This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer File: BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer (raw, json) Hash identifier: kqU5Xbee1pL/QnQJvets5TMgql0naZyB8zs85iyJuPY= Subject key identifier: 04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DCF Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37019 AS: 327780 IP: 41.138.240.0/20 IP: 41.207.96.0/19 IP: 2c0f:fad8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15823 (0x3dcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:18:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36C72A2AF, serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:fd:7b:c7:35:fe:f8:dc:be:d0:b3:c9:d2: 15:71:d6:fd:b2:a8:1c:d5:a0:04:09:03:45:57:df: 91:84:c6:75:a1:0a:4e:6b:d7:88:10:64:ca:7a:5e: 1c:8a:4f:d6:e2:64:a0:ca:1a:08:3f:ca:45:d3:4e: 9e:64:33:14:a1:94:46:f4:68:0a:c5:d3:f2:24:af: 6b:9a:8b:ac:fd:07:fe:6f:f1:89:97:9a:5e:3f:d8: 4d:c3:be:a2:5f:21:fc:53:3e:d9:69:aa:d1:73:39: 9b:bc:49:6a:f1:c8:11:35:4f:fe:5e:a5:72:c9:bf: c3:0e:89:a1:3c:0e:dd:d9:83:cb:4a:5c:c0:df:69: 37:48:5c:87:dc:ba:18:f1:f4:32:c0:37:5d:96:2d: 91:18:45:99:40:75:32:f0:ba:44:43:92:af:21:71: 71:6f:f1:5e:55:39:18:11:2c:fb:fb:79:d7:59:02: a8:7d:6a:b9:b5:a2:1a:0f:08:6e:05:26:6a:b3:51: 4e:31:3b:97:9a:9e:2f:72:0f:55:fb:47:a3:1d:d4: d4:72:70:b5:74:d7:80:ec:40:73:25:54:cf:e7:fe: 71:19:32:fa:9d:92:2e:22:f4:17:e0:4e:70:6e:0a: 91:ab:36:d2:eb:ad:ff:9b:cd:ff:64:33:f2:09:23: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37019 327780 sbgp-ipAddrBlock: critical IPv4: 41.138.240.0/20 41.207.96.0/19 IPv6: 2c0f:fad8::/32 Signature Algorithm: sha256WithRSAEncryption 34:74:7d:b7:e6:29:dc:8a:cb:01:f1:30:a0:7a:9f:ff:e1:cb: 37:46:d3:9d:45:d6:9c:fd:9c:35:df:f5:2f:7a:ae:c7:64:e9: 92:51:2d:64:34:78:67:73:2b:9e:3e:71:4c:58:c0:12:5c:f9: f7:8d:e7:70:3d:00:92:44:fb:71:d3:e7:ab:c6:72:47:9e:d8: c1:95:5b:b8:c0:34:d7:b9:6d:7f:e8:68:9b:09:36:2c:4b:49: 62:8a:73:7d:da:20:3c:53:04:64:41:6d:ac:56:af:64:09:7c: 8f:95:e8:d6:ec:6a:b5:23:66:9c:6c:0b:58:9e:59:27:f3:b6: bc:94:87:7b:fe:3d:ba:73:77:db:36:91:33:b0:7f:1f:14:77: 72:a6:f0:38:20:10:64:20:de:e2:78:a4:79:0b:14:4c:c3:89: aa:b1:bc:64:58:e8:4e:b1:28:29:72:13:f3:35:64:02:21:bf: 92:0e:64:e1:a9:c7:42:18:13:da:b3:90:06:0e:40:33:76:95: 98:01:a5:6d:f9:13:06:16:3e:c5:bf:f5:1a:f0:3f:fb:83:89: 59:74:09:8f:02:13:d3:c5:b9:f4:63:f1:ed:a6:c9:ef:f9:d4: ac:6b:cc:6a:09:e1:70:f2:e9:d6:e1:2e:2f:93:ce:d8:6d:fd: 62:ad:49:c9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICPc8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDE4NDJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkM3MkEyQUYxMTAvBgNVBAUTKDA0NUI1MjUwNDNDQjQzRUVBQkRBN0Yy NDYzN0Y0MDQwODkxOUI2RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ9/17xzX++Ny+0LPJ0hVx1v2yqBzVoAQJA0VX35GExnWhCk5r14gQZMp6XhyK T9biZKDKGgg/ykXTTp5kMxShlEb0aArF0/Ikr2uai6z9B/5v8YmXml4/2E3DvqJf IfxTPtlpqtFzOZu8SWrxyBE1T/5epXLJv8MOiaE8Dt3Zg8tKXMDfaTdIXIfcuhjx 9DLAN12WLZEYRZlAdTLwukRDkq8hcXFv8V5VORgRLPv7eddZAqh9arm1ohoPCG4F JmqzUU4xO5eani9yD1X7R6Md1NRycLV014DsQHMlVM/n/nEZMvqdki4i9BfgTnBu CpGrNtLrrf+bzf9kM/IJI/TjAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUBFtSUEPL Q+6r2n8kY39AQIkZtvUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDNzJBMi9CQTBDMDIzQURGRDUx MUYwQTdCOTBDQ0VEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QzcyQTIvQkEwQzAyM0FERkQ1MTFGMEE3QjkwQ0NFREFFNEVDOUMvQkZ0U1VF UExRLTZyMm44a1kzOUFRSWtadHZVLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkJsCAwUAZDA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBCmK8AMEBSnP YDANBAIAAjAHAwUALA/62DANBgkqhkiG9w0BAQsFAAOCAQEANHR9t+Yp3IrLAfEw oHqf/+HLN0bTnUXWnP2cNd/1L3qux2TpklEtZDR4Z3Mrnj5xTFjAElz5943ncD0A kkT7cdPnq8ZyR57YwZVbuMA017ltf+homwk2LEtJYopzfdogPFMEZEFtrFavZAl8 j5Xo1uxqtSNmnGwLWJ5ZJ/O2vJSHe/49unN32zaRM7B/HxR3cqbwOCAQZCDe4nik eQsUTMOJqrG8ZFjoTrEoKXIT8zVkAiG/kg5k4anHQhgT2rOQBg5AM3aVmAGlbfkT BhY+xb/1GvA/+4OJWXQJjwIT08W59GPx7abJ7/nUrGvMagnhcPLp1uEuL5PO2G39 Yq1JyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:23 2026 by rpki-client