This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft File: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json) Hash identifier: vsFaECUKDACs8o95x+N5RZ4cGVjvjZ0xyBwbQohl6Z0= Subject key identifier: 07:BC:4C:40:09:17:8A:9C:6C:34:C2:23:1F:0A:43:1B:BD:B1:6D:48 Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D Certificate issuer: /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D Certificate serial: 0391 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft Manifest number: 038E Signing time: Wed 31 Dec 2025 03:41:24 +0000 Manifest this update: Wed 31 Dec 2025 03:41:23 +0000 Manifest next update: Fri 02 Jan 2026 03:41:23 +0000 Files and hashes: 1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: VIvrpzPtncgoCb9Q0sGcC43DfqyMfsbMGX/j9QLdOf4=) 2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=) 3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 02 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D Validity Not Before: Dec 31 03:41:23 2025 GMT Not After : Jan 2 03:41:23 2026 GMT Subject: CN=69549b64-0d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:a3:71:4b:db:78:2e:20:79:40:f7:e8:4e: 36:9b:45:ed:01:1f:47:57:2d:a6:6b:3f:c6:b1:f3: 82:9d:2b:bd:1a:72:55:25:2a:32:31:14:19:29:c3: e3:7e:30:8b:ca:ac:e5:f2:32:5d:d8:64:c5:79:90: e3:92:ab:8e:7e:e2:95:72:f3:81:f8:da:f3:05:c6: a3:35:94:18:d2:59:5f:d8:e8:db:f0:c3:63:86:ae: e9:c5:0b:d6:78:78:16:1e:5e:ce:72:b5:9a:72:fc: e2:92:c6:dc:23:ce:e8:0e:95:8a:55:6d:a9:2d:53: 12:5e:ad:e5:61:17:b1:76:17:e1:86:0c:d4:f2:db: d0:5b:01:86:1d:dc:73:18:a9:ad:a7:34:ef:36:0f: 2a:de:12:b3:1c:90:19:ee:d4:23:cf:37:ee:9b:ab: db:c5:2e:44:c8:6e:1f:16:a3:84:45:7d:3c:99:4a: cc:be:0f:21:86:b0:79:51:4b:ea:e4:80:1e:53:2d: a4:ee:78:f6:2f:db:5f:44:61:20:36:49:d8:ec:2f: 94:cc:d2:05:d7:6a:48:fd:06:bb:f7:d5:70:92:8a: 6a:24:f0:6f:91:df:69:a1:c8:c9:32:a4:0d:ea:ea: c6:a8:5b:5d:09:97:db:f9:14:b5:48:d5:79:a7:b9: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:4C:40:09:17:8A:9C:6C:34:C2:23:1F:0A:43:1B:BD:B1:6D:48 X509v3 Authority Key Identifier: keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:88:62:64:09:f6:6b:d9:be:00:8d:ca:12:4d:1a:3e:e3:00: 2f:cb:3c:cf:16:fa:c6:81:09:80:28:0b:99:5d:9a:f2:dc:8f: d4:db:33:75:45:ea:b6:f7:95:5a:44:6c:80:44:85:e9:dd:13: d6:f6:c2:c4:d1:40:ce:65:e7:c1:ae:67:9e:77:90:7f:68:60: 53:88:d1:b4:2d:ff:37:61:ae:d0:20:71:7e:eb:52:89:b2:27: 73:21:b3:f5:f3:48:d1:61:b8:f8:68:35:2f:d1:32:20:51:9a: 71:2d:f1:26:60:1a:5c:e6:12:cf:c4:58:ac:26:35:9d:05:99: 47:52:5f:4a:6b:ba:12:5b:62:94:a7:61:0d:9a:bf:f1:35:bf: b6:72:2e:51:31:90:bb:f0:8a:b9:1e:32:10:06:2b:e0:0b:8b: a5:43:31:a9:c8:14:f4:8e:f5:24:d5:dc:3e:ad:ba:37:7e:fd: e5:64:7c:c8:fa:f4:a2:d9:34:ab:62:fd:fa:55:64:7d:31:b6: b8:87:27:40:d5:87:e1:b5:9d:be:36:1c:49:f4:78:42:54:d0: 82:59:58:37:1d:91:51:e0:1c:b8:d9:42:99:cf:d1:ab:2b:0f: 5c:93:72:c5:3e:76:23:db:71:93:0c:95:48:81:e7:58:ca:7b: bb:17:35:0f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjE0M0ZBRjExMC8GA1UEBRMoMUU4OTRFQzBCMjg2QTZFREQ5MzExN0Q3QTNCRENE OEY1NzcxMDE5RDAeFw0yNTEyMzEwMzQxMjNaFw0yNjAxMDIwMzQxMjNaMBgxFjAU BgNVBAMTDTY5NTQ5YjY0LTBkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDBPaNxS9t4LiB5QPfoTjabRe0BH0dXLaZrP8ax84KdK70aclUlKjIxFBkp w+N+MIvKrOXyMl3YZMV5kOOSq45+4pVy84H42vMFxqM1lBjSWV/Y6Nvww2OGrunF C9Z4eBYeXs5ytZpy/OKSxtwjzugOlYpVbaktUxJereVhF7F2F+GGDNTy29BbAYYd 3HMYqa2nNO82DyreErMckBnu1CPPN+6bq9vFLkTIbh8Wo4RFfTyZSsy+DyGGsHlR S+rkgB5TLaTuePYv219EYSA2SdjsL5TM0gXXakj9Brv31XCSimok8G+R32mhyMky pA3q6saoW10Jl9v5FLVI1XmnuZwJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUB7xM QAkXipxsNMIjHwpDG72xbUgwHwYDVR0jBBgwFoAUHolOwLKGpu3ZMRfXo73Nj1dx AZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkYxNDNGLzU0QkJENzQ0MzE0NDExRUVBRDQ5MzEzRTRBRDlFNkZDL0hvbE93 TEtHcHUzWk1SZlhvNzNOajFkeEFaMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hvbE93TEtHcHUzWk1SZlhvNzNOajFkeEFaMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RjE0M0YvNTRCQkQ3NDQzMTQ0MTFFRUFENDkzMTNFNEFE OUU2RkMvSG9sT3dMS0dwdTNaTVJmWG83M05qMWR4QVowLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmiGJkCfZr2b4AjcoSTRo+4wAvyzzP FvrGgQmAKAuZXZry3I/U2zN1Req295VaRGyARIXp3RPW9sLE0UDOZefBrmeed5B/ aGBTiNG0Lf83Ya7QIHF+61KJsidzIbP180jRYbj4aDUv0TIgUZpxLfEmYBpc5hLP xFisJjWdBZlHUl9Ka7oSW2KUp2ENmr/xNb+2ci5RMZC78Iq5HjIQBivgC4ulQzGp yBT0jvUk1dw+rbo3fv3lZHzI+vSi2TSrYv36VWR9Mba4hydA1YfhtZ2+NhxJ9HhC VNCCWVg3HZFR4By42UKZz9GrKw9ck3LFPnYj23GTDJVIgedYynu7FzUP -----END CERTIFICATE-----Generated at Wed Dec 31 13:28:56 2025 by rpki-client