This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json) Hash identifier: gvxZp5MAUh1U5vszLH7L6AZYP24gUNEiakn5XafGh9I= Subject key identifier: 4F:73:FB:89:34:0D:94:23:6F:5D:9C:88:4B:F2:94:E7:53:F9:65:6B Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Certificate serial: 0254 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft Manifest number: 0248 Signing time: Wed 03 Dec 2025 04:18:44 +0000 Manifest this update: Wed 03 Dec 2025 04:18:43 +0000 Manifest next update: Fri 05 Dec 2025 04:18:43 +0000 Files and hashes: 1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: tIF7SkYQbqk21dy3d2uQBa2kJBHBaus00uXS65F07aI=) 2: 53E9AF201C4A11EF92B1620D7DDC24C2.roa (hash: KdhlIJ+hQm0D2JssqauHu+bI+aH2TH0/RDTYBo7Rfl4=) 3: 6BD3D72C1C4B11EFA0DF5FE57CDC24C2.roa (hash: kVAT6LvKNfd1TJNrUHJDtuhrBoJ6grfJU6Qzk3woG9A=) 4: 3C9F14321C4911EFAAC969317DDC24C2.roa (hash: /gSe9pWPhZ5Kr8gRd+6yNTm4qcpvwit2QsIwfbhWGVc=) 5: EBFBD6E61C4811EF8DA9FC307DDC24C2.roa (hash: Uo9oJGDvBKqk9WcNSro/GD2IK8co4yKnO+0R+FSe34k=) 6: 08C544981C4811EFBA18A22B7DDC24C2.roa (hash: tqhwIQRYgFOkg1i0m9P867NgozM8wyM/qc2l8ldhExg=) 7: 312C885E1C4A11EF9DE586157DDC24C2.roa (hash: GjHEWzUkDA6tsW5/6kpvZ3CU5zKEBXoesmUsNT+Jflo=) 8: 7E241A021C4811EF8F9DAE2C7DDC24C2.roa (hash: hxre5xYuTBxkwQmVRlBLeiMXMr0AnCvaVpMmejl5uhQ=) 9: FE708AD21C4911EF81BE34EA7CDC24C2.roa (hash: ZiopXrdqLTsU+61ziIshjn2/qWu+FsJbH9OdegqZ2vo=) 10: BF6D84E41C4811EF92649B307DDC24C2.roa (hash: Jbh8WY5UNAzz+osRgcagPYaVf8dyK5RVLpOyRMHMYas=) 11: 8604AD081C4911EF8DFB87357DDC24C2.roa (hash: MNoPychVF0mh+syf/DFmicmi7Wi0XntNJ0aJdW/gDe4=) 12: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Validity Not Before: Dec 3 04:18:43 2025 GMT Not After : Dec 5 04:18:43 2025 GMT Subject: CN=692fba24-1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:88:9e:a8:e6:34:74:12:0d:53:ec:4f:8c: 13:87:34:5a:22:bd:cb:28:f3:19:4e:4c:51:1f:6c: fb:77:7b:50:f8:50:78:e4:74:13:a7:21:4a:2d:af: e9:04:cc:f4:66:2d:eb:fe:4a:d4:9c:38:4e:1c:1e: 8b:c1:a0:1e:fe:88:e6:36:14:21:cf:b4:12:ae:24: 07:21:06:16:29:0f:da:fd:5c:f5:e1:c5:6a:9a:e7: 30:0f:96:a7:5f:41:d8:c4:82:14:d7:d9:93:f7:ff: b8:a8:a6:b2:19:41:60:dd:69:c7:a7:80:9c:b5:3c: ac:52:87:62:0d:76:40:9f:ce:6e:2c:10:03:f6:08: 40:9f:30:3d:c9:67:fa:95:b0:27:4a:18:d1:c4:10: 48:31:9c:93:e8:08:b3:0c:fb:46:e4:06:58:c6:45: c2:50:bb:89:99:37:b5:be:cf:da:82:ad:d0:c2:e6: 79:90:14:c5:42:f4:eb:bc:b9:42:f6:e9:01:a2:6e: 95:56:38:56:f9:a7:a1:ee:c4:57:3f:6e:98:23:2e: 31:9e:21:e5:c9:5d:70:6c:47:7c:f4:23:f7:bc:a1: 7a:af:5e:4c:bb:f7:7b:16:c1:bf:88:3a:40:ea:aa: 3c:e5:28:f6:8f:07:2f:de:06:d9:af:90:2f:83:5e: 58:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:FB:89:34:0D:94:23:6F:5D:9C:88:4B:F2:94:E7:53:F9:65:6B X509v3 Authority Key Identifier: keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:87:e3:5a:6a:58:a6:a6:a8:34:ac:8c:35:dc:f5:59:5e:e2: 79:63:66:7a:9b:b1:d6:30:e9:e4:3d:06:ba:a3:e2:97:c0:1a: f5:71:bc:8c:58:0f:7a:35:cd:f0:6e:c5:f4:78:e1:28:ec:28: e6:e3:7a:84:15:8d:87:a9:b6:c7:1f:6b:5d:fa:8b:5a:1b:d7: da:22:b4:cb:fd:c0:8e:5c:1b:4a:d4:05:74:2d:85:8d:14:ad: 34:66:8e:61:33:00:89:c6:f9:c9:c2:fc:0e:2f:77:d8:4e:a8: 05:b3:80:29:35:a2:86:19:5e:cc:6c:97:07:0d:41:7f:37:67: 6d:90:b7:e2:8c:c7:63:d3:4b:a9:c6:b6:80:76:15:b2:b5:ad: 9a:eb:d8:08:db:b5:25:d4:9e:43:36:ca:53:98:10:64:44:8c: 8d:b4:80:e3:cf:36:91:05:9f:6e:c1:86:5f:a3:35:43:13:12: d6:dd:83:f9:c0:e4:b8:32:4d:03:69:78:c9:af:0a:bc:2f:13: 3c:70:8c:52:59:fd:2c:ee:0b:92:be:fb:66:e8:de:ae:f6:56: 01:b2:b2:07:b0:ce:a8:b3:5d:ec:24:ec:e6:66:0b:cf:2f:10: d3:5b:5b:01:27:9f:18:68:86:25:34:fa:bd:8d:df:ba:28:b8: d1:52:32:e7 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzJCRjJBRjExMC8GA1UEBRMoRkI4NUUwOEU1REJCMDVDOTVCN0JEMERBN0U1RkU2 RkNFMzk4MjZGRjAeFw0yNTEyMDMwNDE4NDNaFw0yNTEyMDUwNDE4NDNaMBgxFjAU BgNVBAMTDTY5MmZiYTI0LTE0MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDWaoieqOY0dBINU+xPjBOHNFoivcso8xlOTFEfbPt3e1D4UHjkdBOnIUot r+kEzPRmLev+StScOE4cHovBoB7+iOY2FCHPtBKuJAchBhYpD9r9XPXhxWqa5zAP lqdfQdjEghTX2ZP3/7ioprIZQWDdacengJy1PKxSh2INdkCfzm4sEAP2CECfMD3J Z/qVsCdKGNHEEEgxnJPoCLMM+0bkBljGRcJQu4mZN7W+z9qCrdDC5nmQFMVC9Ou8 uUL26QGibpVWOFb5p6HuxFc/bpgjLjGeIeXJXXBsR3z0I/e8oXqvXky793sWwb+I OkDqqjzlKPaPBy/eBtmvkC+DXlh1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUT3P7 iTQNlCNvXZyIS/KU51P5ZWswHwYDVR0jBBgwFoAU+4Xgjl27Bclbe9Dafl/m/OOY Jv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkMyQkYyL0RBQkFCODdFMTlFQzExRUZCQ0JGNUUyQzAxNzAwMUIxLy00WGdq bDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLy00WGdqbDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QzJCRjIvREFCQUI4N0UxOUVDMTFFRkJDQkY1RTJDMDE3 MDAxQjEvLTRYZ2psMjdCY2xiZTlEYWZsX21fT09ZSnY4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTh+Naalimpqg0rIw13PVZXuJ5Y2Z6 m7HWMOnkPQa6o+KXwBr1cbyMWA96Nc3wbsX0eOEo7Cjm43qEFY2HqbbHH2td+ota G9faIrTL/cCOXBtK1AV0LYWNFK00Zo5hMwCJxvnJwvwOL3fYTqgFs4ApNaKGGV7M bJcHDUF/N2dtkLfijMdj00upxraAdhWyta2a69gI27Ul1J5DNspTmBBkRIyNtIDj zzaRBZ9uwYZfozVDExLW3YP5wOS4Mk0DaXjJrwq8LxM8cIxSWf0s7guSvvtm6N6u 9lYBsrIHsM6os13sJOzmZgvPLxDTW1sBJ58YaIYlNPq9jd+6KLjRUjLn -----END CERTIFICATE-----Generated at Wed Dec 3 12:41:38 2025 by rpki-client