This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft File: gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft (raw, json) Hash identifier: Euqq4JwTRfM/2JeipaOxqK6dVFBAgjWZ9huaCLg5X00= Subject key identifier: DF:6A:9B:6A:8A:B6:32:7C:D7:B8:58:C5:B9:D5:1C:4E:C9:B6:7B:FB Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B Certificate issuer: /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B Certificate serial: 0496 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft Manifest number: 0492 Signing time: Wed 31 Dec 2025 03:09:15 +0000 Manifest this update: Wed 31 Dec 2025 03:09:14 +0000 Manifest next update: Fri 02 Jan 2026 03:09:14 +0000 Files and hashes: 1: gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl (hash: Le19XacRoVK8loL9G+o3ktACpnxZj7rA6YHhbF8Fru0=) 2: 663621FC6FE611ED9793E2A2F1222468.roa (hash: pOiXMCETpHqkEhDUTKpvHVFnDi/EWrRzid1oTDEvNYI=) 3: BA1164B26FE611ED9E57C5A3F1222468.roa (hash: cj0paKj6uAYyRz3Vt8WdaCe+4/4R7mr0wnlwDucUaow=) 4: 309F4CEE6FE611ED945B4DA2F1222468.roa (hash: qv6IGwKqJEtixNqBWOezaW48ALRNnYqv01ysaSDGwCU=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 02 Jan 2026 03:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B Validity Not Before: Dec 31 03:09:14 2025 GMT Not After : Jan 2 03:09:14 2026 GMT Subject: CN=695493db-3672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:72:1e:5f:2a:db:49:8e:1c:07:61:63:35: 15:98:82:a7:a7:86:b1:5d:03:fe:a3:1b:53:55:f2: ff:f6:3e:28:00:9b:ce:d7:fc:99:1e:20:0c:69:ee: 72:6a:d2:9d:f8:e3:68:ca:d3:9c:a5:2d:16:fa:57: 3d:b7:d2:56:f8:c7:ad:0f:cc:a8:28:3b:11:6e:17: 72:29:f7:d3:e8:2c:a0:c3:10:9f:e4:8f:57:60:50: aa:bf:43:56:1a:ee:b9:4a:1f:64:8b:5d:19:92:eb: 07:41:de:1a:23:6c:5d:be:63:c5:73:2b:b6:bb:31: 57:3c:ea:09:74:a5:6f:ed:1f:6c:90:ae:73:04:ad: fa:de:a8:2c:e8:6a:51:9c:f6:25:0a:e7:5b:53:f6: a2:93:6c:c1:83:cd:b5:1c:9e:8b:45:12:29:8d:34: e2:8d:2a:71:47:26:50:2f:6a:fe:00:e8:c5:4c:23: fd:11:dc:81:15:fe:7c:0c:2e:40:23:58:54:87:96: 77:ef:19:c7:4a:19:55:26:23:c9:ba:2d:67:d7:a2: 8a:7b:00:46:bc:9e:2a:5d:7c:eb:21:10:e1:58:2f: a6:88:da:ab:75:9b:01:f3:7d:0a:f0:b3:43:6e:a5: 9a:4c:ea:43:b9:1d:2a:67:c6:5e:33:b4:44:d1:24: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:9B:6A:8A:B6:32:7C:D7:B8:58:C5:B9:D5:1C:4E:C9:B6:7B:FB X509v3 Authority Key Identifier: keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:98:e8:1d:5d:15:9d:b3:a9:42:c8:8d:2c:59:a5:dd:d9:64: f4:e8:07:54:43:e2:cc:f9:7a:ba:c0:e9:b5:f4:78:ae:ff:ef: 34:ea:b8:59:fc:38:93:a1:32:d0:eb:d1:bd:60:3f:05:40:11: 36:c4:4f:45:60:a2:eb:ce:9e:2e:a8:58:5b:f5:8b:b5:ca:8c: 2b:ce:87:6a:ae:55:61:a3:12:f4:82:b8:c1:46:6a:32:74:57: c7:6a:21:2e:81:85:8f:08:ad:82:e2:5e:6d:17:f7:41:6d:bc: c2:96:87:12:ac:8e:cf:c6:f5:e3:5f:88:d1:68:f9:42:71:ab: 0b:36:82:a8:d0:87:3c:94:97:53:b9:fa:4c:8a:c6:37:62:31: e3:fc:f6:7d:1c:7e:75:04:ca:7c:87:58:f3:e1:a4:b1:30:1d: 16:5d:06:f9:5a:9e:b6:82:43:90:3a:06:97:70:83:58:70:27: 91:74:eb:67:09:77:cf:be:96:8b:11:93:06:27:c5:67:d5:36: aa:f6:18:d0:d7:a2:00:97:d4:19:9f:aa:f6:67:db:2d:12:76: 3d:bb:2f:94:50:15:7f:a7:55:5a:b8:f9:75:d0:f5:15:97:df: 93:30:13:ef:8d:08:08:83:1c:a9:81:f8:73:f4:66:09:5f:84: dc:b8:ed:69 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDA2QjhBRjExMC8GA1UEBRMoODA3MzgyMzYyNEFFQzFGNkFDMUFCMDY5RDk3OEU2 NUQ5RjcyMDU2QjAeFw0yNTEyMzEwMzA5MTRaFw0yNjAxMDIwMzA5MTRaMBgxFjAU BgNVBAMTDTY5NTQ5M2RiLTM2NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCj33IeXyrbSY4cB2FjNRWYgqenhrFdA/6jG1NV8v/2PigAm87X/JkeIAxp 7nJq0p3442jK05ylLRb6Vz230lb4x60PzKgoOxFuF3Ip99PoLKDDEJ/kj1dgUKq/ Q1Ya7rlKH2SLXRmS6wdB3hojbF2+Y8VzK7a7MVc86gl0pW/tH2yQrnMErfreqCzo alGc9iUK51tT9qKTbMGDzbUcnotFEimNNOKNKnFHJlAvav4A6MVMI/0R3IEV/nwM LkAjWFSHlnfvGcdKGVUmI8m6LWfXoop7AEa8nipdfOshEOFYL6aI2qt1mwHzfQrw s0NupZpM6kO5HSpnxl4ztETRJBFvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU32qb aoq2MnzXuFjFudUcTsm2e/swHwYDVR0jBBgwFoAUgHOCNiSuwfasGrBp2XjmXZ9y BWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQwNkI4LzE2NjkxQkIyNkZFNTExRUQ4NTRCNTk5RkYxMjIyNDY4L2dIT0NO aVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2dIT0NOaVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDA2QjgvMTY2OTFCQjI2RkU1MTFFRDg1NEI1OTlGRjEy MjI0NjgvZ0hPQ05pU3V3ZmFzR3JCcDJYam1YWjl5QldzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9mOgdXRWds6lCyI0sWaXd2WT06AdU Q+LM+Xq6wOm19Hiu/+806rhZ/DiToTLQ69G9YD8FQBE2xE9FYKLrzp4uqFhb9Yu1 yowrzodqrlVhoxL0grjBRmoydFfHaiEugYWPCK2C4l5tF/dBbbzClocSrI7PxvXj X4jRaPlCcasLNoKo0Ic8lJdTufpMisY3YjHj/PZ9HH51BMp8h1jz4aSxMB0WXQb5 Wp62gkOQOgaXcINYcCeRdOtnCXfPvpaLEZMGJ8Vn1Taq9hjQ16IAl9QZn6r2Z9st EnY9uy+UUBV/p1VauPl10PUVl9+TMBPvjQgIgxypgfhz9GYJX4TcuO1p -----END CERTIFICATE-----Generated at Thu Jan 1 01:04:30 2026 by rpki-client