This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft File: zkYtttkR7mTZxEy4EI0T4DxaZNU.mft (raw, json) Hash identifier: qJKoVbZBgmgjgg7C273ZpWXsJnp9ILosWL1LvmA4qLI= Subject key identifier: 1D:4A:F9:BF:C3:8D:1C:FC:B4:B8:41:97:08:98:A7:09:43:D3:86:A5 Authority key identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5 Certificate issuer: /CN=F3679532AF/serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5 Certificate serial: 1C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft Manifest number: 1A Signing time: Tue 09 Dec 2025 05:21:07 +0000 Manifest this update: Tue 09 Dec 2025 05:21:06 +0000 Manifest next update: Thu 11 Dec 2025 05:21:06 +0000 Files and hashes: 1: zkYtttkR7mTZxEy4EI0T4DxaZNU.crl (hash: r6iAJUbBcfcauts+FlXssnRTA23yaKgJ0CpiGT0PMKw=) 2: FDA59DF2C38E11F08B1F0FCADAE4EC9C.roa (hash: tqnDn2eXksrwnPyVC4DoYDlm3A+bfBcINzKFdaoCNAE=) 3: 86AD3B68C39511F0A59F00F2DAE4EC9C.roa (hash: HAj/QCJbUqOlCpJTAgH7nxk05+9O2sEd5ZgoEE+jkL0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 05:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3679532AF, serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5 Validity Not Before: Dec 9 05:21:06 2025 GMT Not After : Dec 11 05:21:06 2025 GMT Subject: CN=6937b1c2-0d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:8d:9d:61:93:5e:ff:08:5b:09:50:3f:99: bc:bd:15:e0:52:33:9a:b8:56:41:4b:43:2c:fd:65: 46:cd:67:36:b9:f8:73:e7:87:5f:10:dd:ba:40:12: fd:de:42:3e:6b:86:62:40:23:3d:1f:44:64:f1:86: 9a:9f:89:72:66:d5:75:2c:b3:f9:16:af:33:49:1c: 00:69:37:46:3d:32:f3:71:22:5f:e3:c2:e1:02:df: 81:85:ec:89:7a:fb:cd:93:50:f0:93:81:e8:74:68: 41:d3:4d:59:6b:c9:a2:24:94:7d:90:87:e1:c9:19: ef:3e:dc:22:d1:fc:be:2f:a0:8d:35:cc:06:6d:dd: 01:19:9d:b8:21:24:a3:0a:5a:b2:d9:60:c3:ad:62: 23:fe:35:7e:44:07:47:f5:4a:77:17:07:92:eb:f8: 6c:b7:88:24:a3:bf:6e:83:7f:30:40:c4:eb:c6:7d: 0a:64:0d:5e:ff:4b:b4:f9:ed:3c:58:79:dd:69:18: e4:52:fa:68:1a:35:9b:e8:f7:c3:7b:05:be:e6:b1: 4e:a3:63:2b:d3:49:88:16:70:8b:0f:c5:cb:68:60: 66:3f:42:4c:48:cf:39:cc:c2:75:17:50:46:20:23: af:8b:eb:f7:93:ac:3f:01:5c:9f:59:c7:06:7e:93: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4A:F9:BF:C3:8D:1C:FC:B4:B8:41:97:08:98:A7:09:43:D3:86:A5 X509v3 Authority Key Identifier: keyid:CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:05:b3:86:9a:66:21:3d:02:6a:f6:db:e2:a8:bc:f9:a5:ea: 1d:b9:d8:19:0a:bc:6a:da:c4:8b:7e:f8:44:17:56:9d:4f:55: a6:25:7b:5e:96:f3:78:5a:d6:91:79:f0:2f:10:f9:2f:24:7d: 59:f5:71:18:3f:64:87:5f:0e:0b:33:b3:78:d8:a6:65:30:13: 96:4b:8d:e4:37:38:cf:de:c6:ae:1f:ce:b3:dd:53:0d:61:0c: f1:51:d4:11:93:9d:b5:06:28:a0:42:fe:a3:06:52:8d:69:a9: 42:cc:24:88:66:6e:6f:d3:66:0c:6b:9d:e5:a2:b9:71:b6:d2: 59:bb:f4:77:cf:50:1b:dc:21:d5:1d:b2:e0:a1:cd:05:9f:93: fe:6d:65:30:48:68:96:ac:5f:9f:60:d1:62:14:68:59:d0:23: 34:e5:8b:9c:6f:77:8e:08:6b:64:97:42:43:ff:eb:e4:ec:fe: 94:8d:84:00:c6:af:9f:11:21:87:55:96:28:c4:7f:f0:2e:56: 55:50:a8:0a:dd:ea:ab:b0:af:93:b9:f2:a4:6e:ec:1c:b4:0d: 3b:49:54:d6:80:67:78:ad:d8:dd:5f:b4:8e:22:6b:48:b2:a4: d9:39:a1:f9:bc:06:47:3d:5e:64:3b:cd:1c:ef:02:96:00:59: 11:e9:36:fe -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIBHDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3 OTUzMkFGMTEwLwYDVQQFEyhDRTQ2MkRCNkQ5MTFFRTY0RDlDNDRDQjgxMDhEMTNF MDNDNUE2NEQ1MB4XDTI1MTIwOTA1MjEwNloXDTI1MTIxMTA1MjEwNlowGDEWMBQG A1UEAxMNNjkzN2IxYzItMGQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiXjZ1hk17/CFsJUD+ZvL0V4FIzmrhWQUtDLP1lRs1nNrn4c+eHXxDdukAS /d5CPmuGYkAjPR9EZPGGmp+JcmbVdSyz+RavM0kcAGk3Rj0y83EiX+PC4QLfgYXs iXr7zZNQ8JOB6HRoQdNNWWvJoiSUfZCH4ckZ7z7cItH8vi+gjTXMBm3dARmduCEk owpastlgw61iI/41fkQHR/VKdxcHkuv4bLeIJKO/boN/MEDE68Z9CmQNXv9LtPnt PFh53WkY5FL6aBo1m+j3w3sFvuaxTqNjK9NJiBZwiw/Fy2hgZj9CTEjPOczCdRdQ RiAjr4vr95OsPwFcn1nHBn6TNXUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQdSvm/ w40c/LS4QZcImKcJQ9OGpTAfBgNVHSMEGDAWgBTORi222RHuZNnETLgQjRPgPFpk 1TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Nzk1MzIvN0RENDU2MDRDMzhFMTFGMDhCRjZCM0M3REFFNEVDOUMvemtZdHR0 a1I3bVRaeEV5NEVJMFQ0RHhhWk5VLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu aWMvemtZdHR0a1I3bVRaeEV5NEVJMFQ0RHhhWk5VLmNlcjBPBgNVHSABAf8ERTBD MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY3OTUzMi83REQ0NTYwNEMzOEUxMUYwOEJGNkIzQzdEQUU0 RUM5Qy96a1l0dHRrUjdtVFp4RXk0RUkwVDREeGFaTlUubWZ0MDUGCCsGAQUFBzAN hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIoFs4aaZiE9Amr22+KovPml6h252BkK vGraxIt++EQXVp1PVaYle16W83ha1pF58C8Q+S8kfVn1cRg/ZIdfDgszs3jYpmUw E5ZLjeQ3OM/exq4fzrPdUw1hDPFR1BGTnbUGKKBC/qMGUo1pqULMJIhmbm/TZgxr neWiuXG20lm79HfPUBvcIdUdsuChzQWfk/5tZTBIaJasX59g0WIUaFnQIzTli5xv d44Ia2SXQkP/6+Ts/pSNhADGr58RIYdVlijEf/AuVlVQqArd6quwr5O58qRu7By0 DTtJVNaAZ3it2N1ftI4ia0iypNk5ofm8Bkc9XmQ7zRzvApYAWRHpNv4= -----END CERTIFICATE-----Generated at Tue Dec 9 12:03:10 2025 by rpki-client