This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft File: LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json) Hash identifier: k89HY7Iz6hN8LwMENvwAMk+UZIRb/Vqt9UFzf/0Gp1M= Subject key identifier: C5:DD:75:87:7D:DD:55:9F:28:11:40:49:8A:0F:50:CB:41:A6:FE:BF Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA Certificate issuer: /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA Certificate serial: 041E Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft Manifest number: 041B Signing time: Tue 09 Dec 2025 03:18:21 +0000 Manifest this update: Tue 09 Dec 2025 03:18:20 +0000 Manifest next update: Thu 11 Dec 2025 03:18:20 +0000 Files and hashes: 1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: r/X8Iqdi1vNXekgvz4iEkDDrW8o/bdkl2ThxOKcD578=) 2: 31E6ED6E5E4A11F0B9EEF8F1DAE4EC9C.roa (hash: wY2O3owjl7AYpJtBNGgcE5jUl65qutwOOti84IXPCgg=) 3: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (hash: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=) 4: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 03:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA Validity Not Before: Dec 9 03:18:20 2025 GMT Not After : Dec 11 03:18:20 2025 GMT Subject: CN=693794fc-d03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:ab:d3:99:cc:20:a4:2d:3e:17:c4:7a:bf: 5e:ec:8f:e5:0a:ab:d6:85:ec:1c:cf:ff:ef:c4:1a: 82:22:db:1e:43:14:fe:8d:9e:7d:e8:99:69:b6:f0: 4f:c9:09:e0:d4:e3:6b:35:e1:52:99:3f:09:51:25: 76:d4:a0:b1:6d:78:67:1a:4c:00:45:b4:97:6c:2b: 18:08:f8:5f:c2:79:9c:f2:60:01:e3:6a:d4:1f:a1: 5d:8a:45:bd:d7:57:51:28:e8:8a:d0:7b:94:b6:35: c5:63:55:6b:34:6c:2a:41:ab:fa:31:f3:0b:e0:67: cb:3c:1e:1e:55:ab:7c:34:c4:26:ba:46:c1:8b:9c: fa:7d:85:d1:8d:6a:a4:5d:30:0c:e1:a0:fc:37:01: 55:8d:d7:68:0b:21:5e:71:81:0f:d9:8d:71:6d:10: 07:a4:9d:08:58:72:a7:a6:83:c3:18:65:4d:02:8c: 69:eb:9a:93:30:d1:7a:a7:1a:5d:3b:7e:1c:7e:fb: aa:36:f0:3f:38:10:cf:a5:d8:9d:f3:ed:eb:cc:1e: fe:e5:be:cc:3a:0c:8f:47:b4:0f:73:48:be:4e:04: 9e:21:96:d2:4e:9b:e6:f7:69:33:f8:96:2c:62:df: 3a:71:ab:24:a8:8a:79:d0:a3:58:d0:ae:e1:f0:d1: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DD:75:87:7D:DD:55:9F:28:11:40:49:8A:0F:50:CB:41:A6:FE:BF X509v3 Authority Key Identifier: keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6e:c2:88:dd:03:bd:df:84:32:68:2d:18:ac:67:38:72:05: 88:0e:8d:fe:20:14:67:51:62:17:8a:7d:3e:1a:78:62:73:56: 68:95:8b:25:4b:fe:ca:e4:86:17:d6:ea:ab:ad:bd:b7:c3:f8: 7c:5c:37:0d:87:35:8d:62:15:67:f7:ed:ef:a3:9a:5a:49:02: 14:f5:2b:d1:e7:52:c7:a8:5a:58:70:39:60:ed:6f:4a:da:7a: 06:3a:f5:84:72:1d:5c:fd:41:0a:03:cb:72:64:aa:07:9a:b4: 18:27:64:a9:a8:a9:9b:8f:33:4c:d1:39:d2:69:62:e8:8a:31: 74:6a:e0:a9:90:42:81:07:b7:a8:7b:1b:b9:19:30:78:a5:2c: fb:5f:ee:6a:d5:66:61:f6:f1:d7:69:a3:7d:ad:c5:b8:c6:60: f9:e7:30:86:48:19:1f:99:40:f7:f8:88:c2:35:66:34:c3:0d: a9:7c:93:3b:8f:d6:f0:c9:3c:2c:e8:f8:5f:53:59:c3:ab:15: b2:64:64:ed:88:76:91:96:7f:8e:e5:23:47:29:cb:a2:4a:7b: 5d:21:d0:8d:ff:94:ed:35:b0:b4:ba:17:71:71:25:85:eb:a0: 5e:1c:2d:49:11:d8:d1:47:1e:0c:07:9e:0a:56:72:75:d4:19: 73:96:f3:99 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NzVDMkJBRjExMC8GA1UEBRMoMkQ5MUM5RjI1NUMwOTgzNDc0QTRENEM2MEU4RkUw RUMzMUVFQjdFQTAeFw0yNTEyMDkwMzE4MjBaFw0yNTEyMTEwMzE4MjBaMBgxFjAU BgNVBAMTDTY5Mzc5NGZjLWQwM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC/CqvTmcwgpC0+F8R6v17sj+UKq9aF7BzP/+/EGoIi2x5DFP6Nnn3omWm2 8E/JCeDU42s14VKZPwlRJXbUoLFteGcaTABFtJdsKxgI+F/CeZzyYAHjatQfoV2K Rb3XV1Eo6IrQe5S2NcVjVWs0bCpBq/ox8wvgZ8s8Hh5Vq3w0xCa6RsGLnPp9hdGN aqRdMAzhoPw3AVWN12gLIV5xgQ/ZjXFtEAeknQhYcqemg8MYZU0CjGnrmpMw0Xqn Gl07fhx++6o28D84EM+l2J3z7evMHv7lvsw6DI9HtA9zSL5OBJ4hltJOm+b3aTP4 lixi3zpxqySoinnQo1jQruHw0fv/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxd11 h33dVZ8oEUBJig9Qy0Gm/r8wHwYDVR0jBBgwFoAULZHJ8lXAmDR0pNTGDo/g7DHu t+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjc1QzJCL0M2MTk1NEFBQjgzODExRURCMTcxN0JCMUYxMjIyNDY4L0xaSEo4 bFhBbURSMHBOVEdEb19nN0RIdXQtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0xaSEo4bFhBbURSMHBOVEdEb19nN0RIdXQtby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NzVDMkIvQzYxOTU0QUFCODM4MTFFREIxNzE3QkIxRjEy MjI0NjgvTFpISjhsWEFtRFIwcE5UR0RvX2c3REh1dC1vLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGbsKI3QO934QyaC0YrGc4cgWIDo3+ IBRnUWIXin0+Gnhic1ZolYslS/7K5IYX1uqrrb23w/h8XDcNhzWNYhVn9+3vo5pa SQIU9SvR51LHqFpYcDlg7W9K2noGOvWEch1c/UEKA8tyZKoHmrQYJ2SpqKmbjzNM 0TnSaWLoijF0auCpkEKBB7eoexu5GTB4pSz7X+5q1WZh9vHXaaN9rcW4xmD55zCG SBkfmUD3+IjCNWY0ww2pfJM7j9bwyTws6PhfU1nDqxWyZGTtiHaRln+O5SNHKcui SntdIdCN/5TtNbC0uhdxcSWF66BeHC1JEdjRRx4MB54KVnJ11BlzlvOZ -----END CERTIFICATE-----Generated at Tue Dec 9 12:15:51 2025 by rpki-client