:4e:ce:7a:7a:54:f1:9d:1e:87:4d:61:2c: 72:f3:e0:e2:ba:41:6e:66:95:c6:88:af:63:01:dd:f8:05:02: b8:5e:60:f2:96:17:8f:03:90:4d:0c:dd:7c:13:29:35:cf:18: a5:e6:c1:2b:e1:9b:9c:e9:94:cd:0f:20:64:5b:4a:c5:e4:40: 1c:99:9a:d0 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzJCRjJBRjExMC8GA1UEBRMoRkI4NUUwOEU1REJCMDVDOTVCN0JEMERBN0U1RkU2 RkNFMzk4MjZGRjAeFw0yNTEyMDgwNDE0NDBaFw0yNTEyMTAwNDE0NDBaMBgxFjAU BgNVBAMTDTY5MzY1MGIxLWQ5YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDNre5CtKOhQZMjJFQJoe2iP/oUnLEfiKFIjVjaHuflcDQXtKg1wd6itQpb QpIPK3OcPr9NcAagElZH2hDPX70KYX/WS8DD61i67FHCEKnNOflsFi5zScYqPq+m 4C6cq3OyvojRSkwl6aoCysKwKl81p/C0q25L8KHOawhn4x3DGp8wh59B5EkNZ7/C jEs94L2PMMHMCYwoEBSHcNcEpAsJCFbRihIDgV+zJ7d3buYmjnPF/f/SitNww3v1 bRwJv6pSncE/exk1g1yG0XIr+sJNsmO5IZQt8hZ4pqRkcT9+Oj9cR71/7BGDsZeo CqI+slPCjjer/yLw5mdcFXO7LmE5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU741M 8ER2XzoFQuSuzbPRNFnDw5kwHwYDVR0jBBgwFoAU+4Xgjl27Bclbe9Dafl/m/OOY Jv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkMyQkYyL0RBQkFCODdFMTlFQzExRUZCQ0JGNUUyQzAxNzAwMUIxLy00WGdq bDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLy00WGdqbDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QzJCRjIvREFCQUI4N0UxOUVDMTFFRkJDQkY1RTJDMDE3 MDAxQjEvLTRYZ2psMjdCY2xiZTlEYWZsX21fT09ZSnY4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS9Ab0Eno3hcDu1LVvJ1gokxXktk3R 0qyOn18vIFh8LzG5hihImL9SAa/75SxMBbBLCRWFmVUgnoKfoA3i9tppw+veyZLV lGqFgiugfBfkerddRHjh+4MTlP8OFe5jUJ8xyPDE3625xBjvTJz87XZl/ixwx9O1 KIApVmhH1XHlgzviqrh4f2SxO7Aza6eDa3PPvm0qxhrYXgfFk1SnMhrNu2Lgchcc pogoVivJSl8oj+yZPjBYigzN2/dOznp6VPGdHodNYSxy8+DiukFuZpXGiK9jAd34 BQK4XmDylhePA5BNDN18Eyk1zxil5sEr4Zuc6ZTNDyBkW0rF5EAcmZrQ -----END CERTIFICATE-----Generated at Mon Dec 8 17:20:07 2025 by rpki-client