This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.mft File: DSTP5f9YbDKZ3et5oO9VLsJ6qaE.mft (raw, json) Hash identifier: tSmDCoyjQnaA90bWy+JOjnRzdWrAVo+AftMO8qVqxpw= Subject key identifier: 5B:7F:D5:7B:F7:3B:0A:D2:A4:15:1B:2F:AD:5A:A4:E8:CA:43:D3:3B Authority key identifier: 0D:24:CF:E5:FF:58:6C:32:99:DD:EB:79:A0:EF:55:2E:C2:7A:A9:A1 Certificate issuer: /CN=F361B08DAF/serialNumber=0D24CFE5FF586C3299DDEB79A0EF552EC27AA9A1 Certificate serial: 099D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.mft Manifest number: 099B Signing time: Tue 23 Dec 2025 01:25:55 +0000 Manifest this update: Tue 23 Dec 2025 01:25:54 +0000 Manifest next update: Thu 25 Dec 2025 01:25:54 +0000 Files and hashes: 1: DSTP5f9YbDKZ3et5oO9VLsJ6qaE.crl (hash: n2TcAiezl0n5p6IXtTgCe6xb/Q/4+NPecPMpl4WcwPM=) 2: 32BBE680551611ED808EE9ECF1222468.roa (hash: PhozUMqCVbQsDmss0bRNvK3YbO5NMxc9X4gEYotbH70=) 3: EC598B4086EA11E9986F9C4FF8AEA228.roa (hash: mAPr21juD7J9FeHc+oUho3fc5+KZRjgQ97QY0cYheRg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.crl rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.mft rsync://rpki.afrinic.net/repository/afrinic/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 25 Dec 2025 00:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F361B08DAF, serialNumber=0D24CFE5FF586C3299DDEB79A0EF552EC27AA9A1 Validity Not Before: Dec 23 01:25:54 2025 GMT Not After : Dec 25 01:25:54 2025 GMT Subject: CN=6949efa3-18d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:39:d7:92:db:53:20:d6:19:da:9e:ca:c9: e3:be:2e:be:55:5b:15:bc:43:5a:7d:d9:3d:72:e7: fe:2f:f1:79:1f:91:ba:4a:65:d0:09:5a:43:ff:ca: f4:4f:ab:8f:f2:ed:fb:65:a6:ff:c2:98:dc:6c:8c: fe:75:ff:18:ff:b7:95:93:19:d2:cc:67:3d:2b:8d: cb:08:db:79:e6:58:d4:fb:bd:a8:fd:c6:16:0d:8f: ea:f9:60:ef:56:9b:32:65:4e:46:09:f4:1b:82:59: ac:56:29:ad:ca:cd:3c:69:73:84:57:5e:6a:21:6b: b8:32:04:95:fe:37:c5:9f:4d:4c:3e:bd:a4:1e:cf: 7f:e7:99:64:6d:2d:c6:28:d7:49:ac:ee:c0:c3:6a: 0d:b4:90:93:26:18:3d:ab:f7:9e:ff:35:e0:d4:b4: dd:01:05:86:29:5d:ae:cf:b0:bc:4e:3d:be:a1:57: 38:cb:60:06:2b:13:83:4a:3b:ad:9d:da:de:ee:8c: 88:d2:49:e2:19:cb:fa:cd:6c:2a:af:f3:0c:e1:21: 52:7a:c2:21:2e:61:3d:e9:0a:0f:88:b4:83:6c:f4: 19:92:2f:67:50:f3:90:a5:9c:87:89:9f:27:4f:b0: 41:e3:34:11:4a:a8:f1:de:3d:69:df:05:6f:3d:05: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7F:D5:7B:F7:3B:0A:D2:A4:15:1B:2F:AD:5A:A4:E8:CA:43:D3:3B X509v3 Authority Key Identifier: keyid:0D:24:CF:E5:FF:58:6C:32:99:DD:EB:79:A0:EF:55:2E:C2:7A:A9:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B08D/CBC7D20286E911E99E9CBA4EF8AEA228/DSTP5f9YbDKZ3et5oO9VLsJ6qaE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a5:8a:c0:9e:71:40:da:67:06:7e:7c:20:d8:2c:40:62:f8: 14:69:1b:d4:eb:19:d9:48:25:fc:59:bd:06:78:f6:51:bf:11: 5b:db:c7:54:33:ba:c6:d4:cd:b5:ce:f2:be:e2:ee:76:63:e7: 5e:ea:71:c8:b8:d3:3c:40:09:f7:d2:ae:0e:b0:8f:77:9f:9d: 99:57:f1:ea:78:1c:76:d5:7c:d3:7b:d2:5e:aa:a9:7d:cf:21: 2b:d3:5d:84:08:bc:ab:d7:c2:48:8a:67:0b:23:c5:fa:51:4b: 2b:7b:de:a8:e9:45:d0:dc:fa:8d:1d:48:3b:1d:79:06:34:b5: 07:e4:13:6a:74:fb:a5:49:2a:ff:48:70:e8:51:80:8f:0d:4f: ce:31:12:23:ff:4e:44:5a:87:e8:16:35:e5:77:b7:9a:5e:ba: 4c:a0:7c:c1:ca:c2:60:ea:7a:0e:08:48:1e:a5:c2:00:b4:5b: 9b:d6:d7:6e:03:e2:57:c0:0d:9b:3c:32:af:51:08:00:4b:ab: 46:c0:40:f3:ab:82:7a:5f:90:a6:8b:01:f8:a7:bb:b3:57:1a: db:60:9f:53:53:9b:9e:8d:96:81:07:74:65:4d:d2:9c:f2:fe: d6:97:a6:ff:93:c5:f4:6c:8d:ee:91:78:e6:cb:c9:33:81:19: 40:4c:a1:94 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MUIwOERBRjExMC8GA1UEBRMoMEQyNENGRTVGRjU4NkMzMjk5RERFQjc5QTBFRjU1 MkVDMjdBQTlBMTAeFw0yNTEyMjMwMTI1NTRaFw0yNTEyMjUwMTI1NTRaMBgxFjAU BgNVBAMTDTY5NDllZmEzLTE4ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC83jnXkttTINYZ2p7KyeO+Lr5VWxW8Q1p92T1y5/4v8XkfkbpKZdAJWkP/ yvRPq4/y7ftlpv/CmNxsjP51/xj/t5WTGdLMZz0rjcsI23nmWNT7vaj9xhYNj+r5 YO9WmzJlTkYJ9BuCWaxWKa3KzTxpc4RXXmoha7gyBJX+N8WfTUw+vaQez3/nmWRt LcYo10ms7sDDag20kJMmGD2r957/NeDUtN0BBYYpXa7PsLxOPb6hVzjLYAYrE4NK O62d2t7ujIjSSeIZy/rNbCqv8wzhIVJ6wiEuYT3pCg+ItINs9BmSL2dQ85ClnIeJ nydPsEHjNBFKqPHePWnfBW89BQlXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUW3/V e/c7CtKkFRsvrVqk6MpD0zswHwYDVR0jBBgwFoAUDSTP5f9YbDKZ3et5oO9VLsJ6 qaEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjFCMDhEL0NCQzdEMjAyODZFOTExRTk5RTlDQkE0RUY4QUVBMjI4L0RTVFA1 ZjlZYkRLWjNldDVvTzlWTHNKNnFhRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0RTVFA1ZjlZYkRLWjNldDVvTzlWTHNKNnFhRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MUIwOEQvQ0JDN0QyMDI4NkU5MTFFOTlFOUNCQTRFRjhB RUEyMjgvRFNUUDVmOVliREtaM2V0NW9POVZMc0o2cWFFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjpYrAnnFA2mcGfnwg2CxAYvgUaRvU 6xnZSCX8Wb0GePZRvxFb28dUM7rG1M21zvK+4u52Y+de6nHIuNM8QAn30q4OsI93 n52ZV/HqeBx21XzTe9Jeqql9zyEr012ECLyr18JIimcLI8X6UUsre96o6UXQ3PqN HUg7HXkGNLUH5BNqdPulSSr/SHDoUYCPDU/OMRIj/05EWofoFjXld7eaXrpMoHzB ysJg6noOCEgepcIAtFub1tduA+JXwA2bPDKvUQgAS6tGwEDzq4J6X5CmiwH4p7uz VxrbYJ9TU5uejZaBB3RlTdKc8v7Wl6b/k8X0bI3ukXjmy8kzgRlATKGU -----END CERTIFICATE-----Generated at Tue Dec 23 07:19:31 2025 by rpki-client