This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft File: cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json) Hash identifier: +g/6oZ62A0FKJxIvSyZei66pguuUGIQ5iHPQpw/QH9Q= Subject key identifier: C5:1F:92:03:B9:4C:64:17:F6:C8:EF:16:10:AD:B9:9F:D7:BB:C2:0F Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD Certificate issuer: /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD Certificate serial: 06FE Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft Manifest number: 06FA Signing time: Sat 27 Dec 2025 02:05:45 +0000 Manifest this update: Sat 27 Dec 2025 02:05:45 +0000 Manifest next update: Mon 29 Dec 2025 02:05:45 +0000 Files and hashes: 1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: 7NMPCLNg3t51mGFXw4Ys5SJfytGGwBntkl3t0r04iQ8=) 2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=) 3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=) 4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 29 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1790 (0x6fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD Validity Not Before: Dec 27 02:05:45 2025 GMT Not After : Dec 29 02:05:45 2025 GMT Subject: CN=694f3ef9-81ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d0:a7:43:50:68:d4:91:47:92:4a:33:d9:f9: fb:4b:5a:4b:1d:61:ca:ae:44:1e:58:06:c4:e1:b9: 38:67:39:84:dd:42:1d:70:cd:37:c8:70:e5:1b:82: 80:38:8b:42:3e:ca:6d:f0:e2:aa:0e:24:1b:d4:f0: f7:76:6b:cf:cc:61:00:42:4f:e0:61:35:e9:34:38: d0:bd:09:74:1c:5b:97:c3:8f:31:6b:4e:77:b3:77: 42:1c:dc:00:b1:6b:2f:1b:54:51:f9:89:a8:76:b7: 90:d2:7c:7a:40:9c:3f:8a:11:0e:17:65:35:30:e0: d2:b0:3a:51:f4:de:f2:33:75:d3:d8:6a:a5:63:3e: f9:e7:f5:b2:0d:bc:58:95:ee:2f:28:26:67:7c:34: 54:39:a2:d8:e7:1c:d0:63:a4:60:ca:73:81:25:b4: fd:28:a9:92:1e:a2:c8:8d:50:0c:fc:16:14:30:6f: 4c:d9:5e:b1:2a:99:a5:97:bf:75:62:89:80:16:4e: fa:44:a6:ad:b3:6b:67:cd:58:9f:b6:8f:4f:82:c8: c9:14:cc:e6:ac:86:7e:b3:54:a3:9f:2c:7c:ef:98: f4:9d:18:20:7f:aa:fc:d6:2d:9a:56:2a:ed:9f:9c: 8e:99:77:a4:8f:41:86:3e:6d:f7:51:4d:ca:ec:1f: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1F:92:03:B9:4C:64:17:F6:C8:EF:16:10:AD:B9:9F:D7:BB:C2:0F X509v3 Authority Key Identifier: keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a0:6b:20:66:a7:bf:5b:01:3f:f0:29:a1:44:27:68:b1:bd: 77:96:e3:81:44:4f:b6:76:00:6c:cd:b9:44:d8:5e:a2:f1:6b: 88:4a:db:83:f2:89:7f:18:a0:57:a3:71:6f:51:bc:2a:2d:dc: 10:2f:18:30:79:1a:17:26:3b:b0:0a:c4:37:d1:cb:59:85:d8: 64:df:10:02:bf:37:a3:71:04:b7:40:5e:85:8c:6a:c4:7e:47: 6b:67:db:15:67:01:3b:19:25:a3:53:ad:37:ae:c3:df:22:02: 34:80:5f:18:4d:5f:bc:76:6d:4b:b9:95:cc:22:0b:66:a2:c9: 85:d1:47:13:99:cc:5c:b9:c2:33:c7:e0:7c:9b:b9:60:80:3b: f4:4b:ff:cb:87:a7:1e:c1:b8:42:35:78:87:e1:6d:d4:0e:26: 6f:3a:bc:b2:60:5b:c5:c2:7c:46:44:0b:aa:aa:02:38:3a:77: 59:7a:6b:6c:02:ae:68:41:33:de:0e:57:b5:ca:7c:9f:8c:cf: 26:7b:85:8c:75:b3:c2:6e:17:c4:e4:d0:4d:68:1b:8c:37:b1: 0e:ce:a4:be:0b:b2:82:35:9b:4c:25:86:e6:93:58:fb:bb:ec: dc:46:26:65:32:59:9e:3b:69:1b:a6:2e:37:70:43:f8:47:72: a9:bc:4f:a3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx ODlBN0MyMTZERDAeFw0yNTEyMjcwMjA1NDVaFw0yNTEyMjkwMjA1NDVaMBgxFjAU BgNVBAMTDTY5NGYzZWY5LTgxYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDk0KdDUGjUkUeSSjPZ+ftLWksdYcquRB5YBsThuThnOYTdQh1wzTfIcOUb goA4i0I+ym3w4qoOJBvU8Pd2a8/MYQBCT+BhNek0ONC9CXQcW5fDjzFrTnezd0Ic 3ACxay8bVFH5iah2t5DSfHpAnD+KEQ4XZTUw4NKwOlH03vIzddPYaqVjPvnn9bIN vFiV7i8oJmd8NFQ5otjnHNBjpGDKc4EltP0oqZIeosiNUAz8FhQwb0zZXrEqmaWX v3ViiYAWTvpEpq2za2fNWJ+2j0+CyMkUzOashn6zVKOfLHzvmPSdGCB/qvzWLZpW Ku2fnI6Zd6SPQYY+bfdRTcrsH30pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxR+S A7lMZBf2yO8WEK25n9e7wg8wHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABoGsgZqe/WwE/8CmhRCdosb13luOB RE+2dgBszblE2F6i8WuIStuD8ol/GKBXo3FvUbwqLdwQLxgweRoXJjuwCsQ30ctZ hdhk3xACvzejcQS3QF6FjGrEfkdrZ9sVZwE7GSWjU603rsPfIgI0gF8YTV+8dm1L uZXMIgtmosmF0UcTmcxcucIzx+B8m7lggDv0S//Lh6cewbhCNXiH4W3UDiZvOryy YFvFwnxGRAuqqgI4OndZemtsAq5oQTPeDle1ynyfjM8me4WMdbPCbhfE5NBNaBuM N7EOzqS+C7KCNZtMJYbmk1j7u+zcRiZlMlmeO2kbpi43cEP4R3KpvE+j -----END CERTIFICATE-----Generated at Sat Dec 27 11:42:45 2025 by rpki-client