This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft File: DOoR1fD2WesQDyt_sejINrwlz5g.mft (raw, json) Hash identifier: 3jzQyOAh94shW60IYoJ0s/7rD4uzFOvOirnOLIO8AIw= Subject key identifier: DE:E5:51:6D:C4:8B:D5:83:6B:62:FD:04:39:6B:B3:2D:F1:24:0B:D0 Authority key identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98 Certificate issuer: /CN=F36C33BBAF/serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98 Certificate serial: 02C2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft Manifest number: 02C0 Signing time: Tue 23 Dec 2025 04:03:25 +0000 Manifest this update: Tue 23 Dec 2025 04:03:24 +0000 Manifest next update: Thu 25 Dec 2025 04:03:24 +0000 Files and hashes: 1: DOoR1fD2WesQDyt_sejINrwlz5g.crl (hash: yax7fVcmQ9MkE/rFWKZDgjRb7uC8mb3RZbadeCupx8g=) 2: 48BD0A7A14D811F09D2DBA0A6EB8BCC6.roa (hash: K8z2vSGpFFut3n7D7lisZcx7JDx1aJSflHUP/bhx0pg=) 3: 059E0E4AC59E11EEA53C71B7775412E6.roa (hash: ZFKITH+OchlrxbiwzeW9jzaBB9KK8U2j/qLB4RDTGvs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 25 Dec 2025 04:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C33BBAF, serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98 Validity Not Before: Dec 23 04:03:24 2025 GMT Not After : Dec 25 04:03:24 2025 GMT Subject: CN=694a148d-04fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:9d:d5:0a:e1:f8:62:f7:8f:9b:21:f9:40: 83:b6:8d:27:c5:7c:59:03:49:11:22:65:4b:68:ab: 1a:99:54:98:04:fb:2c:bc:0a:c6:f2:78:1f:5e:89: 88:ed:b6:c9:7d:98:36:5c:e9:9f:12:28:1d:5f:ef: 2f:92:47:db:48:85:88:4a:10:60:96:b5:8a:75:2b: c9:3e:88:2b:de:dd:f1:49:54:11:f0:76:8a:5f:4a: b8:65:df:6d:72:a8:4e:50:a9:c0:cf:ab:27:28:09: 6c:d8:3d:aa:de:41:ea:b5:7b:a8:17:68:f7:32:bb: c8:7b:c3:ae:6c:73:93:20:e7:54:40:c2:e6:f6:f5: 32:e9:c9:96:71:f9:e2:f4:99:d8:ec:b7:af:36:4d: 1f:91:4f:9d:2f:cd:d7:a6:d2:4f:3a:40:ab:9c:f0: 8c:3f:b1:0c:f2:54:28:9c:b8:4a:cc:79:00:3c:aa: f2:04:41:7d:ee:60:de:bf:2c:00:95:6a:58:ce:17: 3c:f8:98:61:05:c2:f7:51:cc:d1:74:6a:71:7a:3c: 5e:87:91:ef:c8:2e:83:8f:6a:b9:29:6f:60:ab:1e: c2:d0:5d:4e:7b:f3:e7:b4:fe:aa:2c:e2:00:c3:0f: e6:05:f8:b5:a6:f6:b6:fa:63:d9:0a:7c:66:94:78: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E5:51:6D:C4:8B:D5:83:6B:62:FD:04:39:6B:B3:2D:F1:24:0B:D0 X509v3 Authority Key Identifier: keyid:0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8d:9a:6b:71:72:2e:94:af:f2:2a:27:93:ab:ea:30:86:18: f1:1f:d8:57:e0:bd:b4:c5:93:49:3e:96:81:67:ab:e8:8b:bc: ff:36:82:83:1d:97:b4:3f:14:7f:30:94:e0:69:87:95:d4:c5: b1:d3:d8:cb:45:60:39:11:e6:bf:2a:ab:fe:79:0d:18:be:5a: d6:30:da:24:84:d5:bf:18:4f:e5:b8:a2:2f:83:92:13:f9:5c: 6f:9d:c1:b1:9d:45:cc:28:33:c1:b6:9d:5e:32:9c:f2:49:8b: 81:72:7c:73:e4:0d:1f:17:d7:ec:ca:55:11:d5:9d:8f:21:98: 52:7f:c3:98:f3:18:5e:1a:f8:b0:aa:9f:7c:51:6d:5f:11:0d: 2e:83:3c:78:c5:f3:51:9d:ad:1e:1d:c8:e6:38:b4:b1:5a:99: c0:db:30:54:d7:bc:ce:eb:6c:64:d9:7b:80:99:7c:87:83:58: 01:4e:6a:b0:31:93:0e:80:f3:15:1e:a0:c2:69:ce:5b:b1:cf: d3:f7:35:52:4a:d6:40:03:50:d3:34:41:27:b6:ce:60:a5:ab: 3d:3d:4b:7e:13:c3:07:b9:02:ab:5d:ec:de:de:ce:cc:0b:6d: 69:6d:fa:df:84:d3:f1:08:7e:20:38:89:bf:3f:d7:90:ce:19: d9:7a:97:5b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzMzQkJBRjExMC8GA1UEBRMoMENFQTExRDVGMEY2NTlFQjEwMEYyQjdGQjFFOEM4 MzZCQzI1Q0Y5ODAeFw0yNTEyMjMwNDAzMjRaFw0yNTEyMjUwNDAzMjRaMBgxFjAU BgNVBAMTDTY5NGExNDhkLTA0ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDdw53VCuH4YvePmyH5QIO2jSfFfFkDSREiZUtoqxqZVJgE+yy8CsbyeB9e iYjttsl9mDZc6Z8SKB1f7y+SR9tIhYhKEGCWtYp1K8k+iCve3fFJVBHwdopfSrhl 321yqE5QqcDPqycoCWzYPareQeq1e6gXaPcyu8h7w65sc5Mg51RAwub29TLpyZZx +eL0mdjst682TR+RT50vzdem0k86QKuc8Iw/sQzyVCicuErMeQA8qvIEQX3uYN6/ LACValjOFzz4mGEFwvdRzNF0anF6PF6Hke/ILoOParkpb2CrHsLQXU578+e0/qos 4gDDD+YF+LWm9rb6Y9kKfGaUeJsNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3uVR bcSL1YNrYv0EOWuzLfEkC9AwHwYDVR0jBBgwFoAUDOoR1fD2WesQDyt/sejINrwl z5gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkMzM0JCL0I2RjIxMEYyQzU5RDExRUU5QjhDQ0ZCNjc3NTQxMkU2L0RPb1Ix ZkQyV2VzUUR5dF9zZWpJTnJ3bHo1Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0RPb1IxZkQyV2VzUUR5dF9zZWpJTnJ3bHo1Zy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QzMzQkIvQjZGMjEwRjJDNTlEMTFFRTlCOENDRkI2Nzc1 NDEyRTYvRE9vUjFmRDJXZXNRRHl0X3NlaklOcndsejVnLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhjZprcXIulK/yKieTq+owhhjxH9hX 4L20xZNJPpaBZ6voi7z/NoKDHZe0PxR/MJTgaYeV1MWx09jLRWA5Eea/Kqv+eQ0Y vlrWMNokhNW/GE/luKIvg5IT+VxvncGxnUXMKDPBtp1eMpzySYuBcnxz5A0fF9fs ylUR1Z2PIZhSf8OY8xheGviwqp98UW1fEQ0ugzx4xfNRna0eHcjmOLSxWpnA2zBU 17zO62xk2XuAmXyHg1gBTmqwMZMOgPMVHqDCac5bsc/T9zVSStZAA1DTNEEnts5g pas9PUt+E8MHuQKrXeze3s7MC21pbfrfhNPxCH4gOIm/P9eQzhnZepdb -----END CERTIFICATE-----Generated at Tue Dec 23 13:00:10 2025 by rpki-client