This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer File: 4QUiVzRX-tnLWm9cGdaMzm1unCM.cer (raw, json) Hash identifier: MVVJCCCMhGsZTJKTEu57jCyjzrazlY4muycbkrjztQU= Subject key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C97 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:29:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.209.176.0/22 IP: 102.212.200.0/22 IP: 102.215.24.0/22 IP: 102.222.132.0/22 IP: 2c0f:e908::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15511 (0x3c97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:29:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A0CB0AF, serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:cc:61:79:06:2f:fd:4e:19:39:f8:dd:b7: 97:14:ea:80:04:92:e2:3a:07:36:5b:d8:1d:0d:5a: fd:88:9c:90:b3:3d:87:d5:48:b8:aa:b8:fd:c6:95: da:07:6c:23:16:fb:3e:47:7e:9f:55:5b:d7:a4:32: 7a:a7:7a:3a:68:56:cd:ac:57:1c:02:3b:7f:b5:79: d7:bb:18:77:4c:1e:6a:f0:3b:0e:e6:29:fb:e6:bd: ba:f0:d6:27:cf:78:66:6d:50:1b:8c:83:b1:b6:da: 4b:c3:5b:6c:38:56:85:55:59:eb:a3:0b:7e:5f:a4: fb:59:ed:69:3a:13:b2:e8:03:ff:53:ee:bc:47:07: 16:b5:2e:8d:85:66:7b:a5:e8:f7:71:fb:55:4d:d8: 53:9f:a0:9e:43:87:5f:0c:49:f2:b5:90:c2:08:08: 27:eb:70:32:8b:26:cd:18:42:48:a7:08:94:7e:a5: c0:61:eb:79:96:32:95:bd:b0:e4:44:17:64:53:83: 84:10:a1:8e:98:df:b9:c2:e4:a3:7f:1b:64:9c:b9: 69:cb:77:a4:b6:6c:86:ea:54:d0:cb:ee:1f:d9:e5: 97:18:8a:65:95:e9:6d:ba:4c:50:e0:07:7a:aa:ca: bb:1c:3d:03:6c:b5:83:ff:be:e1:8d:ac:6c:f0:c7: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft sbgp-ipAddrBlock: critical IPv4: 102.209.176.0/22 102.212.200.0/22 102.215.24.0/22 102.222.132.0/22 IPv6: 2c0f:e908::/32 Signature Algorithm: sha256WithRSAEncryption 88:fb:13:4a:29:2e:0a:bf:f0:bc:f7:6b:76:aa:e4:76:b9:91: cb:1f:e1:26:85:52:4a:f5:48:60:38:94:88:f1:75:5d:5e:2e: 9b:dc:cc:af:6b:e8:62:13:38:3b:4c:f7:7c:da:86:aa:6c:57: 71:98:0d:81:c3:a3:bd:48:c5:ef:02:20:7d:64:47:32:f5:a5: a1:82:87:c1:b4:df:f8:17:16:7b:fe:e6:be:31:fb:bc:96:de: 94:41:22:7d:6d:05:75:5a:a8:8b:39:0e:da:f0:c6:ff:b9:39: 53:b3:89:52:20:b6:27:c3:79:8f:e5:64:4d:b4:d8:66:dc:e2: c9:ba:57:a6:54:63:9e:c2:53:b9:9e:fd:67:2a:ec:69:94:4f: 23:b3:93:62:5c:02:eb:9e:a9:92:93:82:46:78:c3:65:08:e1: 4e:ea:3e:76:b9:0c:61:1b:76:6e:8c:bb:ff:40:63:da:5a:c3: d6:48:c6:77:ef:a9:f7:c5:a0:00:34:41:f4:cb:32:00:4e:56: 2f:e8:fe:b7:17:08:a8:91:e4:19:5f:ee:3d:d2:e8:5c:29:2d: 12:4e:f5:4f:93:c7:9e:58:b0:9a:f8:ee:a7:78:29:ff:0c:8e: d3:2f:2c:40:54:a3:5b:07:91:a6:44:cd:68:ae:af:98:05:87: 9c:ba:79:e9 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgICPJcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzI5NDlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkEwQ0IwQUYxMTAvBgNVBAUTKEUxMDUyMjU3MzQ1N0ZBRDlDQjVBNkY1 QzE5RDY4Q0NFNkQ2RTlDMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC44sxheQYv/U4ZOfjdt5cU6oAEkuI6BzZb2B0NWv2InJCzPYfVSLiquP3GldoH bCMW+z5Hfp9VW9ekMnqnejpoVs2sVxwCO3+1ede7GHdMHmrwOw7mKfvmvbrw1ifP eGZtUBuMg7G22kvDW2w4VoVVWeujC35fpPtZ7Wk6E7LoA/9T7rxHBxa1Lo2FZnul 6Pdx+1VN2FOfoJ5Dh18MSfK1kMIICCfrcDKLJs0YQkinCJR+pcBh63mWMpW9sORE F2RTg4QQoY6Y37nC5KN/G2ScuWnLd6S2bIbqVNDL7h/Z5ZcYimWV6W26TFDgB3qq yrscPQNstYP/vuGNrGzwx6T7AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU4QUiVzRX +tnLWm9cGdaMzm1unCMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMENCMC8xODJGNDk4NEMyMTgx MUVCOTk0RTQyNzFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTBDQjAvMTgyRjQ5ODRDMjE4MTFFQjk5NEU0MjcxRjhBRUEyMjgvNFFVaVZ6 UlgtdG5MV205Y0dkYU16bTF1bkNNLm1mdDBABggrBgEFBQcBBwEB/wQxMC8wHgQC AAEwGAMEAmbRsAMEAmbUyAMEAmbXGAMEAmbehDANBAIAAjAHAwUALA/pCDANBgkq hkiG9w0BAQsFAAOCAQEAiPsTSikuCr/wvPdrdqrkdrmRyx/hJoVSSvVIYDiUiPF1 XV4um9zMr2voYhM4O0z3fNqGqmxXcZgNgcOjvUjF7wIgfWRHMvWloYKHwbTf+BcW e/7mvjH7vJbelEEifW0FdVqoizkO2vDG/7k5U7OJUiC2J8N5j+VkTbTYZtziybpX plRjnsJTuZ79ZyrsaZRPI7OTYlwC656pkpOCRnjDZQjhTuo+drkMYRt2boy7/0Bj 2lrD1kjGd++p98WgADRB9MsyAE5WL+j+txcIqJHkGV/uPdLoXCktEk71T5PHnliw mvjup3gp/wyO0y8sQFSjWweRpkTNaK6vmAWHnLp56Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:44:19 2026 by rpki-client