This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft File: cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json) Hash identifier: kt4wjET/TmQHU+w69oL4/cy0Ap2mO3S6/1SUD7AZfKk= Subject key identifier: 4B:97:9E:62:D1:82:50:A9:CC:D1:39:1E:98:BA:11:11:27:3B:C6:6C Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD Certificate issuer: /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD Certificate serial: 0702 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft Manifest number: 06FE Signing time: Wed 31 Dec 2025 02:06:24 +0000 Manifest this update: Wed 31 Dec 2025 02:06:23 +0000 Manifest next update: Fri 02 Jan 2026 02:06:23 +0000 Files and hashes: 1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: 9NIz2dQvEJUmsop4Op3nM9JZEjye6JgFNKJXsVNMWfs=) 2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=) 3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=) 4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 02 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD Validity Not Before: Dec 31 02:06:23 2025 GMT Not After : Jan 2 02:06:23 2026 GMT Subject: CN=69548520-5c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:dd:47:43:f7:53:c0:eb:6b:0b:29:80:cf: 7d:42:8d:76:11:f1:e5:99:9d:8f:a9:53:fd:b7:47: ca:b3:25:7d:58:dd:f1:bc:72:b7:04:bb:35:d7:0e: e1:59:8d:c6:d4:ad:53:b2:bc:36:c2:f9:8e:e7:0e: cc:b0:ed:ad:5f:17:ab:c3:0d:92:78:99:83:8a:b3: a6:c6:65:97:4b:6a:05:9c:06:c7:2c:36:b3:2c:78: d6:0e:09:eb:39:8b:4e:1c:bb:53:e7:7e:64:12:88: 81:31:b8:4b:59:a1:51:85:56:37:82:61:52:a3:be: 3c:70:42:b1:00:83:fe:d6:55:02:2a:05:2b:0b:95: 17:e4:46:6b:9e:52:b6:bc:59:d2:01:06:71:6d:27: 1c:4f:8a:dd:b7:b1:d5:b4:0a:2e:15:1f:61:76:32: d8:56:00:8f:cc:07:b7:54:78:52:c7:90:b9:94:27: 24:74:6e:4e:b8:c6:85:e9:ba:1d:2b:e2:0a:27:56: 59:03:cc:c3:f3:2f:ca:65:93:13:5f:96:01:46:e3: a6:a0:fd:e5:a5:a9:f2:ae:44:fb:8f:a8:b5:d7:7f: bd:d0:28:ff:df:c8:0e:62:f4:cc:c8:24:3f:d5:cd: 88:73:ff:ed:e7:ec:fc:3e:d2:9a:18:f8:15:38:0c: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:97:9E:62:D1:82:50:A9:CC:D1:39:1E:98:BA:11:11:27:3B:C6:6C X509v3 Authority Key Identifier: keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:36:db:37:18:37:06:18:f6:a1:82:02:c6:be:a3:fc:d4:26: 45:a4:13:7c:7b:87:d7:e5:c9:f4:87:14:39:da:a2:e3:ef:d4: 1d:05:cb:c1:69:66:e9:47:87:be:27:cc:09:6b:81:8c:15:bf: ef:33:d3:0e:71:18:1e:1c:1a:8d:f1:3c:32:93:ff:b3:6c:85: 4a:f7:f5:46:68:7e:f6:6b:5c:86:d2:e0:c4:55:33:e3:00:2e: 7f:c7:cd:2a:d3:84:93:d1:6d:98:af:73:36:f4:7d:55:ac:2e: 9d:83:9f:80:e6:f1:5f:06:38:9f:45:f4:56:f1:aa:46:39:cc: c2:e1:5a:d9:5b:40:60:ee:7f:5c:49:18:bf:2e:39:a5:19:fb: 53:64:28:49:f1:5f:1b:8f:3d:31:6c:09:0f:65:b6:7c:1a:2e: ab:f7:d8:5b:b0:16:de:c1:61:1e:c1:5e:b0:e8:98:4f:7c:78: 68:39:4e:6c:d3:87:c5:6d:9a:4f:16:d3:05:c1:c5:4f:d2:07: 33:f4:49:1d:f9:1a:cb:01:94:35:b0:c4:47:b7:18:26:3f:8f: 88:b2:9f:5a:ac:30:62:ee:a9:b0:d2:c2:b8:7d:68:2f:53:54: 86:fd:87:56:c9:a1:7e:ec:95:00:f3:e7:3c:59:82:70:62:37: 8b:c4:87:78 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx ODlBN0MyMTZERDAeFw0yNTEyMzEwMjA2MjNaFw0yNjAxMDIwMjA2MjNaMBgxFjAU BgNVBAMTDTY5NTQ4NTIwLTVjMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDVQt1HQ/dTwOtrCymAz31CjXYR8eWZnY+pU/23R8qzJX1Y3fG8crcEuzXX DuFZjcbUrVOyvDbC+Y7nDsyw7a1fF6vDDZJ4mYOKs6bGZZdLagWcBscsNrMseNYO Ces5i04cu1PnfmQSiIExuEtZoVGFVjeCYVKjvjxwQrEAg/7WVQIqBSsLlRfkRmue Ura8WdIBBnFtJxxPit23sdW0Ci4VH2F2MthWAI/MB7dUeFLHkLmUJyR0bk64xoXp uh0r4gonVlkDzMPzL8plkxNflgFG46ag/eWlqfKuRPuPqLXXf73QKP/fyA5i9MzI JD/VzYhz/+3n7Pw+0poY+BU4DPHzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUS5ee YtGCUKnM0TkemLoRESc7xmwwHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvNts3GDcGGPahggLGvqP81CZFpBN8 e4fX5cn0hxQ52qLj79QdBcvBaWbpR4e+J8wJa4GMFb/vM9MOcRgeHBqN8Twyk/+z bIVK9/VGaH72a1yG0uDEVTPjAC5/x80q04ST0W2Yr3M29H1VrC6dg5+A5vFfBjif RfRW8apGOczC4VrZW0Bg7n9cSRi/LjmlGftTZChJ8V8bjz0xbAkPZbZ8Gi6r99hb sBbewWEewV6w6JhPfHhoOU5s04fFbZpPFtMFwcVP0gcz9Ekd+RrLAZQ1sMRHtxgm P4+Isp9arDBi7qmw0sK4fWgvU1SG/YdWyaF+7JUA8+c8WYJwYjeLxId4 -----END CERTIFICATE-----Generated at Wed Dec 31 07:32:29 2025 by rpki-client