This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer File: 3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer (raw, json) Hash identifier: mnaDB6Vm8FMiQuYJQYgYH3NN7s8JPHoNRUBJTQ3GhKY= Subject key identifier: DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 378C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:09:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37627 IP: 154.65.0.0/22 IP: 196.61.56.0/21 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14220 (0x378c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:09:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F361609CAF, serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:78:02:84:36:c5:dc:e0:6d:00:c7:69:b5: ff:58:4f:40:1c:dd:7c:20:64:93:85:00:c5:ba:a6: f4:45:32:4a:e4:f1:e9:04:97:78:3d:93:59:70:28: 2f:b8:70:f1:58:46:07:05:83:11:ab:c4:5a:50:ea: 16:84:35:d8:c5:2c:96:9e:63:7e:9f:2e:d2:e4:af: 88:4a:8d:c9:ed:17:2a:ad:f6:06:8e:3b:41:59:21: fa:44:03:bf:ef:eb:f0:8d:fd:c3:11:86:19:6f:90: 6e:59:c8:be:45:41:f8:b2:10:ef:6d:37:f0:0f:dc: 91:b8:71:84:43:65:e7:96:ba:b4:f3:0f:19:1b:ec: 26:cc:ca:db:36:23:2c:69:74:fc:8c:f4:c9:46:98: 3c:e0:fd:5b:15:3a:e2:f3:82:30:42:de:89:5b:48: 10:5a:a0:ca:a3:10:6a:d4:f6:37:05:72:47:33:17: df:cd:74:1d:f5:e7:15:40:28:9d:62:45:54:22:02: ff:ba:0d:89:43:12:b4:68:b7:b3:61:43:f9:c4:04: 9e:ba:20:83:39:2a:22:74:0c:75:92:0a:c5:aa:50: 9d:98:d0:1f:81:4d:cd:b4:11:19:7a:8d:c2:e8:92: b2:6d:5d:ee:71:84:19:87:3a:64:41:6f:3d:3c:e3: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37627 sbgp-ipAddrBlock: critical IPv4: 154.65.0.0/22 196.61.56.0/21 Signature Algorithm: sha256WithRSAEncryption 62:47:1f:fc:fb:2b:b6:a0:e8:54:a1:e1:46:d9:a7:73:dd:3b: ad:76:d1:0b:9a:83:ba:58:8e:7c:76:a9:11:0a:08:38:a2:2e: b1:36:3f:08:03:91:53:20:fa:e4:b2:de:0a:34:04:57:d1:84: 35:f8:29:bf:14:f5:cf:56:cf:76:d4:a1:f3:44:4b:4a:df:95: a0:f4:c3:f7:8b:06:2a:91:e8:3e:90:7d:fd:73:06:77:ec:b4: b5:dd:ed:d6:bc:da:44:9e:c8:cd:42:c2:1b:88:24:21:d4:5c: 66:38:44:45:03:40:71:66:9e:ec:39:f9:71:10:6e:67:96:0e: 86:bc:d2:11:0a:b9:95:2e:c3:ea:39:2b:7e:32:78:17:0c:2b: a9:d7:f0:5f:66:b1:0f:56:18:fb:90:a3:f0:68:51:44:cf:50: 39:39:5e:fd:ed:c5:e0:82:44:6c:20:7e:21:6c:75:87:64:72: fd:96:7d:60:cd:25:62:5e:63:30:cf:76:13:41:2f:58:1f:f0: b2:7c:b7:bc:9a:29:77:c8:12:67:e3:c8:36:00:ac:79:1d:0f: 07:90:0e:6a:50:b9:cd:91:2d:e2:d0:95:9a:5f:23:00:0e:3d: 48:d6:1d:eb:46:c8:5e:64:51:22:8c:37:33:b5:9d:ee:ed:42: c9:fb:78:e4 -----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgICN4wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDA5NTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE2MDlDQUYxMTAvBgNVBAUTKERFREE0QzRGM0EzMTc3QkEyMzZDRTQ2 QkQ3RkY3OTJFM0M2QkMzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIuXgChDbF3OBtAMdptf9YT0Ac3XwgZJOFAMW6pvRFMkrk8ekEl3g9k1lwKC+4 cPFYRgcFgxGrxFpQ6haENdjFLJaeY36fLtLkr4hKjcntFyqt9gaOO0FZIfpEA7/v 6/CN/cMRhhlvkG5ZyL5FQfiyEO9tN/AP3JG4cYRDZeeWurTzDxkb7CbMyts2Iyxp dPyM9MlGmDzg/VsVOuLzgjBC3olbSBBaoMqjEGrU9jcFckczF9/NdB315xVAKJ1i RVQiAv+6DYlDErRot7NhQ/nEBJ66IIM5KiJ0DHWSCsWqUJ2Y0B+BTc20ERl6jcLo krJtXe5xhBmHOmRBbz084zntAgMBAAGjggMRMIIDDTAdBgNVHQ4EFgQU3tpMTzox d7ojbORr1/95Ljxrw/QwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNjA5Qy84QzFCNjE1MjgzRUUx MUVBQkU3QTMxNjFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTYwOUMvOEMxQjYxNTI4M0VFMTFFQUJFN0EzMTYxRjhBRUEyMjgvM3RwTVR6 b3hkN29qYk9ScjFfOTVManhyd19RLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkvswJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAKaQQADBAPEPTgwDQYJ KoZIhvcNAQELBQADggEBAGJHH/z7K7ag6FSh4UbZp3PdO6120Quag7pYjnx2qREK CDiiLrE2PwgDkVMg+uSy3go0BFfRhDX4Kb8U9c9Wz3bUofNES0rflaD0w/eLBiqR 6D6Qff1zBnfstLXd7da82kSeyM1CwhuIJCHUXGY4REUDQHFmnuw5+XEQbmeWDoa8 0hEKuZUuw+o5K34yeBcMK6nX8F9msQ9WGPuQo/BoUUTPUDk5Xv3txeCCRGwgfiFs dYdkcv2WfWDNJWJeYzDPdhNBL1gf8LJ8t7yaKXfIEmfjyDYArHkdDweQDmpQuc2R LeLQlZpfIwAOPUjWHetGyF5kUSKMNzO1ne7tQsn7eOQ= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:52 2026 by rpki-client