This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft File: DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json) Hash identifier: ynM2K+/P+4AaKr2oZFryMP6/I46E0uxQOncJfo5AYDg= Subject key identifier: 36:74:CD:18:A2:60:36:67:6E:33:CD:9D:50:A3:4E:A3:F9:06:8A:91 Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Certificate serial: 050A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft Manifest number: 0507 Signing time: Wed 31 Dec 2025 02:56:28 +0000 Manifest this update: Wed 31 Dec 2025 02:56:27 +0000 Manifest next update: Fri 02 Jan 2026 02:56:27 +0000 Files and hashes: 1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: Yp1cxpIHHSJWw9r+9ZPkzLdxxiwBGTn2MftAC7PBOek=) 2: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (hash: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=) 3: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=) 4: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 02 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Validity Not Before: Dec 31 02:56:27 2025 GMT Not After : Jan 2 02:56:27 2026 GMT Subject: CN=695490db-4cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:97:99:ad:01:ee:96:8f:12:15:5b:ae:50: 0d:c9:c9:af:87:15:90:be:eb:da:83:05:9d:ec:59: d0:2f:91:c9:0e:c4:a2:f9:3a:b6:30:d0:bf:12:9c: 75:28:8e:7d:47:2e:3a:63:01:ad:49:ba:83:fa:90: f0:26:8c:99:25:64:52:0d:8f:9e:68:79:a5:b1:6f: f4:10:91:25:4e:59:89:e7:d8:24:46:77:b7:31:b5: 23:95:1e:a9:6f:d8:9f:f4:37:2f:d4:fc:5c:3e:eb: b9:ed:2f:3e:2b:b4:b1:6f:11:97:3c:de:77:26:bb: 6d:85:c2:d5:3d:38:6a:eb:df:46:ec:ea:ba:c5:80: a6:76:f3:b5:17:93:bd:b3:78:f6:e1:ba:e3:b6:7c: da:f4:0b:6b:4a:3e:1d:c7:e1:58:41:cc:e8:4e:91: dd:7d:89:c6:c3:a6:20:80:f4:4b:36:23:72:f1:4a: fc:35:38:d4:ab:72:72:74:58:5c:81:9c:02:b8:6d: f4:bb:56:96:6f:81:c4:83:f1:e8:96:c2:c8:a6:97: 02:93:5f:a2:79:82:b3:23:9f:f2:cd:55:25:3c:b7: 1c:90:5c:9c:44:a7:d4:cd:d8:45:dd:06:c6:16:ad: 77:46:a1:1f:50:e2:48:43:11:78:29:85:bd:74:9a: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:CD:18:A2:60:36:67:6E:33:CD:9D:50:A3:4E:A3:F9:06:8A:91 X509v3 Authority Key Identifier: keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:fb:42:8e:fd:b0:90:e3:de:4a:c6:d1:5a:e2:7d:af:68:1d: 80:7e:61:f8:e2:d1:9d:04:0e:64:ce:0f:20:ea:b9:31:a5:56: 9a:31:b4:99:d8:06:9f:79:48:7c:81:3d:ec:00:f6:6a:7e:53: d6:89:36:3c:85:9b:3c:e8:bd:4b:79:6f:1a:b4:8d:c0:99:15: 9a:d8:c5:40:60:18:9b:79:c3:37:a3:4a:9e:99:a7:23:5d:d9: e5:d7:74:a5:cf:13:10:5a:ac:a0:37:58:c2:18:2f:a7:81:a1: 90:d9:32:00:16:c0:e8:5c:98:dd:e4:d5:9b:af:ab:68:5f:9e: 0d:c9:cf:5f:29:1e:29:43:11:14:99:93:a9:0e:c8:91:80:5d: 58:f7:a2:f8:df:50:c0:8a:81:04:b0:7a:61:2c:f5:16:12:e8: 89:97:71:67:83:1c:ef:69:21:00:8d:30:17:9a:2a:47:f6:49: 87:21:02:c5:c9:ea:c2:1d:a3:3b:b6:7f:75:e3:da:5d:c4:f5: 8f:b0:d1:81:d5:e7:99:9f:9d:94:98:82:7e:91:7a:6e:10:f4: c7:90:83:be:54:14:f2:40:62:aa:1c:bd:5f:6f:92:4c:2f:49: 8f:4a:0b:99:f8:63:04:6d:85:a5:c6:f7:ad:58:e4:ea:32:45: da:fb:7f:e1 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBQowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NzREQTdBRjExMC8GA1UEBRMoMEMzREE1MDUyQTFDNEZCNjhGQzYzMTI2NTA2MDYz QjAyQTA0MjE2NjAeFw0yNTEyMzEwMjU2MjdaFw0yNjAxMDIwMjU2MjdaMBgxFjAU BgNVBAMTDTY5NTQ5MGRiLTRjYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbZeZrQHulo8SFVuuUA3Jya+HFZC+69qDBZ3sWdAvkckOxKL5OrYw0L8S nHUojn1HLjpjAa1JuoP6kPAmjJklZFINj55oeaWxb/QQkSVOWYnn2CRGd7cxtSOV Hqlv2J/0Ny/U/Fw+67ntLz4rtLFvEZc83ncmu22FwtU9OGrr30bs6rrFgKZ287UX k72zePbhuuO2fNr0C2tKPh3H4VhBzOhOkd19icbDpiCA9Es2I3LxSvw1ONSrcnJ0 WFyBnAK4bfS7VpZvgcSD8eiWwsimlwKTX6J5grMjn/LNVSU8txyQXJxEp9TN2EXd BsYWrXdGoR9Q4khDEXgphb10mkd5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNnTN GKJgNmduM82dUKNOo/kGipEwHwYDVR0jBBgwFoAUDD2lBSocT7aPxjEmUGBjsCoE IWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjc0REE3L0M2NjFFRTZFMTRCMzExRURBMTIzNjhGMkYxMjIyNDY4L0REMmxC U29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0REMmxCU29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NzREQTcvQzY2MUVFNkUxNEIzMTFFREExMjM2OEYyRjEy MjI0NjgvREQybEJTb2NUN2FQeGpFbVVHQmpzQ29FSVdZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh+0KO/bCQ495KxtFa4n2vaB2AfmH4 4tGdBA5kzg8g6rkxpVaaMbSZ2AafeUh8gT3sAPZqflPWiTY8hZs86L1LeW8atI3A mRWa2MVAYBibecM3o0qemacjXdnl13SlzxMQWqygN1jCGC+ngaGQ2TIAFsDoXJjd 5NWbr6toX54Nyc9fKR4pQxEUmZOpDsiRgF1Y96L431DAioEEsHphLPUWEuiJl3Fn gxzvaSEAjTAXmipH9kmHIQLFyerCHaM7tn9149pdxPWPsNGB1eeZn52UmIJ+kXpu EPTHkIO+VBTyQGKqHL1fb5JML0mPSguZ+GMEbYWlxvetWOTqMkXa+3/h -----END CERTIFICATE-----Generated at Wed Dec 31 07:58:16 2025 by rpki-client