This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer File: 2F_mgUS9YwNoWB-XESFackVW1NQ.cer (raw, json) Hash identifier: sSymW7gb7sfKn4M7cQgVrsmXKouUiKpRVUzz5BnY11A= Subject key identifier: D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F74 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 08 Jan 2026 15:44:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.204.16.0/22 IP: 2c0f:3fc0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16244 (0x3f74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 8 15:44:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A1FBCAF, serialNumber=D85FE68144BD630368581F9711215A724556D4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:33:29:ab:99:da:99:fb:b0:37:7e:0a:19: 02:1f:8e:ed:e3:a7:ff:b7:c6:c2:36:27:e1:e0:ea: e5:25:44:87:d6:12:f5:2a:b9:dc:a5:84:b1:95:6c: 2c:02:da:c8:a8:b6:f4:13:68:1c:a3:32:0b:03:c9: 59:4c:aa:29:02:d8:db:57:81:ad:41:ca:fb:da:15: 97:b7:f3:d4:e9:14:b6:93:47:55:15:8b:a6:47:fe: 0b:af:62:41:d2:99:6f:50:93:2e:4c:3b:c5:86:0d: c5:dd:7a:e7:a4:d4:ae:12:d8:dd:cb:3f:7c:78:e6: b2:9d:bc:73:4a:4b:ae:6a:16:4e:9f:10:41:2d:74: 99:55:5e:77:15:d1:f9:94:2d:26:cd:e2:80:db:43: f8:9f:37:0e:66:48:18:63:64:93:a6:a3:55:60:b0: 74:34:8b:d3:e2:9e:a7:9e:65:55:c9:2e:a5:d1:37: 81:26:85:2c:bc:b0:a0:6a:0f:d7:34:1f:45:8d:1b: 0a:ed:24:ee:7b:75:fb:90:61:31:98:a5:a8:a1:82: dd:64:13:9b:90:81:ce:4d:43:67:d9:38:d5:48:81: ac:69:f1:a6:db:1f:9a:89:93:5a:d2:45:54:75:f3: 06:dd:13:e9:fb:17:e9:a4:c1:e4:c8:da:71:2b:df: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft sbgp-ipAddrBlock: critical IPv4: 102.204.16.0/22 IPv6: 2c0f:3fc0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:61:79:7c:96:d8:0a:a6:29:0d:20:bb:c3:2a:f9:6c:89:fa: b6:a4:29:07:84:1e:35:96:35:f8:87:32:67:43:6a:e1:c6:b9: db:c5:b8:95:88:b7:1c:dd:e3:b6:15:af:d5:b0:70:66:ff:42: 80:80:eb:80:43:c3:fd:0c:34:1d:90:2b:7e:71:83:96:50:46: ed:33:7a:06:0c:c2:52:5b:ed:d4:d3:5e:ad:3f:26:5a:47:f5: 56:c2:bb:9b:fe:c2:f6:dc:59:b8:b6:4e:02:60:79:99:91:43: 10:66:c0:65:aa:96:7a:52:10:87:39:08:e7:ce:1a:1f:18:7c: 9a:62:99:9b:f1:14:e5:3b:7f:81:d3:4c:d3:1f:3a:86:6d:ca: b2:8c:a7:08:ce:65:3b:ff:db:9f:4b:ac:2f:e2:30:55:25:96: a7:c6:f1:b9:3d:f1:ba:7c:5b:04:ae:4e:bb:b6:df:43:1d:cc: 60:4b:a5:62:2a:e9:16:cd:8a:86:46:72:03:58:ab:3a:9b:d0: e1:88:45:ae:6b:0f:47:05:be:2b:b3:f9:49:74:bb:1f:52:34: 1e:cd:e2:ab:2a:b7:58:4c:55:5d:8c:97:c1:b5:b7:2e:2a:30: 32:13:8f:5b:47:29:8d:4c:18:bf:56:fb:48:53:50:3a:d5:8a: 9b:7b:4d:f0 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICP3QwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDgxNTQ0MDhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkExRkJDQUYxMTAvBgNVBAUTKEQ4NUZFNjgxNDRCRDYzMDM2ODU4MUY5 NzExMjE1QTcyNDU1NkQ0RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6SjMpq5namfuwN34KGQIfju3jp/+3xsI2J+Hg6uUlRIfWEvUqudylhLGVbCwC 2siotvQTaByjMgsDyVlMqikC2NtXga1ByvvaFZe389TpFLaTR1UVi6ZH/guvYkHS mW9Qky5MO8WGDcXdeuek1K4S2N3LP3x45rKdvHNKS65qFk6fEEEtdJlVXncV0fmU LSbN4oDbQ/ifNw5mSBhjZJOmo1VgsHQ0i9PinqeeZVXJLqXRN4EmhSy8sKBqD9c0 H0WNGwrtJO57dfuQYTGYpaihgt1kE5uQgc5NQ2fZONVIgaxp8abbH5qJk1rSRVR1 8wbdE+n7F+mkweTI2nEr3yO1AgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQU2F/mgUS9 YwNoWB+XESFackVW1NQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMUZCQy9EOUQ5NTgxQ0VDQTgx MUYwQkREOEQyQzNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTFGQkMvRDlEOTU4MUNFQ0E4MTFGMEJERDhEMkMzREFFNEVDOUMvMkZfbWdV UzlZd05vV0ItWEVTRmFja1ZXMU5RLm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbMEDANBAIAAjAHAwUALA8/wDANBgkqhkiG9w0BAQsFAAOCAQEAWmF5 fJbYCqYpDSC7wyr5bIn6tqQpB4QeNZY1+IcyZ0Nq4ca528W4lYi3HN3jthWv1bBw Zv9CgIDrgEPD/Qw0HZArfnGDllBG7TN6BgzCUlvt1NNerT8mWkf1VsK7m/7C9txZ uLZOAmB5mZFDEGbAZaqWelIQhzkI584aHxh8mmKZm/EU5Tt/gdNM0x86hm3Ksoyn CM5lO//bn0usL+IwVSWWp8bxuT3xunxbBK5Ou7bfQx3MYEulYirpFs2KhkZyA1ir OpvQ4YhFrmsPRwW+K7P5SXS7H1I0Hs3iqyq3WExVXYyXwbW3LiowMhOPW0cpjUwY v1b7SFNQOtWKm3tN8A== -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:36 2026 by rpki-client