This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft File: gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft (raw, json) Hash identifier: Pq5WMAyPB0MGSuSbNmlcRzMwv/tLq4SmQ49TD0gMbH8= Subject key identifier: E1:97:DF:DC:38:47:9A:E3:36:4A:34:79:C1:81:99:BE:54:24:A0:24 Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38 Certificate issuer: /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538 Certificate serial: 080A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft Manifest number: 0808 Signing time: Tue 09 Dec 2025 01:50:53 +0000 Manifest this update: Tue 09 Dec 2025 01:50:53 +0000 Manifest next update: Thu 11 Dec 2025 01:50:53 +0000 Files and hashes: 1: gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl (hash: QBwXSnaCHTpj0d2WJOj+Urw/6A8YtkTk3QW5W+Xa/Qg=) 2: CB8C83A0C88511ED940C44A3F1222468.roa (hash: FlRKAeloaznza0Vyrk2FzdR3/23YEw2VW6tyntdnTAo=) 3: 0331A55AC88711EDA1B9D1A6F1222468.roa (hash: Z5DAUvIjXoBx4GGCuvXKQGLH4Jh9pFC0RHSj+G6qEeM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 01:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538 Validity Not Before: Dec 9 01:50:53 2025 GMT Not After : Dec 11 01:50:53 2025 GMT Subject: CN=6937807d-bd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:49:07:70:cc:ce:67:80:05:bd:24:1d:75: a6:60:98:b3:25:ac:a2:cf:55:8b:0b:b1:27:96:0e: 12:6e:d0:c3:ad:87:16:9e:e6:48:0b:35:72:27:b4: 5c:ed:4e:3e:ce:e4:67:29:80:21:92:a0:ff:7d:81: 1d:41:5b:03:cc:e0:65:52:77:b8:d8:c7:4f:9b:0a: 27:fb:a4:af:5d:8b:70:0e:44:9d:14:8b:88:76:1b: c2:65:11:af:d7:c5:6e:9f:ed:b2:5a:ca:64:c7:4c: 94:22:f7:30:22:35:7a:90:5b:b0:d7:8f:c0:2d:40: 0c:8c:33:27:df:29:b9:b1:6e:db:b0:8b:e9:11:35: ad:fa:f0:10:c2:01:1c:47:66:b8:57:57:d0:18:8b: 6b:5d:53:de:c2:77:a3:88:5e:bf:e1:20:d9:45:89: 11:7f:64:ad:a4:38:0b:9c:76:ec:c1:8c:8d:ad:86: ce:d1:f0:70:65:5a:38:23:e5:3d:a7:83:bc:ee:47: 71:9f:e8:0e:f8:80:ba:15:70:1e:a7:05:85:52:d6: a7:21:43:63:7b:e5:fc:21:bb:8c:70:51:f0:75:6b: c7:53:06:63:ad:8e:4d:ce:0a:9d:83:93:47:bf:99: 13:76:e9:c3:1f:0f:0a:60:b4:4b:28:3d:0f:b7:01: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:97:DF:DC:38:47:9A:E3:36:4A:34:79:C1:81:99:BE:54:24:A0:24 X509v3 Authority Key Identifier: keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8f:dd:92:36:1f:eb:01:de:b5:2f:50:30:29:cd:50:80:ef: 1f:a1:51:49:4f:cc:49:3e:36:26:41:26:81:93:98:71:69:9d: b1:c1:f3:3d:13:29:d3:f0:41:6c:db:2e:3c:bb:1b:d1:15:62: 5f:af:88:7f:5b:55:14:1a:72:72:d7:78:6d:05:ab:df:bd:83: 0f:f7:c8:f6:80:fc:4b:bb:a1:1a:2c:f5:0a:38:43:30:b4:cb: 08:6c:aa:72:e1:84:a0:7a:d9:96:a3:bb:07:98:9e:38:5c:43: 7f:83:3b:9c:39:4d:ed:bb:e5:32:94:6c:3e:b0:8c:0f:15:a2: 1d:74:1f:e2:b2:90:72:c2:b7:ad:d3:5f:3b:9e:24:f4:f1:69: cd:c1:ae:ed:55:40:b2:b9:52:01:42:f1:ee:90:db:b7:5c:db: b4:8c:67:de:cf:1f:bb:61:4b:b5:ab:b2:a5:46:e4:1d:28:8b: c0:d2:9d:1a:66:d6:0c:dc:ff:b9:10:3a:ef:6f:8a:c4:d3:be: d2:82:11:af:68:71:9e:48:b0:0e:68:4b:71:c4:01:33:4f:0c: b0:f1:42:1e:37:96:66:48:8a:1d:1f:e1:b3:f3:0b:3f:51:91: aa:31:b9:87:f4:7b:96:87:5d:3e:cf:1d:81:0e:ec:05:a5:9d: 8a:be:37:2a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCAowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDc0NEZBRjExMC8GA1UEBRMoODBBRjA2MEU0NjQwQzMyNjUzRDBGMDBDMzAyNDUx NEE5RjE0OTUzODAeFw0yNTEyMDkwMTUwNTNaFw0yNTEyMTEwMTUwNTNaMBgxFjAU BgNVBAMTDTY5Mzc4MDdkLWJkNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDboEkHcMzOZ4AFvSQddaZgmLMlrKLPVYsLsSeWDhJu0MOthxae5kgLNXIn tFztTj7O5GcpgCGSoP99gR1BWwPM4GVSd7jYx0+bCif7pK9di3AORJ0Ui4h2G8Jl Ea/XxW6f7bJaymTHTJQi9zAiNXqQW7DXj8AtQAyMMyffKbmxbtuwi+kRNa368BDC ARxHZrhXV9AYi2tdU97Cd6OIXr/hINlFiRF/ZK2kOAucduzBjI2ths7R8HBlWjgj 5T2ng7zuR3Gf6A74gLoVcB6nBYVS1qchQ2N75fwhu4xwUfB1a8dTBmOtjk3OCp2D k0e/mRN26cMfDwpgtEsoPQ+3AQdtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4Zff 3DhHmuM2SjR5wYGZvlQkoCQwHwYDVR0jBBgwFoAUgK8GDkZAwyZT0PAMMCRRSp8U lTgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3NDRGLzNCMDJGOEIyQURDMzExRUE4RjQyRUY3N0Y4QUVBMjI4L2dLOEdE a1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2dLOEdEa1pBd3laVDBQQU1NQ1JSU3A4VWxUZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDc0NEYvM0IwMkY4QjJBREMzMTFFQThGNDJFRjc3RjhB RUEyMjgvZ0s4R0RrWkF3eVpUMFBBTU1DUlJTcDhVbFRnLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALj92SNh/rAd61L1AwKc1QgO8foVFJ T8xJPjYmQSaBk5hxaZ2xwfM9EynT8EFs2y48uxvRFWJfr4h/W1UUGnJy13htBavf vYMP98j2gPxLu6EaLPUKOEMwtMsIbKpy4YSgetmWo7sHmJ44XEN/gzucOU3tu+Uy lGw+sIwPFaIddB/ispBywret0187niT08WnNwa7tVUCyuVIBQvHukNu3XNu0jGfe zx+7YUu1q7KlRuQdKIvA0p0aZtYM3P+5EDrvb4rE077SghGvaHGeSLAOaEtxxAEz Twyw8UIeN5ZmSIodH+Gz8ws/UZGqMbmH9HuWh10+zx2BDuwFpZ2Kvjcq -----END CERTIFICATE-----Generated at Tue Dec 9 12:18:14 2025 by rpki-client