This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft File: QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json) Hash identifier: PVnjqiB3ww+IFyGNSpw0E/hSH5mdUNBIv55TEElWp8w= Subject key identifier: 06:BB:78:5D:16:1B:25:30:40:F9:85:3F:D7:4C:4C:39:92:14:69:DE Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9 Certificate issuer: /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9 Certificate serial: 09AC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft Manifest number: 09A9 Signing time: Tue 09 Dec 2025 01:20:09 +0000 Manifest this update: Tue 09 Dec 2025 01:20:08 +0000 Manifest next update: Thu 11 Dec 2025 01:20:08 +0000 Files and hashes: 1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: KkCma2h3ujX8KSuRI6QYDBkkfFzrFfHdqlMKn2rmB/0=) 2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=) 3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 01:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2476 (0x9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DBAE4AF, serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9 Validity Not Before: Dec 9 01:20:08 2025 GMT Not After : Dec 11 01:20:08 2025 GMT Subject: CN=69377948-03d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:6d:02:c0:61:c7:3b:2d:cc:e4:35:11:e8: eb:0f:ac:9c:2d:ca:ec:2d:f6:87:e8:d4:19:e6:a2: 10:cd:97:24:e9:7a:de:b2:1d:f9:4e:43:31:32:43: fe:57:08:bb:ab:40:15:c4:34:f1:39:d0:79:3d:76: 4a:3b:7a:c4:00:da:e7:f8:cf:6d:25:8d:a8:a3:34: 91:78:08:f9:28:3c:50:9a:f2:56:c6:b3:bf:68:20: e5:49:13:a7:2a:9c:24:57:e2:79:36:8f:27:74:a6: af:8d:b4:4c:b8:d3:f9:62:ce:2a:71:58:09:f7:fd: fe:00:ae:cf:9f:b5:1c:85:94:4c:23:de:28:48:c5: 15:9d:e2:19:84:89:59:71:27:2d:9b:02:f3:05:98: 6f:f5:f5:23:31:9a:ea:95:03:30:71:45:b2:a4:2d: fa:cd:ee:32:ee:c2:d4:32:4e:16:9a:98:1f:ea:8b: 6f:02:f5:ba:96:01:49:6b:89:5f:fa:ec:be:c7:2f: 1f:aa:15:da:9c:12:b4:a2:bd:1e:ca:d6:aa:7a:cb: db:15:b3:c7:ec:e6:5a:75:94:5d:21:e9:ba:9c:30: 80:21:24:9b:bf:f4:6b:51:f4:4d:a7:5f:5e:59:a4: 7d:ef:85:43:71:cc:04:4f:67:c9:f3:22:7a:f4:71: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BB:78:5D:16:1B:25:30:40:F9:85:3F:D7:4C:4C:39:92:14:69:DE X509v3 Authority Key Identifier: keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9e:f0:36:85:a7:bc:f9:15:6b:ee:0a:9f:9f:80:50:5d:8d: 79:ce:66:3b:cf:5b:85:ac:dd:59:9e:b8:cc:aa:a1:7f:40:c7: 97:b9:af:d7:02:1b:1d:35:ab:78:77:2f:8d:7f:29:a3:b0:13: d2:ea:7d:9e:18:96:0a:2c:d8:15:eb:60:20:46:69:b7:6b:7d: 97:53:37:ad:46:37:53:88:41:78:eb:32:01:8e:74:2e:b4:40: 38:77:47:18:a8:78:cf:58:44:52:60:1d:68:74:74:64:ca:db: 1b:54:6f:b0:d6:48:2b:5e:57:62:60:80:f1:23:d5:fa:41:c7: 5c:07:9f:98:3d:5d:8a:e8:29:4a:8f:7e:a5:a5:1b:3f:31:1c: fa:aa:f6:4d:e8:c8:7f:ba:ae:8f:a7:d7:db:82:14:c3:36:43: 35:a0:6b:64:a8:d6:aa:82:de:07:f7:b7:c7:c3:43:c6:da:63: a4:fd:8d:0c:72:85:58:58:05:85:c5:44:bc:6e:18:5c:c4:62: 97:d1:56:32:f1:6a:30:a6:a8:ab:ed:6f:8f:9c:b5:cc:61:c5: 12:ad:a9:0c:da:07:5f:50:7c:90:4e:40:f8:84:ed:8b:53:fe: 0f:24:60:89:05:e3:49:35:f9:a5:42:06:6c:17:38:69:8e:27: ee:04:f1:76 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCawwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REJBRTRBRjExMC8GA1UEBRMoNDBFRTA1RkQwRjMxQjVGQjBFQ0M1NjI1MjA4QUI1 MDg1OUY5RTlGOTAeFw0yNTEyMDkwMTIwMDhaFw0yNTEyMTEwMTIwMDhaMBgxFjAU BgNVBAMTDTY5Mzc3OTQ4LTAzZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDiH20CwGHHOy3M5DUR6OsPrJwtyuwt9ofo1BnmohDNlyTpet6yHflOQzEy Q/5XCLurQBXENPE50Hk9dko7esQA2uf4z20ljaijNJF4CPkoPFCa8lbGs79oIOVJ E6cqnCRX4nk2jyd0pq+NtEy40/lizipxWAn3/f4Ars+ftRyFlEwj3ihIxRWd4hmE iVlxJy2bAvMFmG/19SMxmuqVAzBxRbKkLfrN7jLuwtQyThaamB/qi28C9bqWAUlr iV/67L7HLx+qFdqcErSivR7K1qp6y9sVs8fs5lp1lF0h6bqcMIAhJJu/9GtR9E2n X15ZpH3vhUNxzARPZ8nzInr0cV8nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBrt4 XRYbJTBA+YU/10xMOZIUad4wHwYDVR0jBBgwFoAUQO4F/Q8xtfsOzFYlIIq1CFn5 6fkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRCQUU0Lzg1OEYyOTgyNzMyMjExRTlBRUJDMzE4NEY4QUVBMjI4L1FPNEZf UTh4dGZzT3pGWWxJSXExQ0ZuNTZmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1FPNEZfUTh4dGZzT3pGWWxJSXExQ0ZuNTZmay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REJBRTQvODU4RjI5ODI3MzIyMTFFOUFFQkMzMTg0RjhB RUEyMjgvUU80Rl9ROHh0ZnNPekZZbElJcTFDRm41NmZrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJnvA2hae8+RVr7gqfn4BQXY15zmY7 z1uFrN1ZnrjMqqF/QMeXua/XAhsdNat4dy+NfymjsBPS6n2eGJYKLNgV62AgRmm3 a32XUzetRjdTiEF46zIBjnQutEA4d0cYqHjPWERSYB1odHRkytsbVG+w1kgrXldi YIDxI9X6QcdcB5+YPV2K6ClKj36lpRs/MRz6qvZN6Mh/uq6Pp9fbghTDNkM1oGtk qNaqgt4H97fHw0PG2mOk/Y0McoVYWAWFxUS8bhhcxGKX0VYy8Wowpqir7W+PnLXM YcUSrakM2gdfUHyQTkD4hO2LU/4PJGCJBeNJNfmlQgZsFzhpjifuBPF2 -----END CERTIFICATE-----Generated at Tue Dec 9 12:31:58 2025 by rpki-client