This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer File: -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer (raw, json) Hash identifier: uU/N5qyw0IRMbfNGym6m4vIxI6CJYFe/2zpOwmPQ/qk= Subject key identifier: F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EB4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:55:12 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329305 IP: 102.211.116.0/22 IP: 2c0f:5440::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16052 (0x3eb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:55:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EA516AF, serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:af:74:3f:90:1c:11:43:93:e0:36:80:62: e4:68:b0:12:32:1a:a8:3b:d0:68:94:d1:25:04:a9: d6:d7:11:77:0f:bb:70:b0:8d:93:c5:c7:9c:7a:71: 63:34:21:44:c0:25:fb:e7:35:62:77:35:97:1e:d1: 6b:47:94:a0:0f:a7:ae:e3:41:b7:6f:f3:37:d3:eb: db:11:c4:cf:6a:b9:24:58:f0:0e:03:14:fb:24:64: 1b:bb:4d:b9:02:1f:85:e4:e6:98:d8:16:fe:41:31: 15:8c:c4:f7:5b:10:0a:33:2f:c9:43:d4:70:44:2d: 6b:a7:08:99:ac:d3:96:49:ee:e7:c2:cd:2e:84:67: dc:30:ef:b0:59:ee:b8:fd:a6:ee:c0:52:98:79:05: ca:f7:84:55:08:13:dd:91:18:04:e0:30:a8:eb:81: 2e:3c:b4:5b:f1:79:76:1f:6b:2e:4a:d9:78:d0:1f: 05:52:ea:1d:35:fc:b7:cd:5c:b2:79:27:99:1c:00: b4:c7:ef:39:e5:a2:d0:cf:9b:4c:97:38:51:ae:50: b7:4c:4d:80:eb:2f:44:e4:74:d0:43:53:9d:aa:5a: c3:b9:89:a6:61:97:4e:97:15:7f:aa:31:8f:33:5c: d8:69:ea:4b:4d:f4:2b:54:80:a7:ca:52:65:94:79: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329305 sbgp-ipAddrBlock: critical IPv4: 102.211.116.0/22 IPv6: 2c0f:5440::/32 Signature Algorithm: sha256WithRSAEncryption 95:c4:d4:13:1d:26:f5:44:dc:1b:a0:7f:9a:08:63:1a:9a:16: 5a:60:2c:6f:ef:d1:c3:6c:0c:0a:65:d4:07:e8:3c:b1:09:4b: 32:89:49:0d:5e:10:65:40:53:87:31:5b:99:af:69:95:3b:04: 88:18:94:ba:4c:df:9b:3a:e3:cd:d0:6f:d1:6d:a8:69:e1:42: ef:68:5d:35:db:b1:dd:39:67:9a:99:78:c9:b9:34:47:f2:9b: 2e:ec:28:00:67:e2:9d:36:3d:1c:13:2b:ce:5d:f4:31:38:31: f2:ce:7e:9e:11:1b:50:e8:72:74:d7:15:4b:48:db:a3:31:0c: ed:11:41:0e:22:46:24:ef:ce:e6:0a:09:1f:41:e3:3a:f3:7d: 11:80:e0:9a:f1:26:7f:30:5b:5c:e6:58:9f:2b:10:c8:db:a0: 38:04:ee:f2:39:31:24:42:b7:67:e5:c0:05:29:c7:06:96:69: 27:1c:55:ec:2b:c6:fa:7d:55:21:96:b7:75:b7:26:ee:5d:b4: 34:a4:ac:15:ba:f6:f3:ca:2f:bb:4d:93:a2:6d:cc:fe:b4:5c: 1f:9c:73:04:9b:1a:c1:3d:1a:11:17:7e:26:e8:dc:f8:60:9a: 58:b6:50:bf:cb:98:8e:7e:72:8c:6f:53:1d:13:d6:24:1c:2a: c9:a8:bf:ec -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPrQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDU1MTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVBNTE2QUYxMTAvBgNVBAUTKEY5NzZCNURERDRCRDM3RDBBRkY0RjY3 NjMxNzZEMkU0QzYzNTFDRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ+K90P5AcEUOT4DaAYuRosBIyGqg70GiU0SUEqdbXEXcPu3CwjZPFx5x6cWM0 IUTAJfvnNWJ3NZce0WtHlKAPp67jQbdv8zfT69sRxM9quSRY8A4DFPskZBu7TbkC H4Xk5pjYFv5BMRWMxPdbEAozL8lD1HBELWunCJms05ZJ7ufCzS6EZ9ww77BZ7rj9 pu7AUph5Bcr3hFUIE92RGATgMKjrgS48tFvxeXYfay5K2XjQHwVS6h01/LfNXLJ5 J5kcALTH7znlotDPm0yXOFGuULdMTYDrL0TkdNBDU52qWsO5iaZhl06XFX+qMY8z XNhp6ktN9CtUgKfKUmWUeTg1AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU+Xa13dS9 N9Cv9PZ2MXbS5MY1HO8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFQTUxNi8xQjkwRDQ0NDE0NzYx MUYwQkQ3N0NGMDk2RUI4QkNDNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUE1MTYvMUI5MEQ0NDQxNDc2MTFGMEJENzdDRjA5NkVCOEJDQzYvLVhhMTNk UzlOOUN2OVBaMk1YYlM1TVkxSE84Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBlkwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm03QwDQQCAAIwBwMF ACwPVEAwDQYJKoZIhvcNAQELBQADggEBAJXE1BMdJvVE3Bugf5oIYxqaFlpgLG/v 0cNsDApl1AfoPLEJSzKJSQ1eEGVAU4cxW5mvaZU7BIgYlLpM35s6483Qb9FtqGnh Qu9oXTXbsd05Z5qZeMm5NEfymy7sKABn4p02PRwTK85d9DE4MfLOfp4RG1DocnTX FUtI26MxDO0RQQ4iRiTvzuYKCR9B4zrzfRGA4JrxJn8wW1zmWJ8rEMjboDgE7vI5 MSRCt2flwAUpxwaWaSccVewrxvp9VSGWt3W3Ju5dtDSkrBW69vPKL7tNk6JtzP60 XB+ccwSbGsE9GhEXfibo3Phgmli2UL/LmI5+coxvUx0T1iQcKsmov+w= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:05 2026 by rpki-client