This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft File: HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json) Hash identifier: C7ecElIWOD41sR7X/G+AgTYBmKE10i75LMhekZq6l/E= Subject key identifier: 7C:A4:AE:F5:76:D0:E6:DA:3F:37:60:C2:54:2B:25:0E:79:16:A3:E9 Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9 Certificate issuer: /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9 Certificate serial: 03E6 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft Manifest number: 03E2 Signing time: Thu 25 Dec 2025 03:27:10 +0000 Manifest this update: Thu 25 Dec 2025 03:27:09 +0000 Manifest next update: Sat 27 Dec 2025 03:27:09 +0000 Files and hashes: 1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: neP0AIjinlSlkVgn/J+F6LqcOOEf3u16mcy77qQBSDo=) 2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=) 3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=) 4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 27 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9 Validity Not Before: Dec 25 03:27:09 2025 GMT Not After : Dec 27 03:27:09 2025 GMT Subject: CN=694caf0e-bf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:14:f1:4b:5d:db:5a:61:d3:0f:d1:4e:cd: 4c:55:9a:cd:0f:c9:74:a2:ac:09:f0:23:7f:d1:88: 98:cf:65:81:07:bb:bf:d7:5f:af:05:7c:81:85:2f: 59:77:54:0b:86:7d:5b:05:30:ae:1d:4f:15:3a:72: 56:ab:be:4e:99:5e:ec:33:93:a6:93:83:4c:2a:9e: e3:cb:12:79:a6:1a:e6:93:f2:bc:f1:11:7a:90:02: be:7a:f3:ea:4d:c8:f1:0d:44:92:90:b3:67:1a:92: 56:b9:70:fc:f1:60:0e:bc:a2:15:53:6d:44:65:79: ac:b5:3c:03:bf:4c:97:6c:a7:ff:94:7e:b5:87:ba: bd:38:5c:3e:ba:28:8c:e3:8d:4a:0a:27:7b:4a:75: 84:8f:56:b7:f1:69:e6:4b:1f:3a:60:16:29:ec:41: fd:9c:c7:dc:10:dc:cd:39:35:9e:63:c5:73:15:fd: 9f:86:18:56:ad:41:c0:11:1e:51:7b:21:03:4c:4c: 0a:f8:be:ff:9c:7f:ad:3e:10:5f:13:91:c8:f5:5b: 40:0e:08:e0:43:f3:c8:97:3d:a6:92:1b:3d:2f:c5: d2:4b:35:7a:0e:bf:c9:2e:f4:9d:e2:e1:00:45:91: 38:48:46:70:fb:7f:08:68:52:05:f2:2b:0b:d8:86: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A4:AE:F5:76:D0:E6:DA:3F:37:60:C2:54:2B:25:0E:79:16:A3:E9 X509v3 Authority Key Identifier: keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:bb:79:db:09:80:c3:05:0b:c7:06:11:9f:f9:07:87:6e: 50:ae:dd:32:62:f4:a8:91:f4:3d:e9:cb:9a:75:b1:91:99:da: 3a:97:fc:83:08:47:b1:a2:61:18:0b:54:71:c1:09:04:90:30: 59:19:85:2d:7e:78:b4:a2:7e:bd:6f:79:1b:39:64:05:49:7c: f6:7a:5a:0b:c6:a1:be:b5:fe:91:a5:7a:5e:63:b8:f5:e1:6e: 8d:2a:08:c6:fc:d7:af:e6:93:9d:1d:81:6b:7f:57:5b:9a:b2: 45:27:bc:84:61:5b:ac:ba:57:78:c0:8b:28:25:b5:9b:37:a3: 3c:b8:2a:54:6e:93:79:6f:3d:3f:81:b3:aa:4b:af:43:d3:96: f6:39:e5:4d:ea:65:9d:68:d2:3c:67:ee:11:3d:10:37:36:4f: 46:dc:51:b5:c8:e5:48:65:1b:ea:de:2f:c3:0c:3a:dc:d7:65: b4:77:42:fe:b2:1c:00:2a:9e:a8:45:da:05:c9:5e:82:68:73: 50:da:5d:33:47:59:f6:dc:38:f7:9e:2d:9a:9f:e0:bd:9e:e8: 38:bb:a9:42:51:f8:21:ea:4f:f1:49:09:cd:42:6a:85:f5:18: 8e:f8:20:6f:79:08:b4:7c:2f:a8:3a:70:97:6e:fe:08:92:a3: 39:bd:50:9c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjUwNURBRjExMC8GA1UEBRMoMUREQjhFOTMxRjU3QTkyODE3NjQ5ODMwQzRFRDhB REQ3NEVGNDlGOTAeFw0yNTEyMjUwMzI3MDlaFw0yNTEyMjcwMzI3MDlaMBgxFjAU BgNVBAMTDTY5NGNhZjBlLWJmMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDrZhTxS13bWmHTD9FOzUxVms0PyXSirAnwI3/RiJjPZYEHu7/XX68FfIGF L1l3VAuGfVsFMK4dTxU6clarvk6ZXuwzk6aTg0wqnuPLEnmmGuaT8rzxEXqQAr56 8+pNyPENRJKQs2cakla5cPzxYA68ohVTbURleay1PAO/TJdsp/+UfrWHur04XD66 KIzjjUoKJ3tKdYSPVrfxaeZLHzpgFinsQf2cx9wQ3M05NZ5jxXMV/Z+GGFatQcAR HlF7IQNMTAr4vv+cf60+EF8Tkcj1W0AOCOBD88iXPaaSGz0vxdJLNXoOv8ku9J3i 4QBFkThIRnD7fwhoUgXyKwvYhncjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfKSu 9XbQ5to/N2DCVCslDnkWo+kwHwYDVR0jBBgwFoAUHduOkx9XqSgXZJgwxO2K3XTv SfkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkY1MDVELzFGQjFCNEIwRUU1RjExRURBODIxOUM1QTRBRDlFNkZDL0hkdU9r eDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hkdU9reDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RjUwNUQvMUZCMUI0QjBFRTVGMTFFREE4MjE5QzVBNEFE OUU2RkMvSGR1T2t4OVhxU2dYWkpnd3hPMkszWFR2U2ZrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCROLt52wmAwwULxwYRn/kHh25Qrt0y YvSokfQ96cuadbGRmdo6l/yDCEexomEYC1RxwQkEkDBZGYUtfni0on69b3kbOWQF SXz2eloLxqG+tf6RpXpeY7j14W6NKgjG/Nev5pOdHYFrf1dbmrJFJ7yEYVusuld4 wIsoJbWbN6M8uCpUbpN5bz0/gbOqS69D05b2OeVN6mWdaNI8Z+4RPRA3Nk9G3FG1 yOVIZRvq3i/DDDrc12W0d0L+shwAKp6oRdoFyV6CaHNQ2l0zR1n23Dj3ni2an+C9 nug4u6lCUfgh6k/xSQnNQmqF9RiO+CBveQi0fC+oOnCXbv4IkqM5vVCc -----END CERTIFICATE-----Generated at Thu Dec 25 17:08:57 2025 by rpki-client