This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json) Hash identifier: GtefrrneekE2cugCsQw4sgdqZDMCvvil5kSheA8Rd9k= Subject key identifier: F4:AB:41:D1:0C:A2:99:CD:BF:19:2C:6C:92:6E:C6:96:2E:8C:58:F9 Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E Certificate serial: 04CD Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft Manifest number: 04C9 Signing time: Fri 05 Dec 2025 03:02:21 +0000 Manifest this update: Fri 05 Dec 2025 03:02:20 +0000 Manifest next update: Sun 07 Dec 2025 03:02:20 +0000 Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: d0xYZTUTPOuPuoKelL82bu/F6fpfkMWu7S3n25Q5Sz0=) 2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=) 3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Dec 2025 03:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E Validity Not Before: Dec 5 03:02:20 2025 GMT Not After : Dec 7 03:02:20 2025 GMT Subject: CN=69324b3c-ad9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:93:5f:41:c2:c9:d3:79:5f:03:60:8c:21: 96:da:fa:54:34:ca:b6:55:41:1b:1a:b2:01:6e:ac: 65:68:7c:ff:8a:8b:6a:bb:cc:f2:a6:f2:ab:d5:db: 11:b4:a5:27:a9:22:4c:d2:be:ca:a0:06:1c:82:48: 41:34:da:60:ac:e1:a7:6b:29:27:c3:54:d3:62:13: 0a:86:0a:7b:e5:af:63:8e:09:38:23:18:78:c6:bb: cf:ad:e7:2e:79:d0:44:26:4d:8a:cc:aa:bf:21:d3: e5:43:0c:5a:10:3d:48:7d:4a:97:c2:e7:57:95:c0: 78:0b:ad:8e:5b:cf:3b:77:4d:4c:fc:70:36:9e:55: 26:a5:50:a7:6c:85:0f:ed:f9:8f:93:a6:9b:23:7a: 79:14:66:bc:23:02:16:d6:76:86:ee:1c:82:7e:3e: e0:d0:9e:19:7b:72:51:36:ae:d2:30:c1:fb:f4:81: 85:07:a2:16:95:14:83:92:3e:48:d6:64:7b:06:8f: 3c:56:e1:ba:24:ff:98:4f:b7:62:bf:10:1a:95:af: 9b:a8:5d:b5:79:df:e0:8f:eb:b5:e5:03:4f:41:3f: 20:77:66:bb:a6:91:6f:c5:f1:16:24:a5:dc:20:96: 49:55:ba:f8:70:ec:fa:a8:af:d6:b4:ef:6a:6d:7c: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AB:41:D1:0C:A2:99:CD:BF:19:2C:6C:92:6E:C6:96:2E:8C:58:F9 X509v3 Authority Key Identifier: keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:55:b7:53:0f:ad:25:65:45:43:9e:f2:9b:db:14:04:69:27: 60:fc:9a:a8:70:6c:45:2d:48:c4:48:9d:d7:29:6c:9c:2c:dc: 58:ff:fc:43:a5:89:11:6c:79:8a:eb:ed:89:e0:58:65:f5:88: e5:17:cd:84:0f:57:05:67:a9:e7:27:a1:44:00:7a:2b:40:9b: 82:af:4f:7a:27:35:19:b9:72:d6:3c:60:63:c8:56:01:5b:f4: 85:65:ee:ed:de:44:47:aa:ca:37:be:91:d9:24:f3:58:5f:e6: 78:f0:03:5d:4c:1b:08:dd:66:6c:c1:21:5e:35:b4:fc:3d:7c: 99:bb:66:00:55:9b:48:18:e7:d5:21:b2:f1:11:6b:b5:b9:8c: 21:d8:50:95:95:f3:5e:53:93:72:f0:a8:92:9e:38:90:33:8b: 5b:72:a6:b0:e0:19:42:b7:ad:24:e0:2e:e7:94:af:26:dc:1f: aa:ec:73:72:3b:b9:c0:70:90:dc:8b:f9:d9:bd:ce:b4:db:bc: 1b:58:06:36:a7:46:c1:b5:8b:d7:7f:8b:7f:da:3b:2d:45:cf: e7:23:7f:73:bc:6e:82:83:c9:fa:de:b0:59:06:95:16:7c:bd: 68:a9:72:54:61:f9:6b:f6:9c:89:8f:24:95:33:08:09:28:ed: 50:1e:73:b6 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDdGRjBBRjExMC8GA1UEBRMoOTIwNDQxMkExRjEyQkNENUQyQjNDRTM5OTFBQ0VG Njk3NkM4ODY1RTAeFw0yNTEyMDUwMzAyMjBaFw0yNTEyMDcwMzAyMjBaMBgxFjAU BgNVBAMTDTY5MzI0YjNjLWFkOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDO5NfQcLJ03lfA2CMIZba+lQ0yrZVQRsasgFurGVofP+Ki2q7zPKm8qvV 2xG0pSepIkzSvsqgBhyCSEE02mCs4adrKSfDVNNiEwqGCnvlr2OOCTgjGHjGu8+t 5y550EQmTYrMqr8h0+VDDFoQPUh9SpfC51eVwHgLrY5bzzt3TUz8cDaeVSalUKds hQ/t+Y+TppsjenkUZrwjAhbWdobuHIJ+PuDQnhl7clE2rtIwwfv0gYUHohaVFIOS PkjWZHsGjzxW4bok/5hPt2K/EBqVr5uoXbV53+CP67XlA09BPyB3ZrumkW/F8RYk pdwglklVuvhw7Pqor9a072ptfEg3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9KtB 0Qyimc2/GSxskm7Gli6MWPkwHwYDVR0jBBgwFoAUkgRBKh8SvNXSs845kazvaXbI hl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3RkYwL0EyOEFDMTBBMzJBOTExRURBNEU1QzlEQ0YxMjIyNDY4L2tnUkJL aDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2tnUkJLaDhTdk5YU3M4NDVrYXp2YVhiSWhsNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDdGRjAvQTI4QUMxMEEzMkE5MTFFREE0RTVDOURDRjEy MjI0Njgva2dSQktoOFN2TlhTczg0NWthenZhWGJJaGw0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWVbdTD60lZUVDnvKb2xQEaSdg/Jqo cGxFLUjESJ3XKWycLNxY//xDpYkRbHmK6+2J4Fhl9YjlF82ED1cFZ6nnJ6FEAHor QJuCr096JzUZuXLWPGBjyFYBW/SFZe7t3kRHqso3vpHZJPNYX+Z48ANdTBsI3WZs wSFeNbT8PXyZu2YAVZtIGOfVIbLxEWu1uYwh2FCVlfNeU5Ny8KiSnjiQM4tbcqaw 4BlCt60k4C7nlK8m3B+q7HNyO7nAcJDci/nZvc6027wbWAY2p0bBtYvXf4t/2jst Rc/nI39zvG6Cg8n63rBZBpUWfL1oqXJUYflr9pyJjySVMwgJKO1QHnO2 -----END CERTIFICATE-----Generated at Fri Dec 5 19:23:28 2025 by rpki-client