This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
File: DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json)
Hash identifier: Xc4ZD00poLCYFN3L8s5VKQF75TlyQbNznq045ChBM+o=
Subject key identifier: FC:AC:84:37:24:A8:89:EC:8B:36:DE:D9:84:FE:56:F2:9E:05:0D:1A
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial: 04F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
Manifest number: 04ED
Signing time: Fri 05 Dec 2025 02:56:26 +0000
Manifest this update: Fri 05 Dec 2025 02:56:25 +0000
Manifest next update: Sun 07 Dec 2025 02:56:25 +0000
Files and hashes: 1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: lR5vgH9FH/MmeeAyKhLlswu0YUZigHuWDkhejxIuzOo=)
2: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (hash: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=)
3: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=)
4: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Dec 2025 02:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Validity
Not Before: Dec 5 02:56:25 2025 GMT
Not After : Dec 7 02:56:25 2025 GMT
Subject: CN=693249da-26cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:9f:6d:d7:ac:a7:26:80:3f:cb:cc:dc:79:
8e:42:e7:0b:67:bc:c1:9f:49:c5:fb:a7:52:cb:39:
42:d8:66:7e:dc:09:12:a3:c8:0d:4b:29:67:8d:ba:
5c:d0:60:f4:e5:6d:ef:f2:6c:90:91:5a:cf:0a:99:
3f:f5:78:29:4b:1a:0b:95:97:8e:d6:b8:3b:6c:a5:
4d:c2:6b:e5:02:35:c3:af:1f:e1:19:d7:15:ef:58:
42:3c:42:4b:47:22:e3:04:38:37:b7:27:63:91:93:
2b:5e:92:dd:5d:6b:af:f9:cd:2b:29:f8:c4:58:ab:
d1:c1:05:e6:66:40:70:09:fc:9a:aa:42:27:55:24:
b4:fe:69:bb:1b:5f:07:4f:a8:4f:8d:b9:f2:5d:df:
8e:98:99:2c:fa:4c:13:20:5a:db:15:cd:a6:d6:70:
24:6b:e2:fb:de:bc:fa:4d:66:ae:dc:46:cd:6b:4f:
f5:62:e8:d3:70:c6:e5:1d:4d:19:1e:0e:4f:04:90:
4e:e5:f7:2a:58:b7:93:f5:d4:76:40:3f:fb:38:70:
9f:43:ec:95:32:1e:fd:0c:ad:8b:0e:65:6f:4f:24:
1a:4b:ea:74:4f:fd:06:27:bd:ea:5d:a8:f3:f2:99:
d4:78:e4:fe:84:ce:a2:38:24:fe:a8:15:fa:26:f8:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:84:37:24:A8:89:EC:8B:36:DE:D9:84:FE:56:F2:9E:05:0D:1A
X509v3 Authority Key Identifier:
keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c6:43:9c:5f:bf:3b:cf:4f:7f:a2:7d:66:94:6f:79:6c:5b:
36:13:4b:9c:95:c2:11:76:4e:74:c8:06:51:30:a8:8d:0b:17:
61:c9:42:7e:f9:c4:e0:d9:a2:84:85:8f:8f:a7:8c:8b:e2:64:
d6:f2:88:de:20:32:a8:7f:7a:f3:b2:82:c3:bb:07:31:15:1d:
38:db:97:90:80:e4:cc:c7:2b:00:62:e6:49:e9:81:03:59:39:
5f:75:01:e7:25:c3:df:83:71:28:9a:88:21:f8:cc:a2:0c:19:
d4:6e:d6:1b:08:a5:e4:6f:72:98:40:e4:21:d2:6c:1e:bc:f0:
73:9e:52:0e:ea:c1:0c:8a:ac:9e:aa:2c:ba:c6:9d:80:d0:6c:
07:4f:84:57:5e:7c:4a:be:e7:3b:2e:3f:58:b9:5e:63:46:9d:
45:4a:10:a5:1f:26:3c:24:78:41:bb:36:83:4f:7a:7a:9b:70:
0e:01:69:2c:fd:45:82:73:a3:55:ea:f7:ec:29:28:00:88:6a:
bb:ce:ad:79:8e:8e:a6:ff:d4:5e:e9:09:31:d7:ef:0c:8d:00:
e0:f7:40:30:6f:7b:25:e5:3e:a3:ea:2f:ee:0f:e2:d9:e4:36:
a7:71:0a:54:7d:1f:94:97:4f:3e:8b:1c:60:7a:0f:1c:32:4d:
99:ed:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:00:02 2025 by rpki-client