This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json) Hash identifier: YnKVs1WzoY6jGf2r57xipuNn0U2SgGG4suUpLcU+zjk= Subject key identifier: 8B:04:D1:F3:1D:0F:2B:0B:89:DF:38:D9:6C:0A:6E:5B:06:FE:1E:70 Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A Certificate serial: 054A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft Manifest number: 0542 Signing time: Tue 09 Dec 2025 02:45:43 +0000 Manifest this update: Tue 09 Dec 2025 02:45:42 +0000 Manifest next update: Thu 11 Dec 2025 02:45:42 +0000 Files and hashes: 1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: m1l7CUww6OiFQc0QLg/kkq8qJnfgkbkc+wJmi5um7j8=) 2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=) 3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=) 4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=) 5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=) 6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 11 Dec 2025 02:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A Validity Not Before: Dec 9 02:45:42 2025 GMT Not After : Dec 11 02:45:42 2025 GMT Subject: CN=69378d57-43aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0b:12:0d:21:31:48:82:d9:83:fa:61:3c:de: 00:bb:69:d8:88:85:28:51:41:d2:f2:df:39:f8:80: f8:35:e3:05:7a:a8:35:6b:b8:f2:6b:b4:b1:2d:dd: 88:ad:cd:33:17:e4:cd:76:b6:58:59:b6:a9:70:54: 16:99:8e:a2:85:67:27:1f:c5:00:5d:3b:a3:dd:c9: 44:1f:5f:5b:4e:2b:d6:50:5e:b9:84:8d:e5:46:4b: fc:8d:a8:f8:75:21:28:46:98:8a:48:60:51:5a:e8: af:de:ab:02:8a:69:9d:b3:85:b9:1b:6b:cb:b0:46: 24:e8:41:17:02:ce:7a:56:2b:db:37:ac:94:8d:43: 76:b1:e3:62:75:e4:87:0f:13:d6:fc:fd:18:29:e4: c4:e6:ba:34:d6:94:38:b7:af:c8:1f:4f:d8:31:c8: bb:c0:5a:6e:c9:a3:51:2b:ad:13:1b:8f:ba:6c:cf: 58:c6:20:05:ea:50:d2:82:24:4f:cd:03:b3:fa:5c: 91:bd:62:06:a0:ff:71:91:a5:63:23:e2:b3:2c:1e: e8:b6:22:dd:6a:38:df:d0:c9:c1:95:40:16:d7:26: 3a:1d:40:7c:40:10:26:05:b7:92:21:9c:8b:43:8a: 8f:fb:bb:a8:d4:c6:da:19:55:ca:a1:0d:6f:27:54: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:D1:F3:1D:0F:2B:0B:89:DF:38:D9:6C:0A:6E:5B:06:FE:1E:70 X509v3 Authority Key Identifier: keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:98:e5:85:b3:7c:a2:b5:5b:6e:10:ea:b4:51:90:de:14:cf: 6c:50:cf:c1:ff:49:0e:b9:42:55:c8:79:ad:a6:24:13:7a:58: 2c:e0:4e:4f:4c:fb:d1:c1:f6:4e:cb:e3:1c:7f:50:dc:64:52: ec:3d:65:f9:8b:9a:f7:fb:4c:ca:ac:5c:83:5e:55:cf:7c:48: ed:e3:93:7c:18:3f:17:30:77:00:87:03:e3:d4:0b:64:88:67: 6c:b1:a5:86:c9:c3:ee:71:b4:85:a3:6c:53:e8:8b:4a:71:d9: 9b:b8:a1:89:8c:fe:35:65:cf:68:a6:a1:e1:6a:96:51:1b:f2: 44:f4:81:2e:e8:7c:c9:1b:cf:3a:f4:be:c4:e4:59:91:c2:c4: 34:ee:ef:c2:c8:8f:26:b9:87:60:61:f6:8e:eb:0e:85:9e:18: 23:32:4f:2c:06:43:3d:a4:04:7c:da:9a:90:c7:21:9c:29:93: d1:b3:13:9f:c3:95:3c:97:d3:60:67:fe:c1:7a:3e:8d:b0:e2: 40:9b:2e:df:0b:fd:f9:13:e1:21:99:f1:9a:b8:83:2f:19:4d: 5c:19:c7:2c:50:83:61:89:bf:05:a6:01:7f:49:76:d5:62:d9: 45:36:92:d6:03:f5:73:52:c6:ad:54:87:9d:bc:87:cc:db:31: 11:97:1d:54 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBUowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RTI5RURBRjExMC8GA1UEBRMoMkEzQ0M5RTU1MTlBNUE1QkIxM0QwODMxMENBOTM0 ODI0ODk2RkE1QTAeFw0yNTEyMDkwMjQ1NDJaFw0yNTEyMTEwMjQ1NDJaMBgxFjAU BgNVBAMTDTY5Mzc4ZDU3LTQzYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDUCxINITFIgtmD+mE83gC7adiIhShRQdLy3zn4gPg14wV6qDVruPJrtLEt 3YitzTMX5M12tlhZtqlwVBaZjqKFZycfxQBdO6PdyUQfX1tOK9ZQXrmEjeVGS/yN qPh1IShGmIpIYFFa6K/eqwKKaZ2zhbkba8uwRiToQRcCznpWK9s3rJSNQ3ax42J1 5IcPE9b8/Rgp5MTmujTWlDi3r8gfT9gxyLvAWm7Jo1ErrRMbj7psz1jGIAXqUNKC JE/NA7P6XJG9Ygag/3GRpWMj4rMsHui2It1qON/QycGVQBbXJjodQHxAECYFt5Ih nItDio/7u6jUxtoZVcqhDW8nVN91AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiwTR 8x0PKwuJ3zjZbApuWwb+HnAwHwYDVR0jBBgwFoAUKjzJ5VGaWluxPQgxDKk0gkiW +lowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkUyOUVELzFDNUI1RDAyREMwOTExRUM5Q0VCREU5QkYxMjIyNDY4L0tqeko1 VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0tqeko1VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTI5RUQvMUM1QjVEMDJEQzA5MTFFQzlDRUJERTlCRjEy MjI0NjgvS2p6SjVWR2FXbHV4UFFneERLazBna2lXLWxvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6mOWFs3yitVtuEOq0UZDeFM9sUM/B /0kOuUJVyHmtpiQTelgs4E5PTPvRwfZOy+Mcf1DcZFLsPWX5i5r3+0zKrFyDXlXP fEjt45N8GD8XMHcAhwPj1AtkiGdssaWGycPucbSFo2xT6ItKcdmbuKGJjP41Zc9o pqHhapZRG/JE9IEu6HzJG8869L7E5FmRwsQ07u/CyI8muYdgYfaO6w6FnhgjMk8s BkM9pAR82pqQxyGcKZPRsxOfw5U8l9NgZ/7Bej6NsOJAmy7fC/35E+EhmfGauIMv GU1cGccsUINhib8FpgF/SXbVYtlFNpLWA/VzUsatVIedvIfM2zERlx1U -----END CERTIFICATE-----Generated at Tue Dec 9 12:18:16 2025 by rpki-client