This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft File: JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json) Hash identifier: FJf9P4//zXrZEuU2YhIRRi8zP+mwSlGfP+r5D3Yqg14= Subject key identifier: EF:DC:45:D8:2B:3D:E8:3A:E8:B3:E2:5C:4F:90:03:CF:90:53:90:8C Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D Certificate issuer: /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D Certificate serial: 0353 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft Manifest number: 0351 Signing time: Sat 20 Dec 2025 03:46:11 +0000 Manifest this update: Sat 20 Dec 2025 03:46:10 +0000 Manifest next update: Mon 22 Dec 2025 03:46:10 +0000 Files and hashes: 1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: 9qqOMQyQVqux5UxJzCGi43PB7YlB9b/YRpo6mD0lT2Q=) 2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=) 3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D Validity Not Before: Dec 20 03:46:10 2025 GMT Not After : Dec 22 03:46:10 2025 GMT Subject: CN=69461c03-8a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:34:73:52:29:73:c9:99:6d:30:91:1b:f1: 9e:80:50:50:cb:87:b1:52:f2:a5:99:02:21:45:92: e1:fb:19:7f:39:88:18:a9:39:1d:da:4d:b6:41:f0: 21:a6:d0:a8:43:66:8b:5e:c7:16:90:1f:99:23:31: 8c:fd:69:27:94:23:1a:f1:bc:14:0d:31:02:c0:67: 7a:f9:5a:0f:d4:97:c2:5c:e9:6c:50:de:25:1c:ca: 83:8d:9c:51:d2:27:b6:ea:b8:a8:3e:b2:91:4c:0f: 6f:2a:7a:be:16:a4:39:cf:e5:4a:2f:76:51:73:8f: 00:36:e2:82:41:1e:cc:d7:47:b8:bc:7a:fc:6b:05: 44:39:c0:76:bb:30:a6:5d:e2:ed:63:fe:1a:2f:32: 20:c9:9a:4b:f6:e9:f0:2c:ca:94:9d:04:cd:8c:4e: 4a:2a:ab:8c:f5:01:d7:73:f6:5d:a6:26:13:2b:ff: 9c:29:cf:3d:39:a8:02:a5:10:2d:53:14:ff:ee:60: 77:8d:36:f3:83:c4:1b:aa:2e:ea:e5:a3:ec:76:78: 82:1d:3b:04:ff:a2:79:fd:a4:8e:19:4c:1e:cb:dc: f7:c6:48:3a:eb:ff:c3:54:46:37:d0:15:40:17:27: 30:ac:70:c2:a9:be:f6:45:de:f7:52:14:e3:d3:a5: 43:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DC:45:D8:2B:3D:E8:3A:E8:B3:E2:5C:4F:90:03:CF:90:53:90:8C X509v3 Authority Key Identifier: keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9e:f1:3e:1f:3c:c5:d5:45:b2:9d:0f:8b:84:dc:eb:92:f0: c3:25:5e:5f:5d:56:af:96:77:0a:dd:7f:a8:53:a6:dd:8b:cf: fc:c3:48:05:0e:91:97:e4:f0:f6:8f:4d:3a:2b:78:1a:f2:e2: 5b:de:e6:44:98:e6:1a:ea:11:0e:13:04:0b:06:16:fc:11:7d: 39:8d:85:24:00:52:82:da:90:a7:2d:14:05:d8:df:7c:26:82: ee:db:10:d9:8b:3a:dd:9a:c7:0d:e7:92:70:ab:98:7d:91:ec: 7f:e3:b3:e1:97:91:db:e3:0a:6d:3e:23:6e:41:b9:5a:cc:d2: 2e:d5:ab:0f:f2:36:6b:d8:39:a0:55:98:4e:b7:8a:37:11:48: d1:b0:df:78:dd:88:41:47:2e:e2:1c:65:e7:6f:f7:0c:f4:7f: 69:a4:5f:f1:5c:94:29:2e:1a:97:ca:62:bc:ea:6f:39:4a:f4: 24:fa:47:82:73:c3:f3:f5:f5:4b:f7:80:24:e7:ee:46:c6:79: bc:ed:a9:9f:21:7b:1c:3b:8f:e1:a2:7b:51:e8:be:85:c6:14: c0:43:47:09:19:53:bc:f2:b6:cc:06:5e:c8:01:8f:73:6a:54: c0:06:eb:9b:9c:62:1c:d0:e3:93:da:7b:1f:dc:33:9d:6b:4b: 0a:cc:8d:51 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjhDRjFBRjExMC8GA1UEBRMoMjQ5N0NCMDFDQkUxMUY3RTEyRTJBREQ4RDRGRjIz MjBCOTY5MDM2RDAeFw0yNTEyMjAwMzQ2MTBaFw0yNTEyMjIwMzQ2MTBaMBgxFjAU BgNVBAMTDTY5NDYxYzAzLThhMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC5EzRzUilzyZltMJEb8Z6AUFDLh7FS8qWZAiFFkuH7GX85iBipOR3aTbZB 8CGm0KhDZotexxaQH5kjMYz9aSeUIxrxvBQNMQLAZ3r5Wg/Ul8Jc6WxQ3iUcyoON nFHSJ7bquKg+spFMD28qer4WpDnP5UovdlFzjwA24oJBHszXR7i8evxrBUQ5wHa7 MKZd4u1j/hovMiDJmkv26fAsypSdBM2MTkoqq4z1Addz9l2mJhMr/5wpzz05qAKl EC1TFP/uYHeNNvODxBuqLurlo+x2eIIdOwT/onn9pI4ZTB7L3PfGSDrr/8NURjfQ FUAXJzCscMKpvvZF3vdSFOPTpUPDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU79xF 2Cs96Dros+JcT5ADz5BTkIwwHwYDVR0jBBgwFoAUJJfLAcvhH34S4q3Y1P8jILlp A20wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI4Q0YxLzlEMTlENTY2NTYwRDExRUVBRjNEQkMyMTRBRDlFNkZDL0pKZkxB Y3ZoSDM0UzRxM1kxUDhqSUxscEEyMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0pKZkxBY3ZoSDM0UzRxM1kxUDhqSUxscEEyMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjhDRjEvOUQxOUQ1NjY1NjBEMTFFRUFGM0RCQzIxNEFE OUU2RkMvSkpmTEFjdmhIMzRTNHEzWTFQOGpJTGxwQTIwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbnvE+HzzF1UWynQ+LhNzrkvDDJV5f XVavlncK3X+oU6bdi8/8w0gFDpGX5PD2j006K3ga8uJb3uZEmOYa6hEOEwQLBhb8 EX05jYUkAFKC2pCnLRQF2N98JoLu2xDZizrdmscN55Jwq5h9kex/47Phl5Hb4wpt PiNuQblazNIu1asP8jZr2DmgVZhOt4o3EUjRsN943YhBRy7iHGXnb/cM9H9ppF/x XJQpLhqXymK86m85SvQk+keCc8Pz9fVL94Ak5+5Gxnm87amfIXscO4/hontR6L6F xhTAQ0cJGVO88rbMBl7IAY9zalTABuubnGIc0OOT2nsf3DOda0sKzI1R -----END CERTIFICATE-----Generated at Sat Dec 20 18:12:03 2025 by rpki-client