This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer File: AaNx1Ie11VLkTUu-yVarlsMlge0.cer (raw, json) Hash identifier: 9sTKl+1EV2yMZRqAHSqtF9lPI61pJ6UJ8lCUY3buCTE= Subject key identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E5D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:41:01 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.216.38.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15965 (0x3e5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:41:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36DCAE3AF, serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:55:c7:ed:38:42:bb:14:cb:29:82:15:eb: ec:cc:16:e0:ae:d7:aa:80:e8:87:3c:4a:73:d4:47: d9:90:ff:c1:86:a0:18:15:46:cb:93:9e:fa:8a:ed: e9:f2:60:e7:01:4a:39:b4:58:42:d3:63:86:23:9e: dd:66:b1:86:d1:6d:fc:9d:d9:fd:f5:5f:45:07:39: 02:e3:9f:32:b4:62:39:ab:0b:0a:fb:ce:b5:bb:04: 14:cd:a2:dc:fb:04:98:b2:10:a2:d4:84:83:3a:1a: 43:b9:dc:e2:a6:67:87:ed:91:05:76:2b:f2:e7:ba: 80:6c:11:fb:a3:09:cd:5d:5d:1b:02:fc:5d:3b:1a: ab:6e:a2:a6:30:ec:9b:2a:1c:11:18:3d:ba:40:4a: e3:19:92:b7:83:3e:cc:39:83:14:20:fe:4c:91:07: fa:0f:9c:54:f2:e7:f7:f9:44:61:2f:90:1c:4a:3b: ed:fd:9d:d8:37:fd:6f:71:1a:f7:b1:10:a2:02:f7: e2:67:f3:b8:b8:25:6f:f6:78:1d:59:50:71:0f:d3: 46:05:d8:20:54:22:18:6f:31:93:8b:ed:95:83:19: 9d:a8:e0:c3:0b:03:89:39:90:8e:29:be:ee:38:17: 72:82:c7:25:64:62:06:78:82:a1:4b:df:3a:c2:cf: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft sbgp-ipAddrBlock: critical IPv4: 102.216.38.0/24 Signature Algorithm: sha256WithRSAEncryption c6:71:ce:93:75:ca:34:c9:ac:5b:55:1b:7b:c0:12:29:80:d3: 61:69:65:ea:b4:6a:f3:a8:f8:55:3f:2e:cd:df:61:b8:93:38: a3:12:a8:80:f5:6b:53:a2:23:6c:36:21:30:6f:a0:c7:a2:38: 27:1e:60:9d:8d:2b:e5:aa:9d:dd:4d:96:71:4a:ae:2a:11:cd: 72:23:8e:38:b2:8b:e8:70:b5:ca:d5:77:4b:07:5e:5a:17:5f: 56:de:9e:8e:b5:17:a3:7d:64:64:5d:47:a2:7f:ae:89:0c:fb: 91:76:b1:57:f2:4e:05:ad:10:a8:0f:3c:9a:4d:1a:fc:62:89: 8b:d1:03:b7:f4:05:75:a0:e2:ab:e7:75:99:84:17:d7:63:15: e7:c1:79:5d:1b:51:c5:3c:07:ae:27:9f:72:c5:cf:41:8e:bd: eb:84:88:19:72:86:be:01:68:5f:4e:ca:b0:07:d4:df:fc:fe: 2e:37:df:6f:1d:80:7a:ac:f1:ce:73:7a:ac:ba:23:cf:7b:af: 7f:c1:29:4f:24:3c:63:c4:9b:66:54:11:24:6f:79:30:38:a3: 98:ef:f9:d5:65:2e:bb:95:5c:e2:cd:8d:d0:82:09:91:97:2d: 3b:c5:25:0b:e8:9f:64:67:63:3d:6c:db:83:f7:4b:03:59:b0: 46:70:78:78 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgICPl0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDQxMDFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkRDQUUzQUYxMTAvBgNVBAUTKDAxQTM3MUQ0ODdCNUQ1NTJFNDRENEJC RUM5NTZBQjk2QzMyNTgxRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDffVXH7ThCuxTLKYIV6+zMFuCu16qA6Ic8SnPUR9mQ/8GGoBgVRsuTnvqK7eny YOcBSjm0WELTY4Yjnt1msYbRbfyd2f31X0UHOQLjnzK0YjmrCwr7zrW7BBTNotz7 BJiyEKLUhIM6GkO53OKmZ4ftkQV2K/LnuoBsEfujCc1dXRsC/F07GqtuoqYw7Jsq HBEYPbpASuMZkreDPsw5gxQg/kyRB/oPnFTy5/f5RGEvkBxKO+39ndg3/W9xGvex EKIC9+Jn87i4JW/2eB1ZUHEP00YF2CBUIhhvMZOL7ZWDGZ2o4MMLA4k5kI4pvu44 F3KCxyVkYgZ4gqFL3zrCzyQXAgMBAAGjggLvMIIC6zAdBgNVHQ4EFgQUAaNx1Ie1 1VLkTUu+yVarlsMlge0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZEQ0FFMy84MzBENjNGQUYwOEMx MUVDOTIyMDFBOEVGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RENBRTMvODMwRDYzRkFGMDhDMTFFQzkyMjAxQThFRjEyMjI0NjgvQWFOeDFJ ZTExVkxrVFV1LXlWYXJsc01sZ2UwLm1mdDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGbYJjANBgkqhkiG9w0BAQsFAAOCAQEAxnHOk3XKNMmsW1Ube8ASKYDT YWll6rRq86j4VT8uzd9huJM4oxKogPVrU6IjbDYhMG+gx6I4Jx5gnY0r5aqd3U2W cUquKhHNciOOOLKL6HC1ytV3SwdeWhdfVt6ejrUXo31kZF1Hon+uiQz7kXaxV/JO Ba0QqA88mk0a/GKJi9EDt/QFdaDiq+d1mYQX12MV58F5XRtRxTwHriefcsXPQY69 64SIGXKGvgFoX07KsAfU3/z+Ljffbx2AeqzxznN6rLojz3uvf8EpTyQ8Y8SbZlQR JG95MDijmO/51WUuu5Vc4s2N0IIJkZctO8UlC+ifZGdjPWzbg/dLA1mwRnB4eA== -----END CERTIFICATE-----Generated at Sun Jan 25 04:22:44 2026 by rpki-client