This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft File: HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json) Hash identifier: MlsqhKPQAWzTkeH0hmCjrnflxC20hNaR4uzklrXUU7c= Subject key identifier: 68:D9:67:09:87:51:B6:A4:CA:51:4B:62:D6:DA:EB:43:D1:51:40:F0 Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9 Certificate issuer: /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9 Certificate serial: 03D1 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft Manifest number: 03CD Signing time: Thu 04 Dec 2025 03:27:45 +0000 Manifest this update: Thu 04 Dec 2025 03:27:44 +0000 Manifest next update: Sat 06 Dec 2025 03:27:44 +0000 Files and hashes: 1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: z1zThPMWNxkmFIVaeSioUr+2gf1oU+5Fkn8CnR337X0=) 2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=) 3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=) 4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 06 Dec 2025 03:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9 Validity Not Before: Dec 4 03:27:44 2025 GMT Not After : Dec 6 03:27:44 2025 GMT Subject: CN=6930ffb0-1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3c:a6:88:33:7b:c0:e4:87:83:4a:38:5e:b9: d3:bd:b4:c6:29:7a:64:43:9a:1e:86:3c:a6:69:4b: 8a:1d:99:4a:80:ef:c3:74:66:73:e4:e3:89:9e:2a: 12:61:aa:57:96:30:70:45:c5:c3:ac:aa:01:b5:a6: ca:5b:a4:75:b9:89:06:78:0c:8a:91:a4:40:74:dd: 3f:4a:72:70:a9:7e:f5:61:4c:fa:dc:5e:0b:41:f9: f3:5e:89:74:25:e4:73:ab:0f:81:fe:34:72:e6:f0: c8:53:25:f1:84:e9:6d:5d:00:5d:7d:98:09:e3:20: 81:d4:36:e9:34:32:9b:42:35:f3:81:fb:ec:e1:d9: 08:1d:09:03:77:34:6e:a1:ef:e2:3b:76:a5:95:3e: 38:41:7e:0a:57:f9:28:5a:7a:9a:4b:a0:33:76:d5: 04:bd:48:3d:2f:4e:14:ae:17:3d:fc:0d:71:87:d7: dc:33:03:d1:13:40:58:1a:2a:27:91:13:e5:a4:45: e5:77:20:f2:ae:fa:71:c4:db:20:9a:96:f5:4d:0c: 9c:12:60:1c:9b:61:4b:b6:90:d3:98:5a:18:bb:44: 9d:5c:c0:c3:66:dc:3c:04:15:64:44:5a:45:ef:46: 26:58:dc:d8:7b:c1:b4:24:c1:5c:d1:94:18:b3:8c: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D9:67:09:87:51:B6:A4:CA:51:4B:62:D6:DA:EB:43:D1:51:40:F0 X509v3 Authority Key Identifier: keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bc:b0:f9:4d:56:db:2d:ba:f8:d2:07:ab:f5:cc:33:c5:38: 4c:50:7d:ed:40:e0:57:fa:4d:6d:79:36:51:f5:11:ad:65:06: ef:46:5d:bb:29:6f:8d:7d:04:d1:9f:13:44:22:17:ed:9e:56: de:41:aa:9d:1e:bd:c7:fd:fa:b3:5e:f8:e8:29:92:fc:07:0e: a5:54:30:a9:02:17:b5:63:dd:67:ce:0e:02:c2:42:e7:88:3f: a9:8e:4f:a4:f0:83:8e:93:78:ab:0d:b7:5e:4c:24:36:49:2f: 1c:c0:b9:cf:88:94:94:47:38:0e:fa:88:df:90:1b:b5:e8:aa: ec:9b:b2:81:0a:f2:e2:3e:d8:9e:f2:35:7b:d0:46:86:53:e9: 99:53:75:a1:e0:03:db:66:4f:be:31:9d:76:7d:e7:95:56:9e: 41:c6:45:df:9f:49:b2:72:73:d4:01:8c:ca:4e:5e:c1:0b:cf: 4a:a4:b3:44:fc:9e:66:a4:d1:b1:89:66:e3:8b:34:49:19:1c: 0d:4e:ec:58:58:07:f1:59:22:d9:19:0b:ca:5c:05:16:06:78: 35:a9:50:e1:9d:25:df:88:00:11:fc:9e:ee:d1:ba:27:5a:48: 27:70:00:b6:71:f0:4c:eb:a5:0e:e7:46:e9:87:4d:fa:6b:59: de:1f:fd:11 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjUwNURBRjExMC8GA1UEBRMoMUREQjhFOTMxRjU3QTkyODE3NjQ5ODMwQzRFRDhB REQ3NEVGNDlGOTAeFw0yNTEyMDQwMzI3NDRaFw0yNTEyMDYwMzI3NDRaMBgxFjAU BgNVBAMTDTY5MzBmZmIwLTE0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDyPKaIM3vA5IeDSjheudO9tMYpemRDmh6GPKZpS4odmUqA78N0ZnPk44me KhJhqleWMHBFxcOsqgG1pspbpHW5iQZ4DIqRpEB03T9KcnCpfvVhTPrcXgtB+fNe iXQl5HOrD4H+NHLm8MhTJfGE6W1dAF19mAnjIIHUNuk0MptCNfOB++zh2QgdCQN3 NG6h7+I7dqWVPjhBfgpX+ShaeppLoDN21QS9SD0vThSuFz38DXGH19wzA9ETQFga KieRE+WkReV3IPKu+nHE2yCalvVNDJwSYBybYUu2kNOYWhi7RJ1cwMNm3DwEFWRE WkXvRiZY3Nh7wbQkwVzRlBizjBPvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaNln CYdRtqTKUUti1trrQ9FRQPAwHwYDVR0jBBgwFoAUHduOkx9XqSgXZJgwxO2K3XTv SfkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkY1MDVELzFGQjFCNEIwRUU1RjExRURBODIxOUM1QTRBRDlFNkZDL0hkdU9r eDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hkdU9reDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RjUwNUQvMUZCMUI0QjBFRTVGMTFFREE4MjE5QzVBNEFE OUU2RkMvSGR1T2t4OVhxU2dYWkpnd3hPMkszWFR2U2ZrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2vLD5TVbbLbr40ger9cwzxThMUH3t QOBX+k1teTZR9RGtZQbvRl27KW+NfQTRnxNEIhftnlbeQaqdHr3H/fqzXvjoKZL8 Bw6lVDCpAhe1Y91nzg4CwkLniD+pjk+k8IOOk3irDbdeTCQ2SS8cwLnPiJSURzgO +ojfkBu16Krsm7KBCvLiPtie8jV70EaGU+mZU3Wh4APbZk++MZ12feeVVp5BxkXf n0mycnPUAYzKTl7BC89KpLNE/J5mpNGxiWbjizRJGRwNTuxYWAfxWSLZGQvKXAUW Bng1qVDhnSXfiAAR/J7u0bonWkgncAC2cfBM66UO50bph036a1neH/0R -----END CERTIFICATE-----Generated at Fri Dec 5 02:27:20 2025 by rpki-client