This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft File: zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json) Hash identifier: 0AE/yFq1pkQ6cYiTOkRgRAEMLhwrFpB7Q1PzD8eR3EY= Subject key identifier: 4A:5E:BE:9A:90:3E:58:D3:F1:21:D7:ED:9A:1C:69:81:10:77:1A:CD Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0 Certificate issuer: /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0 Certificate serial: 07F6 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft Manifest number: 07F3 Signing time: Thu 25 Dec 2025 01:53:31 +0000 Manifest this update: Thu 25 Dec 2025 01:53:30 +0000 Manifest next update: Sat 27 Dec 2025 01:53:30 +0000 Files and hashes: 1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: jKcAzb9KDERqQurUDiMMAwgeRc0NEhZCK8tIpWsAjcA=) 2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=) 3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 27 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2038 (0x7f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0 Validity Not Before: Dec 25 01:53:30 2025 GMT Not After : Dec 27 01:53:30 2025 GMT Subject: CN=694c991b-8087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:be:49:84:f6:42:aa:8d:73:a7:ca:66:69: 85:4a:39:2b:27:e0:00:f0:81:03:b1:df:40:5e:23: ae:ce:f5:22:27:70:93:36:8f:f2:51:21:4d:c3:e2: 89:b9:f3:bd:65:42:0a:24:08:02:18:77:61:b0:bc: cf:04:fb:b9:76:c4:aa:81:b9:ef:85:4f:83:61:20: 07:48:77:1d:0c:ec:f8:64:d1:6f:df:e4:74:7a:60: 0e:dc:0f:73:89:a8:14:75:f3:8a:5b:ac:b7:3d:96: 00:41:fa:6c:89:03:e6:18:bc:f3:e3:9f:33:13:57: 09:33:45:09:35:36:9e:0d:d3:10:1e:64:62:d9:3c: 3b:f4:d2:47:a1:5e:df:be:e7:47:ff:78:b7:61:d1: e0:15:a8:1c:60:c0:bc:cf:89:21:38:98:88:d0:1a: af:3a:c3:eb:76:47:1c:d4:e4:fe:f4:57:fa:59:4d: fe:f0:99:4d:11:aa:19:ac:42:24:53:dd:1f:0a:7b: 11:7f:ca:88:f6:eb:65:1e:d4:f1:89:a5:4c:c8:59: 6d:7e:fb:2b:68:dc:c5:c4:aa:fe:12:ca:a9:24:d8: 70:d0:23:c7:90:f0:df:bf:93:38:36:e3:d7:70:61: f3:3c:f4:cc:4a:f7:d7:2e:52:09:d9:60:cf:cf:38: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5E:BE:9A:90:3E:58:D3:F1:21:D7:ED:9A:1C:69:81:10:77:1A:CD X509v3 Authority Key Identifier: keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:79:ad:c0:2e:a5:7d:d1:ba:17:d5:23:bc:89:e2:bc:b9:3f: d2:7b:1c:8a:ca:f3:4b:e5:61:0e:80:30:f2:d5:87:25:e9:da: e3:dd:f9:cb:84:60:78:50:01:75:ac:e3:a3:1e:42:c6:0e:e3: 86:a9:4d:67:af:26:2a:77:59:1f:d4:8c:74:7e:26:41:88:06: 35:cc:c0:a1:78:8e:a5:f8:85:c4:88:74:a6:7c:68:94:49:81: c9:7a:e6:53:de:e1:ff:6f:d6:c9:40:bb:40:97:f4:89:4f:d3: 42:89:0d:bc:56:b9:6d:2a:57:ad:1c:dc:49:3e:e4:73:08:4a: d3:35:ab:1c:d9:bb:90:12:db:95:68:b3:93:9f:5c:8c:d3:be: 24:e6:80:ea:d9:a3:c3:f5:e9:34:56:75:5c:39:17:f0:99:fd: 27:1b:b4:e1:a2:3d:a5:aa:a3:ac:fc:7d:8a:f1:07:76:c1:21: eb:fd:9a:7c:37:6d:2d:3f:4d:fc:d5:7c:06:b5:ee:e9:df:d2: a6:40:f8:f0:df:06:17:16:6d:25:28:25:c1:8d:60:1e:3d:28: fb:6f:9a:af:05:ca:36:67:58:10:e5:1b:17:8a:b0:84:90:67: d6:f5:a3:11:af:45:9d:92:40:dd:6a:57:5c:08:fd:ee:79:6f: b6:89:1c:9f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 M0ZDQzhBRjExMC8GA1UEBRMoQ0M0NEI4REY2NTUyNjg2ODU2M0IxN0U5QjY1MUY5 MzVENTYwMENEMDAeFw0yNTEyMjUwMTUzMzBaFw0yNTEyMjcwMTUzMzBaMBgxFjAU BgNVBAMTDTY5NGM5OTFiLTgwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC5lL5JhPZCqo1zp8pmaYVKOSsn4ADwgQOx30BeI67O9SIncJM2j/JRIU3D 4om5871lQgokCAIYd2GwvM8E+7l2xKqBue+FT4NhIAdIdx0M7Phk0W/f5HR6YA7c D3OJqBR184pbrLc9lgBB+myJA+YYvPPjnzMTVwkzRQk1Np4N0xAeZGLZPDv00keh Xt++50f/eLdh0eAVqBxgwLzPiSE4mIjQGq86w+t2RxzU5P70V/pZTf7wmU0Rqhms QiRT3R8KexF/yoj262Ue1PGJpUzIWW1++yto3MXEqv4Syqkk2HDQI8eQ8N+/kzg2 49dwYfM89MxK99cuUgnZYM/POBv1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSl6+ mpA+WNPxIdftmhxpgRB3Gs0wHwYDVR0jBBgwFoAUzES432VSaGhWOxfptlH5NdVg DNAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjNGQ0M4L0MyRTEyQThBQ0NGMjExRUE4QjdDNDEzM0Y4QUVBMjI4L3pFUzQz MlZTYUdoV094ZnB0bEg1TmRWZ0ROQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3pFUzQzMlZTYUdoV094ZnB0bEg1TmRWZ0ROQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2M0ZDQzgvQzJFMTJBOEFDQ0YyMTFFQThCN0M0MTMzRjhB RUEyMjgvekVTNDMyVlNhR2hXT3hmcHRsSDVOZFZnRE5BLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNea3ALqV90boX1SO8ieK8uT/SexyK yvNL5WEOgDDy1Ycl6drj3fnLhGB4UAF1rOOjHkLGDuOGqU1nryYqd1kf1Ix0fiZB iAY1zMCheI6l+IXEiHSmfGiUSYHJeuZT3uH/b9bJQLtAl/SJT9NCiQ28VrltKlet HNxJPuRzCErTNasc2buQEtuVaLOTn1yM074k5oDq2aPD9ek0VnVcORfwmf0nG7Th oj2lqqOs/H2K8Qd2wSHr/Zp8N20tP0381XwGte7p39KmQPjw3wYXFm0lKCXBjWAe PSj7b5qvBco2Z1gQ5RsXirCEkGfW9aMRr0WdkkDdaldcCP3ueW+2iRyf -----END CERTIFICATE-----Generated at Thu Dec 25 21:26:02 2025 by rpki-client