This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft File: vc-uJWmnA46pcPrPQDA0GPY1H0g.mft (raw, json) Hash identifier: oVKv92B8Sj0t1V43e/zgd9B2boaKgHo2blpzqIGraV8= Subject key identifier: 2F:0C:BB:01:8E:BF:A4:F1:4C:68:71:35:B6:EC:0A:DA:34:93:89:C8 Authority key identifier: BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48 Certificate issuer: /CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48 Certificate serial: 01DE Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft Manifest number: 01DB Signing time: Sat 20 Dec 2025 04:34:06 +0000 Manifest this update: Sat 20 Dec 2025 04:34:05 +0000 Manifest next update: Mon 22 Dec 2025 04:34:05 +0000 Files and hashes: 1: vc-uJWmnA46pcPrPQDA0GPY1H0g.crl (hash: LRr/NlLR0JV8ZQejggboCb2OIaFXFuMI7Xr1JxWtpxY=) 2: 2FD55E82741E11EFAC1F5677762E951A.roa (hash: yK+GF+mnFJmB3GPr0etfsyb2RoWyRhvCEdCQ6Xl4fOM=) 3: B1580E28775211EF8422209B762E951A.roa (hash: 3jNv2hrO32PB5K8c+t8vu6E3ApIkflNjeVX5pzc7APs=) 4: FF8E457C741D11EF8D538675762E951A.roa (hash: 6X3NUQA2g5a3P3oPEfsVXoEnHkdqMcSAGwMmrV+SpqU=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3658A3FAF, serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48 Validity Not Before: Dec 20 04:34:05 2025 GMT Not After : Dec 22 04:34:05 2025 GMT Subject: CN=6946273e-d8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:dc:e5:e3:95:df:ba:49:77:3c:f7:5a:a2: 02:bd:02:dd:27:70:3e:46:ff:3d:26:52:6f:c2:f3: 09:6b:0e:d7:e6:25:07:db:53:5f:b1:e8:e2:85:31: 47:e0:22:9b:aa:0c:0b:0c:bc:6c:9a:ae:a3:9a:a0: 39:e2:47:c3:84:99:2b:ae:8e:cd:6f:9e:81:81:78: 4e:a8:d5:44:a7:5e:f5:63:82:db:23:80:bc:b9:a8: 35:13:0e:d2:98:f9:fb:d2:53:e2:e5:50:32:75:00: 2b:55:79:dc:78:6c:5c:7d:e6:a0:e3:07:9e:a0:b4: 7f:40:68:98:d9:d3:28:15:e0:cf:28:08:b5:a3:b6: c6:6a:6a:b5:2e:28:fd:16:09:41:3f:20:e0:88:54: f4:e4:48:bf:e0:6c:57:1c:87:e2:0a:14:91:10:1a: ff:08:7e:b3:60:27:ef:ca:2c:c7:5c:ae:dd:4e:65: 57:5b:46:bf:23:ba:41:65:e6:fd:aa:b9:92:ab:9d: e9:b8:67:9f:4f:2d:1f:de:d7:3f:08:fa:18:02:73: 5a:fb:79:93:2e:0f:37:4a:49:58:a6:04:7f:9a:fd: ed:35:d8:26:b0:41:f1:97:53:8c:96:87:e4:e6:ee: 36:c9:e3:a8:79:d3:09:15:27:45:00:68:f8:c4:e9: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0C:BB:01:8E:BF:A4:F1:4C:68:71:35:B6:EC:0A:DA:34:93:89:C8 X509v3 Authority Key Identifier: keyid:BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:55:34:37:a8:5c:5b:d1:01:c8:ea:7b:2c:05:92:c0:62:5f: 4a:4b:6f:ae:30:0e:a8:0c:fb:80:4d:d5:13:28:45:e5:38:3e: 2b:dc:b3:4b:0b:71:b9:f2:16:6d:09:72:e1:dd:f0:5e:b6:29: 12:c0:0f:a1:12:1f:b1:3b:6c:ad:93:2b:be:dd:6c:83:64:85: 7f:d4:af:53:b0:b0:22:40:a2:f3:c0:40:d4:7f:c3:7b:31:c6: 81:4a:23:80:26:63:07:31:37:7c:c8:6a:a9:17:89:48:3c:9b: 65:34:7e:65:88:4c:8b:c4:c0:d0:5c:4f:20:6c:3b:61:13:c9: da:fb:d8:44:93:b5:1d:18:c4:30:73:7c:5e:aa:89:20:ec:1d: 03:78:6f:6e:55:a6:ac:fb:fa:83:dd:fc:df:11:d6:00:d9:39: f0:1b:1a:d7:8b:26:8a:3e:4f:7f:51:01:19:9c:75:9d:09:75: 69:b3:f9:65:7d:97:8e:96:d0:55:16:52:27:ba:55:21:e1:19: a2:34:0d:e8:2b:0b:3b:8c:b9:90:70:4a:4c:a5:2f:89:2e:fe: e2:c4:9a:ec:ca:ae:87:5d:c2:d4:a6:04:e6:34:ec:d6:7c:ed: b6:76:1c:aa:31:9e:ac:9e:69:69:ef:b9:74:b5:47:58:21:e7: ab:19:7e:8b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NThBM0ZBRjExMC8GA1UEBRMoQkRDRkFFMjU2OUE3MDM4RUE5NzBGQUNGNDAzMDM0 MThGNjM1MUY0ODAeFw0yNTEyMjAwNDM0MDVaFw0yNTEyMjIwNDM0MDVaMBgxFjAU BgNVBAMTDTY5NDYyNzNlLWQ4YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC9fdzl45Xfukl3PPdaogK9At0ncD5G/z0mUm/C8wlrDtfmJQfbU1+x6OKF MUfgIpuqDAsMvGyarqOaoDniR8OEmSuujs1vnoGBeE6o1USnXvVjgtsjgLy5qDUT DtKY+fvSU+LlUDJ1ACtVedx4bFx95qDjB56gtH9AaJjZ0ygV4M8oCLWjtsZqarUu KP0WCUE/IOCIVPTkSL/gbFcch+IKFJEQGv8IfrNgJ+/KLMdcrt1OZVdbRr8jukFl 5v2quZKrnem4Z59PLR/e1z8I+hgCc1r7eZMuDzdKSVimBH+a/e012CawQfGXU4yW h+Tm7jbJ46h50wkVJ0UAaPjE6c45AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULwy7 AY6/pPFMaHE1tuwK2jSTicgwHwYDVR0jBBgwFoAUvc+uJWmnA46pcPrPQDA0GPY1 H0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU4QTNGLzc0REQ4NDRDNzQxRDExRUZBMkQwMTY3Mzc2MkU5NTFBL3ZjLXVK V21uQTQ2cGNQclBRREEwR1BZMUgwZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ZjLXVKV21uQTQ2cGNQclBRREEwR1BZMUgwZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NThBM0YvNzRERDg0NEM3NDFEMTFFRkEyRDAxNjczNzYy RTk1MUEvdmMtdUpXbW5BNDZwY1ByUFFEQTBHUFkxSDBnLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXVTQ3qFxb0QHI6nssBZLAYl9KS2+u MA6oDPuATdUTKEXlOD4r3LNLC3G58hZtCXLh3fBetikSwA+hEh+xO2ytkyu+3WyD ZIV/1K9TsLAiQKLzwEDUf8N7McaBSiOAJmMHMTd8yGqpF4lIPJtlNH5liEyLxMDQ XE8gbDthE8na+9hEk7UdGMQwc3xeqokg7B0DeG9uVaas+/qD3fzfEdYA2TnwGxrX iyaKPk9/UQEZnHWdCXVps/llfZeOltBVFlInulUh4RmiNA3oKws7jLmQcEpMpS+J Lv7ixJrsyq6HXcLUpgTmNOzWfO22dhyqMZ6snmlp77l0tUdYIeerGX6L -----END CERTIFICATE-----Generated at Sat Dec 20 09:03:37 2025 by rpki-client