This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft File: yFh1TID6yDlgC6mAc_zwo3zMrOs.mft (raw, json) Hash identifier: yeKS/QOkJtnEvbA6DR0Hmj837kDmES76ZU6jZ6d8fXU= Subject key identifier: 72:D0:6C:BC:0F:AF:79:5A:F0:39:91:00:BF:73:B0:13:A0:79:2D:67 Authority key identifier: C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB Certificate issuer: /CN=F36E567DAF/serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB Certificate serial: 012F Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft Manifest number: 012D Signing time: Mon 29 Dec 2025 04:55:28 +0000 Manifest this update: Mon 29 Dec 2025 04:55:27 +0000 Manifest next update: Wed 31 Dec 2025 04:55:27 +0000 Files and hashes: 1: yFh1TID6yDlgC6mAc_zwo3zMrOs.crl (hash: cRpRJCLCVsvqAlq56Dwero4JjRyEMVrOsZ+hJ9ovH+0=) 2: C3D088FEFE4411EF844C4251762E951A.roa (hash: 8c/UcInEU32uCkkd0bW2sydpnWRZBq/yumh8oAWslXQ=) 3: 78CEE0D6FE4311EFAC01C048762E951A.roa (hash: S/ZsWMJD4DtM1oXbegUkV+3ds1wHL2z8dUl+XkcuPAo=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 31 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E567DAF, serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB Validity Not Before: Dec 29 04:55:27 2025 GMT Not After : Dec 31 04:55:27 2025 GMT Subject: CN=695209bf-c8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:bf:9d:a9:55:e7:7c:33:6c:d8:31:9d:b5: c0:f9:31:22:45:cc:fd:c6:ac:af:f1:da:44:86:ab: 83:7f:a2:3d:00:f0:d8:3b:6b:4e:60:75:d0:95:46: d3:a1:bd:36:70:8c:e4:8e:49:7a:58:02:77:1b:3d: aa:df:0e:d8:d6:9a:65:92:be:8d:81:30:d7:4c:77: 8d:ff:33:98:9f:60:73:53:ce:e8:1c:24:49:ea:e2: 2d:ec:47:fb:df:a1:dd:21:94:94:fb:70:c7:82:7b: 26:99:e8:c2:99:22:fc:3b:8e:be:05:67:12:67:48: 66:fb:8d:79:ec:f4:3c:ba:dc:02:25:26:97:14:52: 13:d5:b7:cb:3e:6d:ed:45:b7:78:24:2f:07:be:c1: 58:10:6e:bb:e6:57:9a:24:52:81:94:1a:80:4c:ab: 53:3c:bb:67:41:a0:95:ca:42:41:a5:03:53:49:3c: 24:a1:fa:f0:2e:92:ba:2a:2b:47:0b:bc:21:f4:ed: de:ef:ed:36:49:43:66:46:4d:55:42:99:60:9e:0a: 80:ba:29:ee:8a:fd:de:9e:90:0d:26:0c:ab:5c:eb: c0:0d:87:e5:03:f0:5f:eb:3d:31:dc:71:fb:fc:77: 17:3d:e0:28:1f:03:40:52:70:1a:a6:05:40:13:6b: 61:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:6C:BC:0F:AF:79:5A:F0:39:91:00:BF:73:B0:13:A0:79:2D:67 X509v3 Authority Key Identifier: keyid:C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:be:2e:f1:19:dc:34:e6:df:e0:2b:92:2b:a5:9a:54:dc:ba: 5a:d7:cb:1d:05:c0:f9:70:2b:72:e8:f7:a4:cd:94:ba:7b:08: 01:f3:de:2a:17:e5:3e:8d:b1:d9:3a:35:b5:cb:c5:69:86:a2: 47:a6:7d:a2:e5:be:a3:8e:25:3a:72:02:7c:c2:43:47:ca:0b: bf:5c:df:27:65:8a:62:0a:25:c2:18:a8:c6:e3:2e:df:d7:01: c3:51:62:c5:78:4c:8f:d4:23:21:93:04:8b:87:1e:7e:8a:45: f6:84:ac:17:ee:13:49:a0:81:79:69:00:e3:d5:f6:b2:2b:67: 1a:db:a3:f3:74:be:da:ae:ea:c2:c9:2c:02:c8:28:60:2e:6e: 47:79:b5:6b:07:06:3a:3d:10:b4:e8:ce:ff:a1:74:b5:4d:a2: 84:82:8c:8c:d7:fc:c0:72:b7:27:26:1b:2b:fc:67:40:60:1a: 7d:6f:de:c4:07:c6:80:56:8a:2e:03:e7:02:96:c5:50:f3:a1: 38:d3:f1:a4:e1:8a:b1:d0:62:26:26:df:de:da:ba:42:41:ea: 55:1d:15:49:e9:47:5d:55:36:53:78:ba:d6:5b:1e:ed:5f:7a: b2:a0:6e:3f:a0:d9:66:50:8e:ec:6f:dc:1e:6a:41:cc:40:63: b9:55:0f:9d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RTU2N0RBRjExMC8GA1UEBRMoQzg1ODc1NEM4MEZBQzgzOTYwMEJBOTgwNzNGQ0Yw QTM3Q0NDQUNFQjAeFw0yNTEyMjkwNDU1MjdaFw0yNTEyMzEwNDU1MjdaMBgxFjAU BgNVBAMTDTY5NTIwOWJmLWM4ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCsJb+dqVXnfDNs2DGdtcD5MSJFzP3GrK/x2kSGq4N/oj0A8Ng7a05gddCV RtOhvTZwjOSOSXpYAncbParfDtjWmmWSvo2BMNdMd43/M5ifYHNTzugcJEnq4i3s R/vfod0hlJT7cMeCeyaZ6MKZIvw7jr4FZxJnSGb7jXns9Dy63AIlJpcUUhPVt8s+ be1Ft3gkLwe+wVgQbrvmV5okUoGUGoBMq1M8u2dBoJXKQkGlA1NJPCSh+vAukroq K0cLvCH07d7v7TZJQ2ZGTVVCmWCeCoC6Ke6K/d6ekA0mDKtc68ANh+UD8F/rPTHc cfv8dxc94CgfA0BScBqmBUATa2HtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUctBs vA+veVrwOZEAv3OwE6B5LWcwHwYDVR0jBBgwFoAUyFh1TID6yDlgC6mAc/zwo3zM rOswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkU1NjdEL0YwOTc3RTRBRkU0MTExRUZBNzhERjNCRDc2MkU5NTFBL3lGaDFU SUQ2eURsZ0M2bUFjX3p3bzN6TXJPcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3lGaDFUSUQ2eURsZ0M2bUFjX3p3bzN6TXJPcy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTU2N0QvRjA5NzdFNEFGRTQxMTFFRkE3OERGM0JENzYy RTk1MUEveUZoMVRJRDZ5RGxnQzZtQWNfendvM3pNck9zLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuvi7xGdw05t/gK5IrpZpU3Lpa18sd BcD5cCty6PekzZS6ewgB894qF+U+jbHZOjW1y8VphqJHpn2i5b6jjiU6cgJ8wkNH ygu/XN8nZYpiCiXCGKjG4y7f1wHDUWLFeEyP1CMhkwSLhx5+ikX2hKwX7hNJoIF5 aQDj1fayK2ca26PzdL7arurCySwCyChgLm5HebVrBwY6PRC06M7/oXS1TaKEgoyM 1/zAcrcnJhsr/GdAYBp9b97EB8aAVoouA+cClsVQ86E40/Gk4Yqx0GImJt/e2rpC QepVHRVJ6UddVTZTeLrWWx7tX3qyoG4/oNlmUI7sb9weakHMQGO5VQ+d -----END CERTIFICATE-----Generated at Mon Dec 29 14:56:33 2025 by rpki-client