This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EM-TisLXu-onXaNYtXSpw2wAlB8.cer File: EM-TisLXu-onXaNYtXSpw2wAlB8.cer (raw, json) Hash identifier: CNR9bfTJjkmJeJuUXM0misLkHFVToYHyPbMxzKm8EZU= Subject key identifier: 10:CF:93:8A:C2:D7:BB:EA:27:5D:A3:58:B5:74:A9:C3:6C:00:94:1F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3900 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:13:48 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.204.52.0/22 IP: 2c0f:7cc0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14592 (0x3900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:13:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364111CAF, serialNumber=10CF938AC2D7BBEA275DA358B574A9C36C00941F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:87:ee:77:fb:fc:85:53:7a:5e:4b:de:85: ef:70:b9:a6:49:fa:d7:fc:df:c2:4b:73:94:46:a9: 56:10:28:7f:34:04:46:24:8f:db:59:61:20:76:40: 61:31:1e:34:15:76:b8:a7:a2:cb:60:6b:59:1f:2a: 56:be:fd:0e:a4:43:1e:c7:d5:b3:d3:3e:68:86:2e: 82:dd:60:41:11:ab:78:bc:9e:11:43:1e:b8:ce:62: ed:bb:76:95:56:ac:ac:a0:30:78:7b:66:df:a8:f5: 35:f1:d4:c0:97:8b:b6:76:6e:99:e7:45:44:9a:4f: 79:a8:b7:c9:1c:d5:f6:28:d7:1f:9a:bb:17:91:68: 94:d1:1b:00:f4:5f:dd:b6:9c:98:f5:5b:29:e3:3b: 66:af:1b:66:90:00:01:df:0d:2e:2e:95:f3:85:a4: 1a:c5:f8:f9:04:71:1e:d3:ab:96:ea:be:b8:62:9e: 0b:10:49:5b:74:9f:a6:1a:5c:f3:20:d9:4d:a5:a2: 3a:7a:29:1c:a9:00:18:b8:80:fe:24:5f:2b:1a:de: 83:4b:bb:8a:68:e3:dd:a2:70:3f:e5:2b:d5:63:25: b4:ec:0e:a9:ac:bb:30:69:d1:5d:56:eb:fd:a0:19: 7c:6b:24:56:0b:a3:eb:f2:dc:e2:99:38:08:9e:c0: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:93:8A:C2:D7:BB:EA:27:5D:A3:58:B5:74:A9:C3:6C:00:94:1F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft sbgp-ipAddrBlock: critical IPv4: 102.204.52.0/22 IPv6: 2c0f:7cc0::/32 Signature Algorithm: sha256WithRSAEncryption b1:4e:30:13:d9:c1:a4:56:4c:39:b5:83:d7:27:7c:a4:a7:07: 69:b1:f7:2d:da:3f:1c:7a:ce:fa:d3:b4:f2:24:c4:21:6e:02: f7:cb:73:86:fb:f5:62:63:8b:13:a4:e4:a2:9b:8c:aa:57:ee: 0e:3a:24:51:d7:cb:59:4b:2b:92:91:8e:59:e0:cd:91:fe:31: 26:e8:95:26:79:50:e3:86:54:b3:82:bb:49:67:b1:bc:45:0f: ff:51:f1:0a:f1:17:bb:ad:64:51:18:a4:9b:6e:2b:98:3c:97: 91:36:10:23:76:3f:b7:3b:25:23:48:de:96:78:4a:9f:4b:6f: 96:be:1d:51:31:76:3e:47:68:55:78:f1:33:e2:ad:e7:85:50: 71:83:ae:7d:ba:46:e5:f9:37:e4:e9:f0:fa:b6:44:12:17:a3: 14:57:9d:ac:67:b8:05:5c:59:ed:1b:19:32:fd:4f:31:e1:14: 3f:14:66:b4:c2:cb:c5:f8:87:6c:7b:15:48:88:df:fb:56:a5: 85:e3:b7:df:cb:f0:95:e3:b1:d4:33:15:58:ae:10:92:3f:79: b4:79:90:dd:f1:57:57:9b:d4:47:88:89:f1:9e:77:c1:00:59: df:c8:00:f1:48:b9:0b:08:68:21:34:43:16:38:22:cf:57:8e: 55:e8:a3:63 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICOQAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTEzNDhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQxMTFDQUYxMTAvBgNVBAUTKDEwQ0Y5MzhBQzJEN0JCRUEyNzVEQTM1 OEI1NzRBOUMzNkMwMDk0MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4IIfud/v8hVN6Xkvehe9wuaZJ+tf838JLc5RGqVYQKH80BEYkj9tZYSB2QGEx HjQVdrinostga1kfKla+/Q6kQx7H1bPTPmiGLoLdYEERq3i8nhFDHrjOYu27dpVW rKygMHh7Zt+o9TXx1MCXi7Z2bpnnRUSaT3mot8kc1fYo1x+auxeRaJTRGwD0X922 nJj1WynjO2avG2aQAAHfDS4ulfOFpBrF+PkEcR7Tq5bqvrhingsQSVt0n6YaXPMg 2U2lojp6KRypABi4gP4kXysa3oNLu4po492icD/lK9VjJbTsDqmsuzBp0V1W6/2g GXxrJFYLo+vy3OKZOAiewD7nAgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUEM+TisLX u+onXaNYtXSpw2wAlB8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MTExQy9BNEU5MzhBQUI0QzQx MUYwQjA5QkI3ODZEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDExMUMvQTRFOTM4QUFCNEM0MTFGMEIwOUJCNzg2REFFNEVDOUMvRU0tVGlz TFh1LW9uWGFOWXRYU3B3MndBbEI4Lm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbMNDANBAIAAjAHAwUALA98wDANBgkqhkiG9w0BAQsFAAOCAQEAsU4w E9nBpFZMObWD1yd8pKcHabH3Ldo/HHrO+tO08iTEIW4C98tzhvv1YmOLE6TkopuM qlfuDjokUdfLWUsrkpGOWeDNkf4xJuiVJnlQ44ZUs4K7SWexvEUP/1HxCvEXu61k URikm24rmDyXkTYQI3Y/tzslI0jelnhKn0tvlr4dUTF2PkdoVXjxM+Kt54VQcYOu fbpG5fk35Onw+rZEEhejFFedrGe4BVxZ7RsZMv1PMeEUPxRmtMLLxfiHbHsVSIjf +1alheO338vwleOx1DMVWK4Qkj95tHmQ3fFXV5vUR4iJ8Z53wQBZ38gA8Ui5Cwho ITRDFjgiz1eOVeijYw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:44:09 2026 by rpki-client