This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft File: XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json) Hash identifier: injpVHWIysMsS6E11T6/+SildMvw6+9zP2XupSnt3IA= Subject key identifier: CE:78:CD:1E:7F:85:4D:93:F7:B5:37:E1:EF:99:F0:C4:5A:FC:C6:5A Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C Certificate issuer: /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C Certificate serial: 0445 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft Manifest number: 0442 Signing time: Tue 25 Nov 2025 03:12:50 +0000 Manifest this update: Tue 25 Nov 2025 03:12:49 +0000 Manifest next update: Thu 27 Nov 2025 03:12:49 +0000 Files and hashes: 1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: d5R9PZ3sQMKCoAcjagUwpYv1g7YQstb2hQYaVMOnres=) 2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=) 3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 27 Nov 2025 00:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C Validity Not Before: Nov 25 03:12:49 2025 GMT Not After : Nov 27 03:12:49 2025 GMT Subject: CN=69251eb2-8c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:eb:40:0e:85:83:d0:07:43:71:44:ee:59: 11:f4:59:88:09:dc:e8:ba:ae:9e:9e:33:45:9e:36: 82:dc:60:31:49:bb:10:5c:70:ed:66:9b:03:74:7c: 4b:94:0f:6c:df:45:fe:69:bd:0f:c3:06:6d:df:73: fa:c3:d8:eb:4c:a7:f4:e9:9e:10:c2:c8:88:d8:dc: aa:cd:36:97:c4:12:7f:53:fc:89:4c:8e:64:b0:84: 92:94:14:61:d3:c8:88:17:ec:60:53:83:a3:e8:33: 9d:9e:11:d2:b1:84:15:18:71:ff:8d:06:19:c7:97: f9:43:9b:99:2d:3f:eb:d9:00:92:c5:c6:82:00:5f: de:00:96:37:72:13:3c:aa:90:60:60:31:0a:fc:ce: 88:f4:6b:98:84:bd:c4:88:aa:1d:99:30:0c:ac:02: cc:13:94:da:2f:c6:c6:d6:2d:8c:9c:fa:84:24:19: 4a:a5:43:e6:f3:83:97:6f:de:5e:6b:fd:8f:91:28: 3e:80:2c:b1:a0:66:6d:88:3e:c6:23:48:20:cd:b4: e0:4b:9a:d6:de:97:c0:ab:9c:0e:86:7b:3e:33:4e: df:f5:55:16:8e:55:de:e7:d0:2e:03:24:d1:2b:9e: 86:e2:c8:ef:c5:e9:c7:d4:f9:d2:df:d9:37:2e:71: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:78:CD:1E:7F:85:4D:93:F7:B5:37:E1:EF:99:F0:C4:5A:FC:C6:5A X509v3 Authority Key Identifier: keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:89:c6:43:fd:3d:17:6a:74:8a:4d:4a:c0:47:72:c3:6e:69: 21:a5:cb:8c:ed:2d:08:61:29:fd:d7:7d:d6:84:4e:0c:46:51: ea:5f:68:9b:3e:bd:86:58:a7:67:1a:8f:de:6f:c8:e8:88:3e: bc:5c:25:6e:6b:68:8a:8b:2b:aa:66:58:e7:54:d0:e1:ab:94: 6f:c4:60:1a:2f:10:51:df:01:2c:c9:3e:ae:1d:81:34:5b:90: ec:17:e7:45:ad:db:f3:7f:53:2c:d9:70:d4:38:04:86:f1:98: bb:0e:4c:6b:e8:a7:dd:cf:cf:c3:7a:ce:52:90:4a:b6:5d:0d: f1:0f:46:36:77:3c:6f:be:81:b5:83:3d:2b:41:10:d5:39:d3: d3:5d:6b:24:e7:a5:9b:0d:c0:61:e9:91:46:e4:f7:ae:e4:c0: 01:8c:a1:b6:5a:9e:cb:26:25:38:a1:9b:50:c7:57:d9:7f:a8: 01:a3:08:38:57:e2:32:4b:cc:65:20:63:88:44:fe:e9:94:a4: d2:40:3f:ff:e9:60:b7:08:25:40:1e:f3:48:fa:f2:65:6e:20: 55:0a:4c:d2:67:39:91:31:ec:d5:00:8e:f7:7c:b7:20:07:48: 34:74:75:be:fb:0d:a7:dc:03:d3:87:ab:7a:42:4e:2d:85:eb: 1b:df:bf:ee -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjJEQUJBRjExMC8GA1UEBRMoNUNBMzg5RkI4MDUxRDI0MTJCQTVERjgwMUQ4OUIy Q0FDRTU3MjU5QzAeFw0yNTExMjUwMzEyNDlaFw0yNTExMjcwMzEyNDlaMBgxFjAU BgNVBAMTDTY5MjUxZWIyLThjOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCtOutADoWD0AdDcUTuWRH0WYgJ3Oi6rp6eM0WeNoLcYDFJuxBccO1mmwN0 fEuUD2zfRf5pvQ/DBm3fc/rD2OtMp/TpnhDCyIjY3KrNNpfEEn9T/IlMjmSwhJKU FGHTyIgX7GBTg6PoM52eEdKxhBUYcf+NBhnHl/lDm5ktP+vZAJLFxoIAX94Aljdy EzyqkGBgMQr8zoj0a5iEvcSIqh2ZMAysAswTlNovxsbWLYyc+oQkGUqlQ+bzg5dv 3l5r/Y+RKD6ALLGgZm2IPsYjSCDNtOBLmtbel8CrnA6Gez4zTt/1VRaOVd7n0C4D JNErnobiyO/F6cfU+dLf2TcucWOvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUznjN Hn+FTZP3tTfh75nwxFr8xlowHwYDVR0jBBgwFoAUXKOJ+4BR0kErpd+AHYmyys5X JZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjYyREFCLzA0OEY4ODEwOEYzMjExRURCMEVFRjFCN0YxMjIyNDY4L1hLT0ot NEJSMGtFcnBkLUFIWW15eXM1WEpady5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1hLT0otNEJSMGtFcnBkLUFIWW15eXM1WEpady5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjJEQUIvMDQ4Rjg4MTA4RjMyMTFFREIwRUVGMUI3RjEy MjI0NjgvWEtPSi00QlIwa0VycGQtQUhZbXl5czVYSlp3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgicZD/T0XanSKTUrAR3LDbmkhpcuM 7S0IYSn9133WhE4MRlHqX2ibPr2GWKdnGo/eb8joiD68XCVua2iKiyuqZljnVNDh q5RvxGAaLxBR3wEsyT6uHYE0W5DsF+dFrdvzf1Ms2XDUOASG8Zi7Dkxr6Kfdz8/D es5SkEq2XQ3xD0Y2dzxvvoG1gz0rQRDVOdPTXWsk56WbDcBh6ZFG5Peu5MABjKG2 Wp7LJiU4oZtQx1fZf6gBowg4V+IyS8xlIGOIRP7plKTSQD//6WC3CCVAHvNI+vJl biBVCkzSZzmRMezVAI73fLcgB0g0dHW++w2n3APTh6t6Qk4thesb37/u -----END CERTIFICATE-----Generated at Tue Nov 25 20:33:45 2025 by rpki-client