This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer File: CNLFTntRy8c0NN0AYFFFEi8ay2c.cer (raw, json) Hash identifier: x/sBBRUAw+Yk7kDYSzkozazvkHLWG4uaSpz/UeS/rGw= Subject key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3810 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:33:07 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328434 IP: 102.68.40.0/21 IP: 2c0f:ecd8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14352 (0x3810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:33:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:c0:f2:50:a2:36:5d:45:a8:dc:70:74:72: a6:17:52:5e:ca:11:e9:36:a1:11:29:e0:c3:2d:af: 15:d8:c9:19:12:1a:c9:9a:fa:6d:11:ff:26:4e:1b: 86:03:06:24:c0:35:90:9a:a9:32:28:f0:70:b4:8c: ba:ba:5e:2d:27:42:b2:ee:5e:d1:ce:a4:a3:47:a3: 8f:3a:b3:92:95:08:c0:1a:5f:e5:d4:bf:3c:a9:98: 94:21:df:52:f3:6c:c9:32:c5:c2:82:38:b9:46:3f: b3:95:9c:7f:e6:8d:4f:27:20:b7:e1:d0:02:1b:40: d0:81:81:d2:7d:61:e8:13:e7:d3:0c:67:08:47:54: b5:e7:39:d1:67:51:6e:97:2b:42:96:5d:bf:67:59: b1:5c:6a:9f:8e:d3:4a:90:0c:6e:48:13:32:89:b8: 0d:35:2c:8a:89:57:fb:80:29:47:03:c5:97:9f:91: 3b:cb:88:0c:c5:98:3d:2e:37:a3:51:53:23:82:c8: 44:a1:ff:f1:e4:66:7b:13:ef:29:af:95:cb:8a:8e: cb:a3:e3:23:cd:47:cb:24:77:85:78:74:be:79:52: d8:e1:ea:c1:d6:d7:31:3e:6c:6d:4e:9f:4f:84:fa: d1:7e:de:07:63:bd:53:45:a1:4f:3d:12:66:f7:2d: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328434 sbgp-ipAddrBlock: critical IPv4: 102.68.40.0/21 IPv6: 2c0f:ecd8::/32 Signature Algorithm: sha256WithRSAEncryption a6:dc:89:92:6c:60:2c:cd:1f:8b:a9:0f:75:3c:5a:fa:96:27: 61:d3:ca:c5:ce:8e:93:e1:24:63:db:e1:0f:77:dc:31:ba:94: 18:99:03:2d:ad:3b:5b:a3:1b:e4:e2:00:e9:e0:8e:36:d5:6e: 1f:01:aa:5d:2f:a6:b5:28:4f:b8:76:c9:e2:71:43:29:70:1d: ca:c8:ae:4a:69:94:ac:a8:26:16:32:1e:dd:b1:e7:dd:f4:2c: 7d:aa:1e:20:10:ea:83:27:ad:f3:bb:2e:2c:39:a3:4e:54:62: 04:9e:fb:a2:50:96:e9:e9:2e:7a:a2:bc:65:0d:5f:96:79:66: 1b:ee:0b:46:9f:2c:1a:db:89:c0:67:f9:80:0d:ba:ff:45:7d: 4e:22:9e:2e:d1:c9:88:51:72:58:09:21:80:15:d5:cf:67:24: 54:e0:22:7f:4c:55:65:30:d1:cc:09:c2:de:99:dc:0e:33:03: b1:c1:6b:e0:57:38:41:65:9b:50:35:17:c7:e0:e5:6a:5f:e5: 95:96:1c:7d:85:81:82:29:99:fb:27:c0:b3:ca:ad:7a:a9:b2: e3:59:1f:95:c6:de:95:c2:74:79:f0:3a:66:fe:24:e1:59:3a: c6:8c:a4:15:5f:ac:78:32:29:c8:52:0b:d0:72:fe:e5:40:e9: 10:25:32:23 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOBAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDMzMDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjI1QTE1QUYxMTAvBgNVBAUTKDA4RDJDNTRFN0I1MUNCQzczNDM0REQw MDYwNTE0NTEyMkYxQUNCNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNMcDyUKI2XUWo3HB0cqYXUl7KEek2oREp4MMtrxXYyRkSGsma+m0R/yZOG4YD BiTANZCaqTIo8HC0jLq6Xi0nQrLuXtHOpKNHo486s5KVCMAaX+XUvzypmJQh31Lz bMkyxcKCOLlGP7OVnH/mjU8nILfh0AIbQNCBgdJ9YegT59MMZwhHVLXnOdFnUW6X K0KWXb9nWbFcap+O00qQDG5IEzKJuA01LIqJV/uAKUcDxZefkTvLiAzFmD0uN6NR UyOCyESh//HkZnsT7ymvlcuKjsuj4yPNR8skd4V4dL55Utjh6sHW1zE+bG1On0+E +tF+3gdjvVNFoU89Emb3LcqxAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUCNLFTntR y8c0NN0AYFFFEi8ay2cwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNUExNS85MkMzQ0UwODJFQ0Qx MUU5ODAyMzAzMjBGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjVBMTUvOTJDM0NFMDgyRUNEMTFFOTgwMjMwMzIwRjhBRUEyMjgvQ05MRlRu dFJ5OGMwTk4wQVlGRkZFaThheTJjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAvIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmRCgwDQQCAAIwBwMF ACwP7NgwDQYJKoZIhvcNAQELBQADggEBAKbciZJsYCzNH4upD3U8WvqWJ2HTysXO jpPhJGPb4Q933DG6lBiZAy2tO1ujG+TiAOngjjbVbh8Bql0vprUoT7h2yeJxQylw HcrIrkpplKyoJhYyHt2x5930LH2qHiAQ6oMnrfO7Liw5o05UYgSe+6JQlunpLnqi vGUNX5Z5ZhvuC0afLBrbicBn+YANuv9FfU4ini7RyYhRclgJIYAV1c9nJFTgIn9M VWUw0cwJwt6Z3A4zA7HBa+BXOEFlm1A1F8fg5Wpf5ZWWHH2FgYIpmfsnwLPKrXqp suNZH5XG3pXCdHnwOmb+JOFZOsaMpBVfrHgyKchSC9By/uVA6RAlMiM= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:48 2026 by rpki-client