This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft File: HN9pXb8nTSxpriwAwuTuF8mGqe0.mft (raw, json) Hash identifier: 3w9+ox3shhllRrc+QBgwLACOZ/Fy3ULqI0rA2Xc00Q0= Subject key identifier: EB:EB:28:E1:AE:15:A5:ED:A9:80:D1:43:53:08:14:F0:69:58:51:A9 Authority key identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED Certificate issuer: /CN=F3615533AF/serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED Certificate serial: 0240 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft Manifest number: 023D Signing time: Sun 21 Dec 2025 04:16:38 +0000 Manifest this update: Sun 21 Dec 2025 04:16:38 +0000 Manifest next update: Tue 23 Dec 2025 04:16:38 +0000 Files and hashes: 1: HN9pXb8nTSxpriwAwuTuF8mGqe0.crl (hash: xXVmswLoy5k+ZvKj7vFlyEMy7a50L1NLwU6Lgu0EGyc=) 2: 3F026DEC295911EF85667FFF7CDC24C2.roa (hash: UJYsWwlxlQmHxfZyQVF2D+4Hav01PXVdMWO+z82CBbg=) 3: 08F6F89E295911EFAEB4ADFB7CDC24C2.roa (hash: ISQZsHLWpfTcF1N56rrCqt5O7oqCjXKgBNZGt9pf+XI=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 23 Dec 2025 00:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3615533AF, serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED Validity Not Before: Dec 21 04:16:38 2025 GMT Not After : Dec 23 04:16:38 2025 GMT Subject: CN=694774a6-c761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:14:ca:72:3d:3b:c6:a9:e8:a0:5a:70:dc: 63:aa:ce:42:53:f8:52:80:91:6e:60:13:4a:4d:e2: 34:e4:cb:00:b6:64:16:63:be:ce:20:60:d1:dd:1a: dd:30:9a:b6:ca:43:d3:ea:c5:65:4f:ce:c9:df:c5: b0:53:ba:26:e7:54:2b:9c:03:ce:08:67:80:ad:77: d7:18:97:e8:00:a8:07:d9:62:72:35:a8:91:6e:4c: 64:7a:88:86:31:44:fc:d3:31:00:f3:ef:f9:ee:a7: 26:0a:dc:0a:8e:66:c6:a6:28:8e:c8:25:d2:49:c8: d5:1e:78:81:2a:09:51:2b:f4:ec:05:6a:03:11:84: ee:98:dc:36:99:9b:a2:4e:13:02:3a:15:58:5b:f6: d1:5d:28:19:1c:08:f1:9c:d9:6f:5b:4c:2b:ce:34: 5a:41:cf:0e:90:fe:4e:8a:c0:b9:e7:9e:1b:0c:4d: ad:10:e7:2e:ab:09:77:d0:85:ad:6b:2b:91:66:15: 8e:35:68:ba:db:ec:c7:5e:d0:cb:7c:32:df:b6:7a: 4a:47:bc:78:b1:75:15:10:3f:92:86:10:78:f3:f6: df:f3:1a:4a:fc:d8:f4:db:43:25:95:f3:ed:56:e7: 8a:ff:b5:7e:8c:89:a7:d4:a9:dc:ab:38:a3:2c:5f: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:28:E1:AE:15:A5:ED:A9:80:D1:43:53:08:14:F0:69:58:51:A9 X509v3 Authority Key Identifier: keyid:1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0a:93:26:47:26:5a:1a:8e:5e:8b:81:42:67:fc:b8:95:c1: 5a:80:d9:0d:1d:a5:f2:4e:ca:8a:70:1d:b4:2d:9a:d9:ce:b5: 0a:ad:90:f1:e3:8c:21:29:cd:0a:3c:b7:f6:d8:19:d5:20:dd: 76:e5:56:43:44:c3:2b:d1:42:9d:52:f9:16:ac:3f:fb:52:5c: de:22:1e:48:4e:a9:3e:04:ca:81:39:9c:11:57:b0:b6:dc:a6: b8:63:94:bb:5f:82:84:74:41:90:5c:df:bc:a8:31:64:d7:02: 5f:ff:be:26:5c:6c:12:dd:f8:07:8d:61:5f:73:33:1f:e7:7d: ac:ec:6f:29:a8:61:2e:ac:83:2f:92:fa:55:20:03:4e:b3:f1: a5:a5:d3:89:e7:54:22:ae:16:8c:91:c4:ee:2b:12:17:17:9e: fe:9d:c5:8a:ce:ff:c2:92:a6:89:1e:3f:63:06:4f:bb:df:b6: d0:de:29:d8:88:5c:6a:bb:ca:93:61:77:47:33:67:a8:e1:ef: 50:12:72:55:33:57:3d:0c:29:71:af:d3:84:f2:4e:f2:01:7a: 4b:8c:03:e0:36:72:3e:42:49:5f:b6:c8:6e:0d:18:5c:a0:af: d4:e4:1e:02:c8:96:74:d3:ad:f1:b2:61:89:51:31:84:be:16: 33:f4:6b:b7 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTU1MzNBRjExMC8GA1UEBRMoMUNERjY5NURCRjI3NEQyQzY5QUUyQzAwQzJFNEVF MTdDOTg2QTlFRDAeFw0yNTEyMjEwNDE2MzhaFw0yNTEyMjMwNDE2MzhaMBgxFjAU BgNVBAMTDTY5NDc3NGE2LWM3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCkKRTKcj07xqnooFpw3GOqzkJT+FKAkW5gE0pN4jTkywC2ZBZjvs4gYNHd Gt0wmrbKQ9PqxWVPzsnfxbBTuibnVCucA84IZ4Ctd9cYl+gAqAfZYnI1qJFuTGR6 iIYxRPzTMQDz7/nupyYK3AqOZsamKI7IJdJJyNUeeIEqCVEr9OwFagMRhO6Y3DaZ m6JOEwI6FVhb9tFdKBkcCPGc2W9bTCvONFpBzw6Q/k6KwLnnnhsMTa0Q5y6rCXfQ ha1rK5FmFY41aLrb7Mde0Mt8Mt+2ekpHvHixdRUQP5KGEHjz9t/zGkr82PTbQyWV 8+1W54r/tX6MiafUqdyrOKMsX7LzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6+so 4a4Vpe2pgNFDUwgU8GlYUakwHwYDVR0jBBgwFoAUHN9pXb8nTSxpriwAwuTuF8mG qe0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE1NTMzL0Q4MEFGRTVDMjk1NzExRUZBNzk3MTdGNjdDREMyNEMyL0hOOXBY YjhuVFN4cHJpd0F3dVR1RjhtR3FlMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hOOXBYYjhuVFN4cHJpd0F3dVR1RjhtR3FlMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTU1MzMvRDgwQUZFNUMyOTU3MTFFRkE3OTcxN0Y2N0NE QzI0QzIvSE45cFhiOG5UU3hwcml3QXd1VHVGOG1HcWUwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0CpMmRyZaGo5ei4FCZ/y4lcFagNkN HaXyTsqKcB20LZrZzrUKrZDx44whKc0KPLf22BnVIN125VZDRMMr0UKdUvkWrD/7 UlzeIh5ITqk+BMqBOZwRV7C23Ka4Y5S7X4KEdEGQXN+8qDFk1wJf/74mXGwS3fgH jWFfczMf532s7G8pqGEurIMvkvpVIANOs/GlpdOJ51QirhaMkcTuKxIXF57+ncWK zv/CkqaJHj9jBk+737bQ3inYiFxqu8qTYXdHM2eo4e9QEnJVM1c9DClxr9OE8k7y AXpLjAPgNnI+QklftshuDRhcoK/U5B4CyJZ0063xsmGJUTGEvhYz9Gu3 -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:49 2025 by rpki-client