This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft File: UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json) Hash identifier: jYYTltYBzCwKO51rKXH7L8KJ63DLIEmkdNv1U6lLpss= Subject key identifier: D4:C2:DA:43:C7:BF:AC:6B:62:7D:2F:81:CF:6F:D1:8B:B3:1D:A7:C7 Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA Certificate issuer: /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA Certificate serial: 0454 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft Manifest number: 0450 Signing time: Wed 24 Dec 2025 03:18:59 +0000 Manifest this update: Wed 24 Dec 2025 03:18:58 +0000 Manifest next update: Fri 26 Dec 2025 03:18:58 +0000 Files and hashes: 1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: zkJpg3ocLDcEabeCblZW7QoVco4BytpvHuOK6xv8QCU=) 2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=) 3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 26 Dec 2025 03:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA Validity Not Before: Dec 24 03:18:58 2025 GMT Not After : Dec 26 03:18:58 2025 GMT Subject: CN=694b5ba2-8231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:2d:ed:62:04:d3:f7:67:eb:b3:01:0e:15: ee:36:43:d7:8d:90:45:27:37:8e:df:b7:15:2b:92: e4:6c:51:b9:e5:b5:86:15:33:dd:e5:eb:5c:d5:69: e9:b9:50:ac:f9:4d:21:92:d1:6d:4a:c5:fd:ec:59: 32:0f:6e:05:47:d0:e4:ed:1b:c8:bd:50:8b:00:ad: 39:88:35:45:82:ff:fb:be:de:05:5f:8c:a7:f3:2a: fb:86:a9:25:95:7a:f4:9d:ae:34:73:0d:ca:35:bd: 15:06:3c:69:fe:de:db:96:db:67:5e:c0:d6:53:cd: e7:16:d5:d4:f8:a7:13:bb:57:e7:98:bc:ec:2f:13: 3d:4f:9d:46:ed:44:10:a9:22:98:79:60:2e:8c:06: ee:67:70:2a:96:05:a1:69:ba:9e:a0:03:b6:e9:a3: a1:2a:46:61:0a:bb:d3:ef:2e:d1:f2:3f:0f:ed:1b: 51:99:2f:b8:35:f1:9b:f2:9b:0e:6b:7e:b1:ef:e1: 6d:6e:ef:e0:d2:7e:71:4e:9b:58:8f:17:ee:9d:cb: 59:fb:67:af:78:e4:68:e7:f5:78:93:7f:b8:bc:ce: b6:0a:4e:2c:06:ca:54:68:ef:c8:a8:b2:fd:30:68: 9a:4b:1d:d0:7d:32:3c:9d:4d:9e:cf:1d:29:7b:0f: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C2:DA:43:C7:BF:AC:6B:62:7D:2F:81:CF:6F:D1:8B:B3:1D:A7:C7 X509v3 Authority Key Identifier: keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b6:5a:a8:71:76:19:1d:1c:13:59:71:9d:c4:06:34:d8:d2: 1b:1d:62:28:03:c6:78:4a:25:52:22:7e:3d:41:95:3d:0e:d8: 5c:ce:35:89:cc:40:3f:12:7b:be:83:ae:b0:17:54:b1:e7:2b: c2:59:e9:0c:4a:c1:28:25:b8:e6:64:74:61:b9:d3:ce:97:2c: cc:ac:a8:9d:0d:9e:42:68:60:30:33:3f:42:08:33:58:87:1f: bd:14:aa:80:13:db:9e:fa:f7:21:da:21:29:37:9e:00:7f:5e: f5:77:88:a1:fd:47:79:d3:a9:14:1f:24:35:fb:c5:df:f9:ca: 95:f3:cb:4f:6e:b8:a2:51:34:30:37:f4:6f:6d:d9:01:ab:cf: 77:28:34:cf:2a:e6:db:68:ee:de:86:22:87:ad:82:49:f2:b3: af:77:3c:d0:ee:2f:16:6c:54:26:59:8c:4a:37:f6:d6:34:74: 82:1f:06:5b:3a:18:8c:b7:fd:94:ee:37:f6:e8:df:31:a2:47: 30:a3:be:9a:f7:25:c5:6b:b5:07:53:ed:62:ff:4e:bf:59:d1: a0:34:ea:7b:47:fb:05:56:5d:d8:51:83:b6:2a:08:d8:37:d3: 1c:df:b8:70:79:98:23:32:74:41:10:36:a1:9f:ba:a1:72:cc: 65:eb:f7:38 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTlBRkJBRjExMC8GA1UEBRMoNTAzRDE4MjhENEVGMENEQzYzQTU4QTU0RjVDMEM5 OTJEMjNCQzFBQTAeFw0yNTEyMjQwMzE4NThaFw0yNTEyMjYwMzE4NThaMBgxFjAU BgNVBAMTDTY5NGI1YmEyLTgyMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCzjC3tYgTT92frswEOFe42Q9eNkEUnN47ftxUrkuRsUbnltYYVM93l61zV aem5UKz5TSGS0W1Kxf3sWTIPbgVH0OTtG8i9UIsArTmINUWC//u+3gVfjKfzKvuG qSWVevSdrjRzDco1vRUGPGn+3tuW22dewNZTzecW1dT4pxO7V+eYvOwvEz1PnUbt RBCpIph5YC6MBu5ncCqWBaFpup6gA7bpo6EqRmEKu9PvLtHyPw/tG1GZL7g18Zvy mw5rfrHv4W1u7+DSfnFOm1iPF+6dy1n7Z6945Gjn9XiTf7i8zrYKTiwGylRo78io sv0waJpLHdB9MjydTZ7PHSl7D1ufAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1MLa Q8e/rGtifS+Bz2/Ri7Mdp8cwHwYDVR0jBBgwFoAUUD0YKNTvDNxjpYpU9cDJktI7 waowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE5QUZCL0NFNTA0QzBBOUJBNTExRUQ5ODQxQUVDN0YxMjIyNDY4L1VEMFlL TlR2RE54anBZcFU5Y0RKa3RJN3dhby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1VEMFlLTlR2RE54anBZcFU5Y0RKa3RJN3dhby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTlBRkIvQ0U1MDRDMEE5QkE1MTFFRDk4NDFBRUM3RjEy MjI0NjgvVUQwWUtOVHZETnhqcFlwVTljREprdEk3d2FvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBktlqocXYZHRwTWXGdxAY02NIbHWIo A8Z4SiVSIn49QZU9DthczjWJzEA/Enu+g66wF1Sx5yvCWekMSsEoJbjmZHRhudPO lyzMrKidDZ5CaGAwMz9CCDNYhx+9FKqAE9ue+vch2iEpN54Af171d4ih/Ud506kU HyQ1+8Xf+cqV88tPbriiUTQwN/RvbdkBq893KDTPKubbaO7ehiKHrYJJ8rOvdzzQ 7i8WbFQmWYxKN/bWNHSCHwZbOhiMt/2U7jf26N8xokcwo76a9yXFa7UHU+1i/06/ WdGgNOp7R/sFVl3YUYO2KgjYN9Mc37hweZgjMnRBEDahn7qhcsxl6/c4 -----END CERTIFICATE-----Generated at Thu Dec 25 00:28:18 2025 by rpki-client