This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft File: hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json) Hash identifier: K3dI1PJjGnrifWuL25gSdY20sUWPwJMIpwQiGhHaGoY= Subject key identifier: E7:99:8F:8C:0F:D3:69:BB:A7:28:2C:34:03:3A:E4:8F:2C:FB:43:5A Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40 Certificate issuer: /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640 Certificate serial: 0852 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft Manifest number: 084E Signing time: Mon 22 Dec 2025 01:48:10 +0000 Manifest this update: Mon 22 Dec 2025 01:48:09 +0000 Manifest next update: Wed 24 Dec 2025 01:48:09 +0000 Files and hashes: 1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: E3dl+Qy3XhGH2uYmryk1yWZhYPvD8mzu2rHfeYXiD5M=) 2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=) 3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 24 Dec 2025 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640 Validity Not Before: Dec 22 01:48:09 2025 GMT Not After : Dec 24 01:48:09 2025 GMT Subject: CN=6948a35a-f422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:85:10:37:f4:5d:7b:8c:be:e3:e4:ac:45: a9:fc:7e:51:2f:2c:68:24:6d:88:a2:ad:f5:a9:26: 9d:bd:02:7d:86:5b:7a:52:e2:fc:20:6f:ed:71:ba: 75:7c:ee:6d:a9:0a:bd:05:d2:3f:67:af:12:ff:cb: 62:cf:80:f7:23:ad:1d:4b:2d:10:0a:cb:6c:11:42: be:ba:1e:89:04:a1:90:d4:7d:18:96:25:9c:61:ef: 25:12:6f:33:69:f7:ae:cd:ee:ae:ff:47:ae:0b:73: b3:5f:dc:b5:61:ca:e3:32:4e:f3:36:cb:70:06:09: 86:bf:47:6a:68:8c:a5:4f:30:87:ea:85:91:ac:fc: d6:86:de:28:4b:e3:5e:c2:20:15:84:f7:49:78:96: 6e:3b:2b:eb:ec:55:9d:0c:ff:38:da:7f:b8:ba:8d: f1:07:d6:33:4f:f5:10:04:da:bf:05:6b:a5:50:80: f6:1a:80:c8:69:b5:8f:68:2b:41:f1:f3:f0:28:0a: 0e:55:19:0d:90:de:f7:28:32:3b:5e:af:a1:b9:f1: 71:45:c1:15:db:0f:56:9a:51:4d:1d:f0:ce:ba:2c: dc:89:7c:db:4c:e9:90:8a:15:cc:c4:46:92:9a:4e: f9:4e:b3:3c:11:92:6a:65:67:8b:0f:5d:00:a6:c6: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:8F:8C:0F:D3:69:BB:A7:28:2C:34:03:3A:E4:8F:2C:FB:43:5A X509v3 Authority Key Identifier: keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:5f:4c:79:11:88:d6:4a:33:c1:20:90:a5:17:26:60:e7:aa: 86:92:0f:fd:3b:28:b0:21:96:ee:ff:a7:c5:d3:6d:02:7a:82: 6b:ed:57:db:19:bb:4c:88:d4:ed:83:7b:8f:15:49:05:94:5b: 87:c3:d9:23:be:c2:42:7a:fc:6d:c3:2a:53:b2:3b:7e:39:9f: 7e:d2:a2:1e:12:39:ed:56:6e:36:79:69:67:9f:74:ac:98:d8: d9:1d:a5:21:45:9d:08:3a:e2:9c:c9:a1:5c:bc:2c:7d:d9:38: cb:51:9c:43:b9:c7:64:b0:e7:70:ed:e6:39:9b:98:5c:3b:21: 59:01:23:c0:f4:8a:24:a7:6d:03:54:be:2c:e0:97:ac:bb:01: e4:a0:c0:71:88:35:29:6e:76:3e:e7:62:38:b5:1a:27:3f:dc: c5:f2:d5:3d:d3:ce:e5:71:ec:84:24:cb:c9:f7:36:b6:62:01: d6:b6:24:d2:ae:71:67:8e:61:ef:b3:a9:0e:b8:14:3d:84:ec: 27:68:99:c0:bc:db:6a:09:08:68:4c:49:09:9e:8b:2a:70:46: 84:19:95:27:31:2f:85:d1:1f:68:f3:f7:ef:8f:08:2b:10:96: 2e:d5:3d:d6:02:f9:91:f6:ef:64:0a:c0:a6:e5:82:cd:58:91: 92:a1:25:d7 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjUxNzNBRjExMC8GA1UEBRMoODVBOTVBREQyQ0Y1ODc3NDAzMEI2QTlCOTNCNDEx Mzg2RkUzMDY0MDAeFw0yNTEyMjIwMTQ4MDlaFw0yNTEyMjQwMTQ4MDlaMBgxFjAU BgNVBAMTDTY5NDhhMzVhLWY0MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC8SoUQN/Rde4y+4+SsRan8flEvLGgkbYiirfWpJp29An2GW3pS4vwgb+1x unV87m2pCr0F0j9nrxL/y2LPgPcjrR1LLRAKy2wRQr66HokEoZDUfRiWJZxh7yUS bzNp967N7q7/R64Lc7Nf3LVhyuMyTvM2y3AGCYa/R2pojKVPMIfqhZGs/NaG3ihL 417CIBWE90l4lm47K+vsVZ0M/zjaf7i6jfEH1jNP9RAE2r8Fa6VQgPYagMhptY9o K0Hx8/AoCg5VGQ2Q3vcoMjter6G58XFFwRXbD1aaUU0d8M66LNyJfNtM6ZCKFczE RpKaTvlOszwRkmplZ4sPXQCmxs8NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU55mP jA/TabunKCw0Azrkjyz7Q1owHwYDVR0jBBgwFoAUhala3Sz1h3QDC2qbk7QROG/j BkAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkY1MTczL0M2MTk0RkRDODYxRDExRUFCQUNFNUYyOEY4QUVBMjI4L2hhbGEz U3oxaDNRREMycWJrN1FST0dfakJrQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2hhbGEzU3oxaDNRREMycWJrN1FST0dfakJrQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RjUxNzMvQzYxOTRGREM4NjFEMTFFQUJBQ0U1RjI4RjhB RUEyMjgvaGFsYTNTejFoM1FEQzJxYms3UVJPR19qQmtBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUX0x5EYjWSjPBIJClFyZg56qGkg/9 OyiwIZbu/6fF020CeoJr7VfbGbtMiNTtg3uPFUkFlFuHw9kjvsJCevxtwypTsjt+ OZ9+0qIeEjntVm42eWlnn3SsmNjZHaUhRZ0IOuKcyaFcvCx92TjLUZxDucdksOdw 7eY5m5hcOyFZASPA9Iokp20DVL4s4JesuwHkoMBxiDUpbnY+52I4tRonP9zF8tU9 087lceyEJMvJ9za2YgHWtiTSrnFnjmHvs6kOuBQ9hOwnaJnAvNtqCQhoTEkJnosq cEaEGZUnMS+F0R9o8/fvjwgrEJYu1T3WAvmR9u9kCsCm5YLNWJGSoSXX -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:25 2025 by rpki-client