This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer File: ARf_NlB776Kb324d58jVMKSepOM.cer (raw, json) Hash identifier: Ynj116lEE9GpzFw5H9HJCXMihhiazmO2/Zi45M2QYUo= Subject key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3949 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:25:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328032 IP: 2c0f:f238::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14665 (0x3949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:25:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:be:2c:6e:c1:ab:e7:70:f2:b6:8f:51:e5: 42:e4:49:4b:f6:33:87:6c:ec:c9:9d:2f:77:d6:95: 37:89:9c:0c:b5:b6:35:e4:49:8a:80:ed:9d:aa:c9: 40:eb:3b:37:c5:24:25:5c:36:50:e4:64:d1:47:6c: d4:1f:c2:58:25:a3:7f:dd:37:11:32:4e:dc:ba:a1: 0f:a4:6a:65:8d:49:9e:8c:c4:7e:eb:fe:79:7d:fc: bc:f5:d8:b6:72:1a:3f:73:56:14:d7:dd:00:24:25: fa:69:f4:5a:f8:42:0d:00:19:33:20:52:69:f5:ec: 6b:88:d0:a4:50:21:1f:a5:69:6c:fb:10:8f:c5:1f: df:60:3c:45:52:0c:7f:dc:2e:57:28:3e:fb:3b:88: fd:be:07:25:53:10:5c:e0:35:6d:b3:fc:8c:14:14: f6:81:44:46:ab:04:6d:bc:4f:37:31:69:27:87:8a: 8e:db:6f:fe:3d:ca:51:7a:76:fc:ab:b2:e8:50:c9: 80:0b:42:15:ef:77:f8:35:ac:2a:18:52:71:4a:b5: 92:9e:b9:63:4f:db:28:9b:ba:49:80:18:29:ea:49: eb:6b:46:a8:57:02:8c:4b:35:4b:5c:8b:14:b9:ae: 0b:bc:6a:57:ef:10:8e:8b:e1:19:3a:be:18:e6:a0: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328032 sbgp-ipAddrBlock: critical IPv6: 2c0f:f238::/32 Signature Algorithm: sha256WithRSAEncryption 0b:ff:e0:55:a9:72:be:a9:2e:f1:34:16:8b:38:4d:c5:99:04: 3a:47:25:d8:1e:ab:f0:77:94:e1:6b:ca:f7:47:35:f7:d4:e7: d5:82:f1:4e:64:bf:60:86:07:10:d3:f0:65:91:15:56:76:07: ce:0b:e3:24:f0:0e:5c:8b:b5:c9:9e:fa:b9:61:c5:43:fd:c9: b6:1e:81:7d:60:28:03:1a:e4:6e:bb:52:b4:ea:fc:4b:a6:da: c5:e2:cf:30:3a:50:44:3d:4d:d3:84:8d:79:f0:fa:bb:3c:7f: 68:73:dc:af:59:8a:67:01:b2:ff:75:50:20:4c:2f:cc:fd:7a: 67:c6:94:11:32:93:1b:00:2c:3d:5c:44:a2:19:7b:da:f3:28: b6:88:9f:fe:af:1a:bc:07:53:c4:e0:70:3d:ad:8a:87:70:5b: 69:50:dc:12:53:2a:ed:a9:58:d8:5a:3b:05:47:86:d9:5f:86: 0d:05:00:5b:72:23:ac:dd:cf:7a:50:5c:94:3b:43:d7:47:76: 0b:a8:af:25:91:42:c5:4b:ea:30:1c:04:8c:f6:e1:ca:e1:87: 3d:4f:0a:a3:76:36:b1:b3:a6:39:96:70:5e:bb:30:aa:d5:ac: 1e:83:1f:28:0b:f5:7c:8e:3f:50:1c:59:05:c1:9f:90:20:00: 4a:23:5f:e1 -----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgICOUkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTI1MTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU2MTc3QUYxMTAvBgNVBAUTKDAxMTdGRjM2NTA3QkVGQTI5QkRGNkUx REU3QzhENTMwQTQ5RUE0RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAYr4sbsGr53Dyto9R5ULkSUv2M4ds7MmdL3fWlTeJnAy1tjXkSYqA7Z2qyUDr OzfFJCVcNlDkZNFHbNQfwlglo3/dNxEyTty6oQ+kamWNSZ6MxH7r/nl9/Lz12LZy Gj9zVhTX3QAkJfpp9Fr4Qg0AGTMgUmn17GuI0KRQIR+laWz7EI/FH99gPEVSDH/c LlcoPvs7iP2+ByVTEFzgNW2z/IwUFPaBREarBG28TzcxaSeHio7bb/49ylF6dvyr suhQyYALQhXvd/g1rCoYUnFKtZKeuWNP2yibukmAGCnqSetrRqhXAoxLNUtcixS5 rgu8alfvEI6L4Rk6vhjmoLcrAgMBAAGjggMMMIIDCDAdBgNVHQ4EFgQUARf/NlB7 76Kb324d58jVMKSepOMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NjE3Ny84RjUxQUI4RTgzQkYx MUU2ODFBQkVDMzdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTYxNzcvOEY1MUFCOEU4M0JGMTFFNjgxQUJFQzM3RjhBRUEyMjgvQVJmX05s Qjc3NktiMzI0ZDU4alZNS1NlcE9NLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAWAwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/I4MA0GCSqGSIb3 DQEBCwUAA4IBAQAL/+BVqXK+qS7xNBaLOE3FmQQ6RyXYHqvwd5Tha8r3RzX31OfV gvFOZL9ghgcQ0/BlkRVWdgfOC+Mk8A5ci7XJnvq5YcVD/cm2HoF9YCgDGuRuu1K0 6vxLptrF4s8wOlBEPU3ThI158Pq7PH9oc9yvWYpnAbL/dVAgTC/M/XpnxpQRMpMb ACw9XESiGXva8yi2iJ/+rxq8B1PE4HA9rYqHcFtpUNwSUyrtqVjYWjsFR4bZX4YN BQBbciOs3c96UFyUO0PXR3YLqK8lkULFS+owHASM9uHK4Yc9Twqjdjaxs6Y5lnBe uzCq1awegx8oC/V8jj9QHFkFwZ+QIABKI1/h -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:58 2026 by rpki-client