This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft File: OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json) Hash identifier: 8h+uFp3tGGc2mnZt8On/NL5tnNGM22JpvCWeb45d+d4= Subject key identifier: 58:3E:20:24:85:B6:A9:C3:40:98:A6:82:A6:1A:DF:1B:3C:E3:28:77 Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Certificate serial: 0454 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft Manifest number: 0425 Signing time: Sat 20 Dec 2025 03:28:14 +0000 Manifest this update: Sat 20 Dec 2025 03:28:13 +0000 Manifest next update: Mon 22 Dec 2025 03:28:13 +0000 Files and hashes: 1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: Q/4VgMZqThbjYcyKPJhYz5fGNeEjI3Sprmq93RLKbOE=) 2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=) 3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=) 4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=) 5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=) 6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=) 7: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=) 8: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=) 9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=) 10: 95E22156D41211F09B244587DAE4EC9C.roa (hash: KYrtm6svHq9jl59FU2IK5vBTxvktgzNEwMV7uGhf3I4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Validity Not Before: Dec 20 03:28:13 2025 GMT Not After : Dec 22 03:28:13 2025 GMT Subject: CN=694617cd-a368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ce:61:4b:88:d9:2d:de:6b:96:80:b7:58:be: 7f:01:e5:dc:fe:ae:92:ef:ce:67:5f:c8:02:57:c5: d7:f9:14:97:68:70:13:3d:fa:8e:d8:f2:f5:d7:b6: f8:ed:e3:9a:a2:18:50:04:b2:ec:42:78:d0:3f:2c: dd:f8:6c:de:10:b2:09:61:88:fd:c3:db:0e:cc:2e: 19:f1:a3:12:7b:de:f8:2e:3d:cd:8c:a4:70:50:df: 36:8b:8f:ce:6e:11:12:23:41:e7:e7:ae:08:fb:a8: e7:73:59:17:cb:56:86:40:16:13:a8:2a:de:d6:8c: 35:39:51:16:23:c4:54:d2:c0:40:e4:4d:2b:ff:57: 28:cf:17:55:a7:68:61:f2:32:da:fa:23:db:43:49: 78:4d:38:45:d5:00:b4:94:37:9d:f0:08:3c:60:20: d4:8b:3e:e3:cb:ca:bf:69:44:b2:ac:d1:aa:b7:c9: a1:ea:bd:fc:23:a0:3f:55:e5:cf:f5:34:e2:9f:89: 0f:2e:2f:25:cb:7b:20:6b:1a:8d:fd:6e:63:e7:25: 86:42:2e:dc:55:a2:e1:3f:5f:f2:68:fc:9f:80:97: b0:48:e5:a2:7b:2c:0d:a1:a2:5e:85:6e:d0:35:ef: 84:94:52:50:69:58:07:87:6d:71:d8:13:42:0a:5b: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3E:20:24:85:B6:A9:C3:40:98:A6:82:A6:1A:DF:1B:3C:E3:28:77 X509v3 Authority Key Identifier: keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:21:5c:fb:f6:71:60:4f:70:6b:ed:08:92:32:b7:c6:1e:0d: 58:82:94:c7:14:22:3f:d2:08:8b:b2:14:04:0e:21:5f:44:28: c3:64:e8:1e:4d:1e:e1:e6:6c:65:4f:1c:d9:1e:23:6e:11:f0: 5a:49:f6:d5:00:ef:a0:58:d5:28:50:a4:3e:28:fb:3f:f3:45: 48:c5:e3:f7:1e:fb:64:9b:96:55:1b:2f:ec:6f:72:f0:a1:4a: e2:58:29:01:bc:f2:92:a6:2c:aa:92:d6:ef:85:e5:cd:64:e8: c4:5e:04:f0:9b:4e:64:6b:f0:5b:a8:d4:d4:fa:16:fb:7d:f6: 25:02:1b:bc:35:ea:72:5c:97:e0:3e:19:95:9a:18:6f:4b:49: 3e:c0:58:30:bc:82:6a:bf:36:ec:b9:6c:12:f2:36:97:e5:7c: 38:a1:52:0c:d8:2c:9f:9b:b1:bd:da:2a:da:da:ae:0f:f9:17: db:fd:d8:b0:1c:12:b9:c1:de:11:cf:7a:28:85:2f:33:29:86: ca:74:75:ce:c3:17:72:d1:23:b5:5c:0f:fe:45:16:56:9f:e3: e8:59:4d:5f:d3:50:ab:54:0f:45:5a:35:cd:85:2c:0b:3e:83: f5:6a:3e:a3:05:b7:03:b3:58:10:e7:64:5a:90:10:38:c2:25: 12:0d:ab:27 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy MTlBOEM0MTIxQjAeFw0yNTEyMjAwMzI4MTNaFw0yNTEyMjIwMzI4MTNaMBgxFjAU BgNVBAMTDTY5NDYxN2NkLWEzNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQD5zmFLiNkt3muWgLdYvn8B5dz+rpLvzmdfyAJXxdf5FJdocBM9+o7Y8vXX tvjt45qiGFAEsuxCeNA/LN34bN4QsglhiP3D2w7MLhnxoxJ73vguPc2MpHBQ3zaL j85uERIjQefnrgj7qOdzWRfLVoZAFhOoKt7WjDU5URYjxFTSwEDkTSv/VyjPF1Wn aGHyMtr6I9tDSXhNOEXVALSUN53wCDxgINSLPuPLyr9pRLKs0aq3yaHqvfwjoD9V 5c/1NOKfiQ8uLyXLeyBrGo39bmPnJYZCLtxVouE/X/Jo/J+Al7BI5aJ7LA2hol6F btA174SUUlBpWAeHbXHYE0IKW9GVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWD4g JIW2qcNAmKaCphrfGzzjKHcwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSIVz79nFgT3Br7QiSMrfGHg1YgpTH FCI/0giLshQEDiFfRCjDZOgeTR7h5mxlTxzZHiNuEfBaSfbVAO+gWNUoUKQ+KPs/ 80VIxeP3Hvtkm5ZVGy/sb3LwoUriWCkBvPKSpiyqktbvheXNZOjEXgTwm05ka/Bb qNTU+hb7ffYlAhu8NepyXJfgPhmVmhhvS0k+wFgwvIJqvzbsuWwS8jaX5Xw4oVIM 2Cyfm7G92ira2q4P+Rfb/diwHBK5wd4Rz3oohS8zKYbKdHXOwxdy0SO1XA/+RRZW n+PoWU1f01CrVA9FWjXNhSwLPoP1aj6jBbcDs1gQ52RakBA4wiUSDasn -----END CERTIFICATE-----Generated at Sat Dec 20 14:41:59 2025 by rpki-client