This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer File: 2LbhjGXdH5bypUTKz8mAhq75KW8.cer (raw, json) Hash identifier: mhAjmvHEfgzZOEgoRKEjxcVJFZSdsjb6uPx3twJMjPM= Subject key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F2A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:15:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327790 IP: 154.73.248.0/22 IP: 2c0f:f760::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16170 (0x3f2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:15:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FA15DAF, serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:90:f6:77:cb:a4:5c:c3:fc:3f:1c:c4:8f: bc:50:ff:44:9d:45:54:88:fa:2b:ae:d3:7b:30:56: 64:da:13:c5:68:42:ad:a3:b6:d4:d3:cb:20:f1:5a: a6:57:76:00:ae:f2:b9:f6:2d:00:d5:0d:31:89:84: d8:e1:a9:2f:ea:dd:93:5d:6b:c4:34:c2:f2:fc:60: 4f:60:dd:84:99:bb:50:98:7a:3f:1f:b0:c8:2f:5f: 9d:fb:20:6a:67:83:c2:c5:b5:aa:da:56:da:8f:9d: d3:ef:01:19:52:4c:dd:b6:49:ec:2b:8c:c8:1a:3f: e2:07:c8:8b:d8:67:2a:9c:0d:d8:38:b3:eb:a6:3c: e3:47:0a:fd:77:f1:9b:06:4d:e6:f5:7a:74:98:b1: a7:6c:79:67:ed:90:b2:41:af:78:40:58:f1:41:bc: c8:70:b6:2d:ad:19:32:23:61:12:b2:74:3e:f1:58: 1f:46:ff:98:ae:ca:67:18:6a:4f:02:af:7b:e3:5e: a3:e6:94:e9:91:7f:19:48:4e:87:2b:47:18:5c:40: 92:d6:f1:ee:90:ea:48:05:d4:65:4b:d6:ae:54:8a: 06:81:ab:cf:2c:2f:12:bb:fe:5e:43:48:42:39:9b: 33:4b:7f:43:fe:7c:3b:92:a2:1b:a1:ac:60:2a:f5: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327790 sbgp-ipAddrBlock: critical IPv4: 154.73.248.0/22 IPv6: 2c0f:f760::/32 Signature Algorithm: sha256WithRSAEncryption 05:e1:65:c1:70:bd:56:31:f0:4f:fc:57:73:68:a2:04:8d:bf: d8:df:4f:cb:61:b6:f8:26:a5:ca:09:08:71:b2:9e:a5:00:8e: 2c:35:cf:ed:72:77:d1:33:0b:48:b2:dd:5b:0b:e8:70:a2:67: ef:bd:52:0a:3e:81:6c:96:f6:ec:b3:b2:92:3e:0c:76:99:93: 57:e8:2d:34:b0:cb:49:72:b1:f0:69:fe:18:1a:4e:47:94:cc: b6:ff:b2:48:79:36:8b:32:64:d6:f4:ea:f0:ee:27:46:1c:76: bd:07:f0:5e:a8:34:b5:56:b0:47:7a:57:14:43:e1:c9:18:b9: 03:9e:15:a2:52:65:c9:15:19:84:17:d3:1b:a4:24:a3:c9:8c: 40:73:14:42:87:4c:f9:fb:94:03:fc:0c:b3:ed:01:3d:1e:ac: 7d:90:90:34:00:c0:60:37:1d:bd:22:5c:10:bc:0a:d6:a0:29: f2:b7:f5:aa:bb:48:44:15:42:cd:18:9d:7f:45:c8:df:12:52: 69:34:38:57:f7:ad:a2:47:42:30:00:d1:fb:18:24:53:6d:62: 20:06:81:ea:9a:45:72:ca:b3:f9:2e:2f:88:90:4c:31:00:11: 13:e3:64:e3:ec:fc:25:4b:55:0e:5e:97:86:bf:93:d2:13:c7: f4:e6:1d:98 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPyowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTE1MjVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZBMTVEQUYxMTAvBgNVBAUTKEQ4QjZFMThDNjVERDFGOTZGMkE1NDRD QUNGQzk4MDg2QUVGOTI5NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDp5D2d8ukXMP8PxzEj7xQ/0SdRVSI+iuu03swVmTaE8VoQq2jttTTyyDxWqZX dgCu8rn2LQDVDTGJhNjhqS/q3ZNda8Q0wvL8YE9g3YSZu1CYej8fsMgvX537IGpn g8LFtaraVtqPndPvARlSTN22SewrjMgaP+IHyIvYZyqcDdg4s+umPONHCv138ZsG Teb1enSYsadseWftkLJBr3hAWPFBvMhwti2tGTIjYRKydD7xWB9G/5iuymcYak8C r3vjXqPmlOmRfxlITocrRxhcQJLW8e6Q6kgF1GVL1q5UigaBq88sLxK7/l5DSEI5 mzNLf0P+fDuSohuhrGAq9Ti5AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU2LbhjGXd H5bypUTKz8mAhq75KW8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQTE1RC84ODRGMjU0QTYyMzcx MUVCQjc5MUE2NTlGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkExNUQvODg0RjI1NEE2MjM3MTFFQkI3OTFBNjU5RjhBRUEyMjgvMkxiaGpH WGRINWJ5cFVUS3o4bUFocTc1S1c4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAG4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKaSfgwDQQCAAIwBwMF ACwP92AwDQYJKoZIhvcNAQELBQADggEBAAXhZcFwvVYx8E/8V3NoogSNv9jfT8th tvgmpcoJCHGynqUAjiw1z+1yd9EzC0iy3VsL6HCiZ++9Ugo+gWyW9uyzspI+DHaZ k1foLTSwy0lysfBp/hgaTkeUzLb/skh5NosyZNb06vDuJ0Ycdr0H8F6oNLVWsEd6 VxRD4ckYuQOeFaJSZckVGYQX0xukJKPJjEBzFEKHTPn7lAP8DLPtAT0erH2QkDQA wGA3Hb0iXBC8CtagKfK39aq7SEQVQs0YnX9FyN8SUmk0OFf3raJHQjAA0fsYJFNt YiAGgeqaRXLKs/kuL4iQTDEAERPjZOPs/CVLVQ5el4a/k9ITx/TmHZg= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:13 2026 by rpki-client