This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft File: DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json) Hash identifier: 6N4P8gH18IP1WZT1UFg8HnxOtvKCAdv8HGMFoXZ0R3s= Subject key identifier: 1E:10:C0:AB:78:7D:BB:F8:CA:E0:B6:E7:0A:15:2B:77:19:A4:B6:E6 Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Certificate serial: 0507 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft Manifest number: 0504 Signing time: Sun 28 Dec 2025 03:01:29 +0000 Manifest this update: Sun 28 Dec 2025 03:01:28 +0000 Manifest next update: Tue 30 Dec 2025 03:01:28 +0000 Files and hashes: 1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: AayE6hkkdHwa44cR/bJA/oDFIxRtgxj+otS1nWVEQbk=) 2: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (hash: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=) 3: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=) 4: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 30 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Validity Not Before: Dec 28 03:01:28 2025 GMT Not After : Dec 30 03:01:28 2025 GMT Subject: CN=69509d89-e959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:60:86:c9:15:3c:f0:6b:13:bd:0c:5b:a1: 08:58:35:48:42:cb:75:4e:6f:b1:4f:4e:01:ce:85: 16:1f:c1:da:ce:aa:4d:15:33:59:68:ad:0e:49:94: 82:af:ba:60:8a:f8:dc:e3:07:2c:3c:7c:3c:a2:28: 9a:bb:54:23:d2:bb:c6:3f:7a:ee:5a:90:e6:25:3f: 4c:13:35:95:61:4e:f0:7c:07:10:36:b5:ba:8a:cd: 91:84:6f:2b:9a:00:71:3f:0d:ce:3b:68:de:04:9a: 00:8a:da:bb:9b:6c:66:ce:35:53:7d:a4:17:f6:66: 3b:a1:2b:8a:14:83:99:8f:9d:88:d9:cc:e9:7a:a7: f8:cb:b9:a8:2a:6e:e2:9d:96:e1:cf:bb:d2:14:cc: a9:15:b4:51:ae:6e:e4:5f:c3:20:ed:4f:a4:8b:89: 37:92:18:c8:b5:63:99:83:47:2e:22:ad:2a:a5:74: 88:46:53:01:e7:35:9a:a0:11:7f:d3:41:aa:26:b8: 74:0a:58:90:3c:c2:09:ab:c1:06:7e:92:9b:75:d8: 7b:b4:dc:b0:eb:b5:e2:8d:cd:32:33:69:70:7a:40: 92:af:6b:eb:cf:10:ed:88:8b:a0:9c:37:cf:d7:a8: dd:d9:b3:28:21:5f:3b:2b:bd:be:d5:5f:a4:96:3f: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:10:C0:AB:78:7D:BB:F8:CA:E0:B6:E7:0A:15:2B:77:19:A4:B6:E6 X509v3 Authority Key Identifier: keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:be:31:51:92:4f:bf:82:1d:0d:e2:12:0b:b4:5c:95:0a:5d: 5c:5c:6c:02:01:d5:7a:9e:c2:46:88:85:0c:65:f7:5e:53:8c: 1b:6a:aa:7d:b3:09:39:b2:9b:04:d9:3b:30:b8:35:47:3b:9c: b0:d9:ad:64:f4:d3:29:a0:29:a1:47:d6:43:29:7b:44:dc:8f: 28:d9:e8:1e:00:20:b9:38:5f:fb:a4:ec:cb:73:42:53:b6:cd: 53:16:c7:55:2f:79:c3:f0:6d:ca:d3:1a:2a:32:a2:9b:f9:82: 7e:63:b5:09:ba:b9:07:ed:21:a7:cb:7e:69:bb:1c:08:f8:82: b0:12:39:1b:d8:7c:a7:00:2d:05:38:2a:6b:8a:21:57:cd:00: d4:24:1a:86:dc:71:ea:20:ff:6e:3f:13:b0:b0:8c:65:c7:24: 20:5d:12:8f:43:d7:f6:71:ef:9c:68:ad:c9:7a:85:2f:63:7c: 5f:7c:b5:45:9a:ca:1a:ab:85:1e:2b:3c:2b:14:8f:27:26:55: e2:77:2f:b0:5a:74:54:cc:f1:11:5a:cf:90:ee:6d:77:57:33: d0:6b:ad:e6:0b:c9:62:7d:64:ae:33:e6:c9:b6:98:a9:c3:82: ba:3d:18:b4:cb:82:f0:dc:3f:5a:74:52:25:57:f7:02:6d:f3: 33:83:9a:dc -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NzREQTdBRjExMC8GA1UEBRMoMEMzREE1MDUyQTFDNEZCNjhGQzYzMTI2NTA2MDYz QjAyQTA0MjE2NjAeFw0yNTEyMjgwMzAxMjhaFw0yNTEyMzAwMzAxMjhaMBgxFjAU BgNVBAMTDTY5NTA5ZDg5LWU5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDmoWCGyRU88GsTvQxboQhYNUhCy3VOb7FPTgHOhRYfwdrOqk0VM1lorQ5J lIKvumCK+NzjByw8fDyiKJq7VCPSu8Y/eu5akOYlP0wTNZVhTvB8BxA2tbqKzZGE byuaAHE/Dc47aN4EmgCK2rubbGbONVN9pBf2ZjuhK4oUg5mPnYjZzOl6p/jLuagq buKdluHPu9IUzKkVtFGubuRfwyDtT6SLiTeSGMi1Y5mDRy4irSqldIhGUwHnNZqg EX/TQaomuHQKWJA8wgmrwQZ+kpt12Hu03LDrteKNzTIzaXB6QJKva+vPEO2Ii6Cc N8/XqN3ZsyghXzsrvb7VX6SWP7tXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHhDA q3h9u/jK4LbnChUrdxmktuYwHwYDVR0jBBgwFoAUDD2lBSocT7aPxjEmUGBjsCoE IWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjc0REE3L0M2NjFFRTZFMTRCMzExRURBMTIzNjhGMkYxMjIyNDY4L0REMmxC U29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0REMmxCU29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NzREQTcvQzY2MUVFNkUxNEIzMTFFREExMjM2OEYyRjEy MjI0NjgvREQybEJTb2NUN2FQeGpFbVVHQmpzQ29FSVdZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDvjFRkk+/gh0N4hILtFyVCl1cXGwC AdV6nsJGiIUMZfdeU4wbaqp9swk5spsE2TswuDVHO5yw2a1k9NMpoCmhR9ZDKXtE 3I8o2egeACC5OF/7pOzLc0JTts1TFsdVL3nD8G3K0xoqMqKb+YJ+Y7UJurkH7SGn y35puxwI+IKwEjkb2HynAC0FOCpriiFXzQDUJBqG3HHqIP9uPxOwsIxlxyQgXRKP Q9f2ce+caK3JeoUvY3xffLVFmsoaq4UeKzwrFI8nJlXidy+wWnRUzPERWs+Q7m13 VzPQa63mC8lifWSuM+bJtpipw4K6PRi0y4Lw3D9adFIlV/cCbfMzg5rc -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:38 2025 by rpki-client