This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer File: CUDmOCgzNt5cjFpApMI7NPP5ylM.cer (raw, json) Hash identifier: Vb4gZjy8FI+F6A9IOQ2EfCH//sUAzJqn0D7/hSAMZUQ= Subject key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39C3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:44:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37692 IP: 154.16.0.0/16 IP: 154.70.152.0/22 IP: 154.127.48.0/20 IP: 2c0f:f738::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14787 (0x39c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:44:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:e1:85:e4:94:1c:11:48:8b:25:3f:b4:fe: 2b:ce:79:26:38:2c:7b:5c:f9:47:12:85:c2:84:01: 5a:ab:db:65:dc:38:2c:4f:24:b7:76:91:ab:7a:f2: ba:6c:1c:bc:07:99:5c:70:16:69:e6:bb:e6:9f:2d: 70:cf:85:78:5e:f4:09:70:31:d3:e8:87:2f:a7:f7: 76:db:1f:30:5c:2f:e2:52:b8:5b:51:ea:50:be:bf: 18:73:15:6b:2f:55:e3:1e:92:b4:1a:4c:09:a6:f4: 55:fd:a2:7b:f5:77:d7:39:c9:48:b1:97:c3:b3:aa: 9e:fa:e6:e3:e8:c3:89:a4:46:06:7c:b8:a4:a4:7d: 52:bc:7c:16:8a:d1:65:bc:ef:e6:c3:6d:6e:0a:06: 5b:c0:88:a9:d3:d0:79:99:f8:94:d0:86:fa:56:4a: 12:10:54:84:fe:b3:9f:af:65:0b:c2:97:fe:3e:a3: 47:d2:3e:a1:23:a7:b7:cc:aa:53:fa:94:0e:e1:be: 8c:80:17:98:1f:02:12:a2:d3:dd:8c:5a:0b:d3:37: 92:ca:87:3f:43:b4:f4:35:7b:ce:08:3f:d6:41:49: d3:33:a8:9a:4a:b8:45:45:b7:33:60:f9:84:fa:b3: 47:53:db:7a:e1:96:42:94:48:9a:db:6f:9a:1c:3a: 5d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37692 sbgp-ipAddrBlock: critical IPv4: 154.16.0.0/16 154.70.152.0/22 154.127.48.0/20 IPv6: 2c0f:f738::/32 Signature Algorithm: sha256WithRSAEncryption 3a:af:6d:3f:58:1c:50:d3:5a:ff:12:1a:e0:41:a8:33:3c:3e: e8:1f:93:d8:ed:71:9e:c3:27:db:87:d7:5e:e9:57:c6:5a:ae: 1e:85:f8:24:a5:dc:0a:7b:0f:49:93:7b:7d:f5:85:ac:6c:6d: c3:42:aa:ce:ad:85:9e:cc:d1:59:b3:38:3f:cd:1f:07:ef:a6: 48:a3:7e:80:d5:4a:77:ee:8d:6c:06:a6:ca:2b:19:27:b5:57: c8:cb:3a:43:35:40:b6:5f:b7:c9:cb:86:c2:7d:f1:89:25:55: a2:44:f4:c8:0e:5e:f8:92:05:b4:9c:d2:2e:a3:f8:01:47:36: d7:c4:4b:c0:45:1e:52:0c:76:ba:a0:88:1a:92:67:a6:35:4b: a3:af:00:ce:60:98:d3:ed:4c:52:11:c7:82:7a:a1:4b:ba:79: 2c:a1:ca:19:d9:83:fc:90:70:f4:43:8c:aa:10:b2:b8:ce:b1: be:fb:6f:e2:98:69:cc:06:6a:d9:17:96:98:03:67:13:50:18: df:4c:c1:f9:98:01:bf:d7:8a:ea:90:b4:9e:ab:69:52:f4:7f: 95:4f:77:a7:3d:85:88:a1:62:8e:fe:a4:a0:2f:9c:c8:db:36: 81:23:21:9c:29:e0:36:23:ea:07:b9:13:c0:c6:3f:63:63:76: 09:17:87:8c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICOcMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQ0MjFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjgyQjY1QUYxMTAvBgNVBAUTKDA5NDBFNjM4MjgzMzM2REU1QzhDNUE0 MEE0QzIzQjM0RjNGOUNBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU0eGF5JQcEUiLJT+0/ivOeSY4LHtc+UcShcKEAVqr22XcOCxPJLd2kat68rps HLwHmVxwFmnmu+afLXDPhXhe9AlwMdPohy+n93bbHzBcL+JSuFtR6lC+vxhzFWsv VeMekrQaTAmm9FX9onv1d9c5yUixl8Ozqp765uPow4mkRgZ8uKSkfVK8fBaK0WW8 7+bDbW4KBlvAiKnT0HmZ+JTQhvpWShIQVIT+s5+vZQvCl/4+o0fSPqEjp7fMqlP6 lA7hvoyAF5gfAhKi092MWgvTN5LKhz9DtPQ1e84IP9ZBSdMzqJpKuEVFtzNg+YT6 s0dT23rhlkKUSJrbb5ocOl0DAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUCUDmOCgz Nt5cjFpApMI7NPP5ylMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4MkI2NS80RTg1MUUzNERCNTUx MUU4ODVCMjk5NTFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODJCNjUvNEU4NTFFMzREQjU1MTFFODg1QjI5OTUxRjhBRUEyMjgvQ1VEbU9D Z3pOdDVjakZwQXBNSTdOUFA1eWxNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkzwwOQYIKwYBBQUHAQcBAf8EKjAoMBcEAgABMBEDAwCaEAMEAppGmAMEBJp/ MDANBAIAAjAHAwUALA/3ODANBgkqhkiG9w0BAQsFAAOCAQEAOq9tP1gcUNNa/xIa 4EGoMzw+6B+T2O1xnsMn24fXXulXxlquHoX4JKXcCnsPSZN7ffWFrGxtw0Kqzq2F nszRWbM4P80fB++mSKN+gNVKd+6NbAamyisZJ7VXyMs6QzVAtl+3ycuGwn3xiSVV okT0yA5e+JIFtJzSLqP4AUc218RLwEUeUgx2uqCIGpJnpjVLo68AzmCY0+1MUhHH gnqhS7p5LKHKGdmD/JBw9EOMqhCyuM6xvvtv4phpzAZq2ReWmANnE1AY30zB+ZgB v9eK6pC0nqtpUvR/lU93pz2FiKFijv6koC+cyNs2gSMhnCngNiPqB7kTwMY/Y2N2 CReHjA== -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:34 2026 by rpki-client