This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft File: JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json) Hash identifier: zhu+Q6QhZem0EP3ads0WeB5ETfLqSdWCqyrc5uyzpE0= Subject key identifier: 42:08:76:B3:BB:CC:44:3E:25:B6:99:1B:97:D7:DF:F5:B5:E0:19:4B Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D Certificate issuer: /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D Certificate serial: 035E Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft Manifest number: 035C Signing time: Wed 31 Dec 2025 03:47:22 +0000 Manifest this update: Wed 31 Dec 2025 03:47:21 +0000 Manifest next update: Fri 02 Jan 2026 03:47:21 +0000 Files and hashes: 1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: tIxMvIQ+67lX6iQo27PUK1GrFemlcaNbeSkZ3V2VXog=) 2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=) 3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 02 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D Validity Not Before: Dec 31 03:47:21 2025 GMT Not After : Jan 2 03:47:21 2026 GMT Subject: CN=69549cca-7f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:87:81:c8:6f:64:87:b1:cc:72:60:fd:8b: a6:30:08:63:50:d7:63:de:ca:de:a1:ee:34:15:45: 5f:f3:71:42:ab:13:23:6c:76:bc:00:81:7e:bb:42: df:0c:7a:f0:65:a1:d7:61:28:f3:ab:cc:62:30:b5: a2:72:80:c5:cf:ec:1a:c6:e5:d9:f4:f8:67:c1:8f: 28:75:f4:34:0a:86:c3:20:6f:b8:aa:e2:4a:eb:0c: 37:f7:d6:f0:e4:ec:51:98:df:5a:83:62:ef:94:cf: 4f:54:74:64:92:b2:41:1b:32:db:b2:38:5c:50:e5: d0:94:65:da:31:0d:38:5f:79:9f:a7:cc:b0:e7:ca: d2:b7:0b:0a:64:d4:c1:5c:6c:d4:26:16:64:db:9c: 8a:41:f2:f1:9c:da:87:be:24:2e:5b:ec:18:74:78: 4a:8c:cb:b3:64:aa:e2:43:b7:87:47:83:79:d1:00: 74:55:0e:0a:49:28:60:bc:ac:b0:11:c2:ca:a0:58: 9d:71:c4:d9:cd:4b:f4:93:bb:ca:73:43:69:a2:98: 11:b2:d3:e9:ec:44:02:44:5b:d9:98:4a:5c:72:8c: e4:62:c4:28:7d:63:63:53:ce:16:71:6c:df:1c:4f: f9:f2:bd:46:93:12:c8:60:74:86:cd:75:de:d6:60: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:08:76:B3:BB:CC:44:3E:25:B6:99:1B:97:D7:DF:F5:B5:E0:19:4B X509v3 Authority Key Identifier: keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1d:06:f8:a1:d0:cc:da:fd:c3:2f:31:de:ce:93:49:91:21: 13:62:dd:e0:4b:4d:ee:44:ca:d0:9a:d1:36:0e:50:82:df:99: 4c:f6:84:87:8e:ff:56:31:cf:a9:4a:09:91:54:26:ca:15:fe: dd:12:91:d7:cf:28:fe:88:ff:a7:4a:f4:97:44:7d:99:5c:c0: 96:00:1f:ac:b1:0f:34:5d:56:a4:a3:15:63:d7:1d:7a:11:ed: c9:ef:d6:73:ec:2c:33:bd:e3:39:ae:d3:15:c1:1f:d1:49:ca: e5:db:5b:a6:06:36:4f:8e:b2:58:64:fc:3e:3c:f7:cb:ed:57: b1:05:ca:2d:61:95:d8:a2:4e:7c:2c:1f:ef:b9:c4:3c:35:6b: 9e:a5:41:ab:79:6f:08:aa:a6:ca:53:fd:0f:1f:41:1c:5a:c3: 30:13:3b:55:03:10:e7:5f:dc:34:7b:88:b5:cd:d9:d1:4e:08: a9:3e:08:3b:07:58:33:84:cc:86:e3:e1:a9:01:bc:bc:4a:a2: 53:10:48:bd:51:65:7e:1a:51:44:88:b1:3c:60:d3:1e:c2:38: e9:ee:5f:66:16:fa:0c:38:73:52:c0:a4:e8:48:0e:b2:ec:34: 96:be:c8:9d:01:9d:49:60:8b:33:80:7f:8e:fa:2a:91:a0:b1: 3c:37:df:f8 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA14wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjhDRjFBRjExMC8GA1UEBRMoMjQ5N0NCMDFDQkUxMUY3RTEyRTJBREQ4RDRGRjIz MjBCOTY5MDM2RDAeFw0yNTEyMzEwMzQ3MjFaFw0yNjAxMDIwMzQ3MjFaMBgxFjAU BgNVBAMTDTY5NTQ5Y2NhLTdmODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC9aoeByG9kh7HMcmD9i6YwCGNQ12Peyt6h7jQVRV/zcUKrEyNsdrwAgX67 Qt8MevBloddhKPOrzGIwtaJygMXP7BrG5dn0+GfBjyh19DQKhsMgb7iq4krrDDf3 1vDk7FGY31qDYu+Uz09UdGSSskEbMtuyOFxQ5dCUZdoxDThfeZ+nzLDnytK3Cwpk 1MFcbNQmFmTbnIpB8vGc2oe+JC5b7Bh0eEqMy7NkquJDt4dHg3nRAHRVDgpJKGC8 rLARwsqgWJ1xxNnNS/STu8pzQ2mimBGy0+nsRAJEW9mYSlxyjORixCh9Y2NTzhZx bN8cT/nyvUaTEshgdIbNdd7WYJSjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQgh2 s7vMRD4ltpkbl9ff9bXgGUswHwYDVR0jBBgwFoAUJJfLAcvhH34S4q3Y1P8jILlp A20wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI4Q0YxLzlEMTlENTY2NTYwRDExRUVBRjNEQkMyMTRBRDlFNkZDL0pKZkxB Y3ZoSDM0UzRxM1kxUDhqSUxscEEyMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0pKZkxBY3ZoSDM0UzRxM1kxUDhqSUxscEEyMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjhDRjEvOUQxOUQ1NjY1NjBEMTFFRUFGM0RCQzIxNEFE OUU2RkMvSkpmTEFjdmhIMzRTNHEzWTFQOGpJTGxwQTIwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxHQb4odDM2v3DLzHezpNJkSETYt3g S03uRMrQmtE2DlCC35lM9oSHjv9WMc+pSgmRVCbKFf7dEpHXzyj+iP+nSvSXRH2Z XMCWAB+ssQ80XVakoxVj1x16Ee3J79Zz7CwzveM5rtMVwR/RScrl21umBjZPjrJY ZPw+PPfL7VexBcotYZXYok58LB/vucQ8NWuepUGreW8IqqbKU/0PH0EcWsMwEztV AxDnX9w0e4i1zdnRTgipPgg7B1gzhMyG4+GpAby8SqJTEEi9UWV+GlFEiLE8YNMe wjjp7l9mFvoMOHNSwKToSA6y7DSWvsidAZ1JYIszgH+O+iqRoLE8N9/4 -----END CERTIFICATE-----Generated at Wed Dec 31 21:47:46 2025 by rpki-client