This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft File: EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json) Hash identifier: fb4qwJRJTHwo/zvyZeT/Ctu0z0hjUQqDXNHJF+4MQyE= Subject key identifier: 32:33:B3:2F:F3:5B:36:CA:09:1F:80:A1:87:B2:0E:0D:BF:C3:CD:FF Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9 Certificate issuer: /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9 Certificate serial: 072A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft Manifest number: 0728 Signing time: Mon 29 Dec 2025 02:02:12 +0000 Manifest this update: Mon 29 Dec 2025 02:02:11 +0000 Manifest next update: Wed 31 Dec 2025 02:02:11 +0000 Files and hashes: 1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: Jjml4c/eaQNa2OrqBgdExs6LButQewNZY3El+jbAs0g=) 2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=) 3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 31 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9 Validity Not Before: Dec 29 02:02:11 2025 GMT Not After : Dec 31 02:02:11 2025 GMT Subject: CN=6951e124-4e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:a3:5c:d4:ec:06:63:93:4b:4e:55:6f:bc: 80:43:d7:ac:ca:22:13:27:64:fb:e7:55:d8:96:e4: 2f:28:1d:b4:78:01:f1:e7:ae:12:76:d6:d0:89:0a: 3c:f5:8b:39:e2:6b:23:ff:9d:ef:cc:d0:91:83:db: 03:3e:77:0b:f6:f5:e4:da:6c:bd:6d:06:1b:29:3a: 1c:dc:08:b8:81:fa:44:af:4b:2b:7b:90:8b:44:ff: a5:26:33:f3:4a:29:a0:27:0a:eb:d4:96:01:4f:8d: f0:e4:16:6d:bc:55:db:20:b1:6c:52:2b:27:6f:48: 44:04:cb:c8:60:ef:5d:95:05:bf:fc:7d:22:69:df: 40:6e:ca:2a:d8:b8:7a:2f:97:ca:88:fb:53:2d:15: e7:4f:60:a0:60:77:35:dd:d7:a4:e7:48:59:67:47: 9e:22:e5:bf:21:9a:e6:6f:c7:bc:46:87:9f:be:98: a0:d8:26:03:92:9e:86:f5:17:b7:c6:91:9d:df:c6: 34:f4:f0:9c:c4:5e:19:b7:4e:1d:0f:01:90:0b:b3: 7b:b5:bb:7b:fc:5e:ff:b5:37:f7:4c:00:da:82:4a: 2f:54:82:fa:e7:f7:be:10:82:17:56:5d:2d:be:ec: 1d:55:a9:af:52:1a:e2:b2:7b:b6:00:44:12:19:be: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:B3:2F:F3:5B:36:CA:09:1F:80:A1:87:B2:0E:0D:BF:C3:CD:FF X509v3 Authority Key Identifier: keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:11:b4:a3:2e:ff:13:19:da:f7:a1:7e:e0:08:0f:e1:22:d1: 84:c5:4f:83:eb:83:ab:d0:33:87:b6:6e:d7:e9:44:8b:f0:4d: 5b:3f:e4:c4:ad:46:e2:ec:b3:9c:b1:86:8d:5e:bc:c3:fb:fd: b9:28:2d:db:02:a1:00:c6:6a:a6:3e:61:0b:f9:ca:b5:f2:57: a1:b4:1a:bb:aa:6a:fb:73:2c:84:cf:3c:b4:16:5d:d4:ab:7b: 5f:f6:1f:ed:2a:86:74:ff:2b:af:e8:e6:42:31:4d:b4:5b:95: 97:32:dd:49:d7:35:c4:a7:42:01:80:dc:e7:a9:10:db:29:51: 5e:81:ea:a1:e9:b7:da:a9:e9:50:d8:d3:f4:e0:51:ab:2b:b4: 4a:80:75:ad:14:aa:52:ef:00:68:d4:fd:77:af:f1:a1:1a:47: f7:29:33:4c:87:dd:5a:9c:12:24:d4:be:99:f1:95:fb:07:d4: 52:c9:7c:dd:79:4c:16:17:aa:05:9a:9d:6e:6c:56:d8:5a:0f: d8:b7:53:d8:0e:6f:04:4f:5b:5d:de:d5:a7:e0:24:f8:a7:90: 3d:fa:2d:89:4e:0e:a6:85:e2:e9:f7:c5:33:a2:35:b7:29:c4: 52:38:f5:a4:92:79:f0:c8:3e:d0:af:20:ec:5b:43:89:e5:a5: 27:29:84:56 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICByowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODlFMTJBRjExMC8GA1UEBRMoMTI5ODkyQjU5QkVFOTBCRkE0NjhFNTQ0NUM0QUQx RDAxNjlFMTFEOTAeFw0yNTEyMjkwMjAyMTFaFw0yNTEyMzEwMjAyMTFaMBgxFjAU BgNVBAMTDTY5NTFlMTI0LTRlN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwi6Nc1OwGY5NLTlVvvIBD16zKIhMnZPvnVdiW5C8oHbR4AfHnrhJ21tCJ Cjz1izniayP/ne/M0JGD2wM+dwv29eTabL1tBhspOhzcCLiB+kSvSyt7kItE/6Um M/NKKaAnCuvUlgFPjfDkFm28VdsgsWxSKydvSEQEy8hg712VBb/8fSJp30BuyirY uHovl8qI+1MtFedPYKBgdzXd16TnSFlnR54i5b8hmuZvx7xGh5++mKDYJgOSnob1 F7fGkZ3fxjT08JzEXhm3Th0PAZALs3u1u3v8Xv+1N/dMANqCSi9Ugvrn974QghdW XS2+7B1Vqa9SGuKye7YARBIZvjZfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMjOz L/NbNsoJH4Chh7IODb/Dzf8wHwYDVR0jBBgwFoAUEpiStZvukL+kaOVEXErR0Bae EdkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjg5RTEyLzZDNjA5NjhBNkEzODExRUJBN0M4OEMzMkY4QUVBMjI4L0VwaVN0 WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0VwaVN0WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2ODlFMTIvNkM2MDk2OEE2QTM4MTFFQkE3Qzg4QzMyRjhB RUEyMjgvRXBpU3RadnVrTC1rYU9WRVhFclIwQmFlRWRrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClEbSjLv8TGdr3oX7gCA/hItGExU+D 64Or0DOHtm7X6USL8E1bP+TErUbi7LOcsYaNXrzD+/25KC3bAqEAxmqmPmEL+cq1 8lehtBq7qmr7cyyEzzy0Fl3Uq3tf9h/tKoZ0/yuv6OZCMU20W5WXMt1J1zXEp0IB gNznqRDbKVFegeqh6bfaqelQ2NP04FGrK7RKgHWtFKpS7wBo1P13r/GhGkf3KTNM h91anBIk1L6Z8ZX7B9RSyXzdeUwWF6oFmp1ubFbYWg/Yt1PYDm8ET1td3tWn4CT4 p5A9+i2JTg6mheLp98UzojW3KcRSOPWkknnwyD7QryDsW0OJ5aUnKYRW -----END CERTIFICATE-----Generated at Mon Dec 29 08:51:41 2025 by rpki-client