This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft File: oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json) Hash identifier: AhpA32EHDd+c2DeQJrU7wugDfNidmhtwnynfqJ0E+B0= Subject key identifier: B8:F0:A7:FE:BC:52:2B:62:2C:2C:F7:C7:0C:A9:59:8C:DB:F6:46:88 Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18 Certificate issuer: /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018 Certificate serial: 0E89 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft Manifest number: 0E84 Signing time: Sat 20 Dec 2025 01:00:15 +0000 Manifest this update: Sat 20 Dec 2025 01:00:14 +0000 Manifest next update: Mon 22 Dec 2025 01:00:14 +0000 Files and hashes: 1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: srcqplIx2hF2TQBEm7UQ/NKcS8dE1XnRxP3VdJo40qw=) 2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=) 3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=) 4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3721 (0xe89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018 Validity Not Before: Dec 20 01:00:14 2025 GMT Not After : Dec 22 01:00:14 2025 GMT Subject: CN=6945f51f-f307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:41:73:51:24:5b:43:80:ec:ab:1b:87:84: c0:0e:2e:30:94:5e:19:b0:af:20:22:54:de:52:2c: 8b:99:95:57:df:2e:c9:d6:b1:77:79:73:53:34:02: 5d:96:36:4e:ef:ee:d1:2e:4a:d1:55:a0:db:11:05: 48:c3:56:2d:1f:b4:a7:3a:fe:e6:b8:45:a0:a6:42: b7:d7:3e:8b:89:48:82:96:58:15:0c:1a:9e:3f:b8: 1b:95:ad:00:1b:11:44:3a:9e:72:1b:2b:8a:81:87: b8:24:64:d4:5c:70:f7:57:de:a5:d8:33:0a:09:07: b3:5d:22:73:44:a2:39:d3:e1:41:a0:37:ec:f7:2d: 99:fb:76:52:e7:aa:db:b7:95:31:c5:63:c6:d7:b5: a0:ef:5f:fb:f4:b8:e1:ed:fa:ca:c5:45:8e:9c:14: 39:05:06:e9:e8:c8:1f:4f:3a:3b:95:ed:1b:96:41: f1:f9:d3:c5:00:e8:23:c1:f3:0f:1a:fd:17:24:62: da:38:ff:61:5a:fe:a6:d3:7e:d8:28:cc:87:44:80: 9b:aa:88:c4:b8:67:ad:d4:44:63:60:b8:9a:ef:b4: 27:26:f7:09:d4:42:a2:00:c3:f2:6c:ee:2b:be:1e: 3c:a2:87:d0:28:67:f9:d3:67:35:f5:6b:c8:71:ca: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F0:A7:FE:BC:52:2B:62:2C:2C:F7:C7:0C:A9:59:8C:DB:F6:46:88 X509v3 Authority Key Identifier: keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:c6:ec:39:f5:55:d1:8c:0f:8f:e4:37:b0:db:c4:42:47: 3b:75:79:27:21:ed:c6:19:e0:4b:bf:47:fa:bd:83:87:68:f6: bc:53:52:70:d2:95:9a:84:29:17:a6:06:0c:9c:a4:30:41:af: 16:75:7f:a3:75:03:ae:83:02:8b:b8:d5:b2:e0:af:9d:d1:ec: 26:44:56:48:1a:ec:b4:b3:5e:e0:2b:4b:dd:d1:91:e4:32:68: 53:51:79:99:5d:c6:cf:f8:b7:d3:0f:d9:3c:37:92:c7:f9:fe: 80:49:44:44:be:a8:cd:4b:1b:ba:cf:a7:e8:86:36:78:47:e7: 35:7d:64:20:a9:c3:5f:40:eb:16:7f:28:a0:fd:b0:6b:f8:56: fa:f8:bd:30:ce:93:e6:1d:99:ab:f4:17:55:b4:3a:60:f3:b2: f0:b3:c9:1f:60:a6:a1:bd:9a:f2:07:11:4f:e7:32:22:b2:69: 6b:db:be:57:14:bf:ae:e9:db:83:83:14:8b:97:aa:81:06:f4: 2b:e0:66:27:b2:6c:85:bc:2d:7f:78:f9:18:46:94:c1:41:62: 44:85:0b:b2:ea:db:dd:2b:d9:ac:01:95:ed:85:f9:c6:f1:a1: ae:8d:5f:65:df:0c:37:25:9c:4b:73:b1:aa:4c:4d:46:78:dd: c2:35:96:98 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDokwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTlCOEVBRjExMC8GA1UEBRMoQTEzNUUwMEI5OENCRjdEREY4QUFGMjYyMzg2RjhF MTQwM0FBQzAxODAeFw0yNTEyMjAwMTAwMTRaFw0yNTEyMjIwMTAwMTRaMBgxFjAU BgNVBAMTDTY5NDVmNTFmLWYzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDoq0FzUSRbQ4DsqxuHhMAOLjCUXhmwryAiVN5SLIuZlVffLsnWsXd5c1M0 Al2WNk7v7tEuStFVoNsRBUjDVi0ftKc6/ua4RaCmQrfXPouJSIKWWBUMGp4/uBuV rQAbEUQ6nnIbK4qBh7gkZNRccPdX3qXYMwoJB7NdInNEojnT4UGgN+z3LZn7dlLn qtu3lTHFY8bXtaDvX/v0uOHt+srFRY6cFDkFBunoyB9POjuV7RuWQfH508UA6CPB 8w8a/RckYto4/2Fa/qbTftgozIdEgJuqiMS4Z63URGNguJrvtCcm9wnUQqIAw/Js 7iu+Hjyih9AoZ/nTZzX1a8hxyggHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuPCn /rxSK2IsLPfHDKlZjNv2RogwHwYDVR0jBBgwFoAUoTXgC5jL9934qvJiOG+OFAOq wBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk5QjhFL0ZFMjBEODIwQjEyMjExRTVCOTI5NEQ0QUY4QUVBMjI4L29UWGdD NWpMOTkzNHF2SmlPRy1PRkFPcXdCZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL29UWGdDNWpMOTkzNHF2SmlPRy1PRkFPcXdCZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTlCOEUvRkUyMEQ4MjBCMTIyMTFFNUI5Mjk0RDRBRjhB RUEyMjgvb1RYZ0M1akw5OTM0cXZKaU9HLU9GQU9xd0JnLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2ZcbsOfVV0YwPj+Q3sNvEQkc7dXkn Ie3GGeBLv0f6vYOHaPa8U1Jw0pWahCkXpgYMnKQwQa8WdX+jdQOugwKLuNWy4K+d 0ewmRFZIGuy0s17gK0vd0ZHkMmhTUXmZXcbP+LfTD9k8N5LH+f6ASUREvqjNSxu6 z6fohjZ4R+c1fWQgqcNfQOsWfyig/bBr+Fb6+L0wzpPmHZmr9BdVtDpg87Lws8kf YKahvZryBxFP5zIismlr275XFL+u6duDgxSLl6qBBvQr4GYnsmyFvC1/ePkYRpTB QWJEhQuy6tvdK9msAZXthfnG8aGujV9l3ww3JZxLc7GqTE1GeN3CNZaY -----END CERTIFICATE-----Generated at Sat Dec 20 17:05:26 2025 by rpki-client