This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft File: QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json) Hash identifier: ZZ488j1wsgUluktvcsfaStZyODOflITZEcc3hL1Nkk0= Subject key identifier: 6B:5D:5F:26:26:6F:0C:27:0C:34:D3:46:B4:1F:3C:E6:86:77:76:69 Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9 Certificate issuer: /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9 Certificate serial: 09AB Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft Manifest number: 09A8 Signing time: Mon 08 Dec 2025 01:20:02 +0000 Manifest this update: Mon 08 Dec 2025 01:20:02 +0000 Manifest next update: Wed 10 Dec 2025 01:20:01 +0000 Files and hashes: 1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: ydJIKR+Yt66eox2DqhSWmFUeBceVbwExVS5ieWvfBqU=) 2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=) 3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DBAE4AF, serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9 Validity Not Before: Dec 8 01:20:02 2025 GMT Not After : Dec 10 01:20:01 2025 GMT Subject: CN=693627c2-4388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:8d:cb:d9:4c:5f:70:2d:9e:b0:fe:36:94: b0:b6:ec:66:d0:9f:4f:cf:76:1e:35:91:d5:b2:35: 69:9e:45:05:3b:f6:de:fe:7e:11:3a:79:64:79:53: aa:2d:8c:b4:d8:9b:83:15:69:d9:cb:f0:e3:d5:8a: 33:74:0f:63:63:07:16:84:23:07:c5:fb:fe:bb:8b: d4:92:48:75:0f:d9:ad:59:b0:2c:55:92:74:fa:67: c8:8a:6b:a2:1b:a4:5c:d3:e7:af:54:a3:39:84:ef: c2:c1:5b:de:c3:c3:5a:6d:43:a9:9c:31:d2:ad:4b: 40:e2:05:50:1d:36:43:64:22:2e:38:31:96:7c:bf: ae:72:fe:61:99:65:c6:cc:2e:9f:9f:90:a9:b6:ec: 6f:4f:91:f6:c4:ae:0b:4f:59:b4:b4:9d:a8:20:13: 8d:2f:f0:a5:86:1c:00:1d:04:ce:fb:fb:c1:37:b0: e5:b3:49:3d:c9:7f:b6:27:d9:53:81:d9:e6:ac:28: 53:59:32:4b:fa:c5:d0:10:98:0d:11:96:70:9b:e1: 89:23:d5:24:9d:6e:19:c6:46:26:9f:e4:42:1a:3e: 74:16:28:af:9e:e2:38:0c:b7:98:3f:ff:8a:29:78: 18:fe:24:54:78:30:1f:65:2f:ce:aa:44:13:95:e5: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:5F:26:26:6F:0C:27:0C:34:D3:46:B4:1F:3C:E6:86:77:76:69 X509v3 Authority Key Identifier: keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3e:22:57:d0:b9:d9:d5:8f:71:df:35:96:ed:08:3a:a0:64: db:f3:01:5f:5c:d8:40:76:23:d7:d2:72:d8:0e:70:10:18:25: 51:f1:08:d4:12:0f:d7:4e:16:75:a7:f0:d4:37:35:9f:9a:3d: 1a:c2:1c:e2:84:5f:c3:af:13:87:b3:0c:74:e3:ad:f9:3a:17: 71:08:87:ca:ec:7e:87:b1:d4:a8:a3:a2:54:4c:48:e4:91:05: 01:e7:c3:fa:66:3e:c3:49:3f:a1:17:e9:1d:34:6f:22:eb:98: 6c:78:08:b9:6a:6b:f4:9c:77:91:8f:f8:65:98:c9:79:97:6e: 30:99:d6:6b:6f:56:d8:93:e7:4f:24:12:ab:f9:19:1e:6e:a0: 00:a4:c5:6b:f8:4b:17:18:3b:ea:71:95:64:5a:d1:46:7f:99: 48:6f:7e:bc:d8:8f:30:2c:29:3b:70:8d:b4:7c:91:26:d0:87: b6:34:59:0d:19:a7:2c:aa:3c:bf:7a:0a:3e:31:4c:02:57:1b: 20:de:b9:16:fe:91:9a:0a:aa:11:9c:2f:97:e8:2b:69:e5:36: ce:96:d3:e2:1f:8a:ca:dd:15:63:be:72:af:92:ec:c7:b2:2b: 25:ca:3c:0b:ed:7a:99:55:4f:b1:9f:0e:d4:ee:3e:ac:01:0e: da:46:06:20 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCaswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REJBRTRBRjExMC8GA1UEBRMoNDBFRTA1RkQwRjMxQjVGQjBFQ0M1NjI1MjA4QUI1 MDg1OUY5RTlGOTAeFw0yNTEyMDgwMTIwMDJaFw0yNTEyMTAwMTIwMDFaMBgxFjAU BgNVBAMTDTY5MzYyN2MyLTQzODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0ko3L2UxfcC2esP42lLC27GbQn0/Pdh41kdWyNWmeRQU79t7+fhE6eWR5 U6otjLTYm4MVadnL8OPVijN0D2NjBxaEIwfF+/67i9SSSHUP2a1ZsCxVknT6Z8iK a6IbpFzT569UozmE78LBW97Dw1ptQ6mcMdKtS0DiBVAdNkNkIi44MZZ8v65y/mGZ ZcbMLp+fkKm27G9PkfbErgtPWbS0naggE40v8KWGHAAdBM77+8E3sOWzST3Jf7Yn 2VOB2easKFNZMkv6xdAQmA0RlnCb4Ykj1SSdbhnGRiaf5EIaPnQWKK+e4jgMt5g/ /4opeBj+JFR4MB9lL86qRBOV5YAXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUa11f JiZvDCcMNNNGtB885oZ3dmkwHwYDVR0jBBgwFoAUQO4F/Q8xtfsOzFYlIIq1CFn5 6fkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRCQUU0Lzg1OEYyOTgyNzMyMjExRTlBRUJDMzE4NEY4QUVBMjI4L1FPNEZf UTh4dGZzT3pGWWxJSXExQ0ZuNTZmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1FPNEZfUTh4dGZzT3pGWWxJSXExQ0ZuNTZmay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REJBRTQvODU4RjI5ODI3MzIyMTFFOUFFQkMzMTg0RjhB RUEyMjgvUU80Rl9ROHh0ZnNPekZZbElJcTFDRm41NmZrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoPiJX0LnZ1Y9x3zWW7Qg6oGTb8wFf XNhAdiPX0nLYDnAQGCVR8QjUEg/XThZ1p/DUNzWfmj0awhzihF/DrxOHswx04635 OhdxCIfK7H6HsdSoo6JUTEjkkQUB58P6Zj7DST+hF+kdNG8i65hseAi5amv0nHeR j/hlmMl5l24wmdZrb1bYk+dPJBKr+RkebqAApMVr+EsXGDvqcZVkWtFGf5lIb368 2I8wLCk7cI20fJEm0Ie2NFkNGacsqjy/ego+MUwCVxsg3rkW/pGaCqoRnC+X6Ctp 5TbOltPiH4rK3RVjvnKvkuzHsislyjwL7XqZVU+xnw7U7j6sAQ7aRgYg -----END CERTIFICATE-----Generated at Mon Dec 8 17:27:09 2025 by rpki-client