This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer File: JLXuZ0cVou7uiGTqX17kcyPPdmw.cer (raw, json) Hash identifier: 5x/YqJOdki3jrahgTII9H/1kDgPX8/EJNdSaMualNVI= Subject key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AFD Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:30:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 2905 AS: 4178 AS: 4571 AS: 9129 AS: 11569 AS: 12091 AS: 16637 AS: 24788 AS: 28698 IP: 41.112.0.0/12 IP: 41.181.0.0/16 IP: 41.195.0.0/16 IP: 41.208.0.0/18 IP: 105.176.0.0/15 IP: 105.208.0.0/12 IP: 105.236.0.0/15 IP: 196.3.224.0/19 IP: 196.4.87.0 -- 196.4.93.255 IP: 196.7.0.0/16 IP: 196.11.239.0/24 IP: 196.13.228.0/22 IP: 196.22.64.0/18 IP: 196.30.0.0/15 IP: 196.41.160.0/19 IP: 196.44.0.0/19 IP: 196.47.0.0/18 IP: 197.64.0.0/12 IP: 2001:4218::/32 IP: 2001:4260::/32 IP: 2c0f:fb08::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15101 (0x3afd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:30:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:a5:30:fc:00:2c:15:bf:f7:c1:ca:9d:8f: a9:b5:ae:b1:3b:24:42:39:80:ad:36:96:6c:a9:33: 6f:09:1e:39:4d:af:7f:d9:41:a0:74:cb:0e:c1:78: 72:59:7c:27:48:e4:de:48:4e:b8:e4:63:6f:0b:30: 39:18:cc:04:31:6f:a5:d2:bc:94:f0:2b:d6:c8:29: 00:7c:d5:3c:2b:09:74:74:7f:55:b3:99:c2:1a:17: 69:a5:dc:e3:cb:25:cf:2a:fd:19:5e:f4:30:e6:67: 4a:b7:d5:20:37:1c:01:29:67:eb:27:91:c8:11:c8: 2c:d2:40:b7:d1:c5:61:82:a8:6c:1c:73:bb:89:3b: c6:0f:56:73:02:ee:3f:c6:61:06:a6:ff:50:3d:bc: f6:4e:f7:20:c8:c6:f6:94:fc:2c:0d:a2:09:d5:9c: 09:6f:a0:21:10:70:31:e1:a3:31:d3:fe:fb:6a:5a: bc:fa:19:96:bf:c8:09:66:13:ca:54:dc:ae:62:0a: aa:44:7b:e0:4f:e2:fd:dd:52:5b:4f:56:da:29:ec: fa:fd:2e:e3:43:ce:51:bf:40:0e:9a:ae:f1:3f:6f: dd:f8:c6:43:9f:5c:8e:7d:7d:ef:df:8e:b1:b7:6e: 62:5c:dc:ee:87:f1:96:9a:1b:13:36:89:70:a8:15: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 2905 4178 4571 9129 11569 12091 16637 24788 28698 sbgp-ipAddrBlock: critical IPv4: 41.112.0.0/12 41.181.0.0/16 41.195.0.0/16 41.208.0.0/18 105.176.0.0/15 105.208.0.0/12 105.236.0.0/15 196.3.224.0/19 196.4.87.0-196.4.93.255 196.7.0.0/16 196.11.239.0/24 196.13.228.0/22 196.22.64.0/18 196.30.0.0/15 196.41.160.0/19 196.44.0.0/19 196.47.0.0/18 197.64.0.0/12 IPv6: 2001:4218::/32 2001:4260::/32 2c0f:fb08::/32 Signature Algorithm: sha256WithRSAEncryption 0c:b2:2f:f9:ea:76:76:ec:4d:03:ef:47:c7:4c:41:e0:3f:94: 37:6a:74:fc:46:e5:83:2d:f1:ea:57:df:8c:0c:de:ee:18:75: 9e:ac:7a:f3:cc:57:d2:ee:10:72:74:16:7c:8d:f7:76:15:b6: b1:4c:4a:d0:95:b6:85:4f:7e:cc:b4:33:93:54:e8:92:7b:5b: b4:18:a4:18:6c:47:53:12:04:63:57:f4:3d:e4:15:e9:3d:1a: 89:87:a3:6b:12:5b:b6:40:07:4a:63:de:d9:89:fb:98:ae:be: 83:9d:3c:74:8f:06:22:5a:a7:91:6b:28:55:2c:28:45:19:dc: d3:64:6f:68:36:b6:58:22:0c:46:9e:3d:77:f8:1a:80:f5:34: 24:97:be:1b:fa:e1:a5:4f:0e:26:70:14:38:b4:c8:22:3c:ca: fa:2c:55:06:c0:fc:3c:cc:ec:c9:5a:d1:bc:f3:78:03:3f:cc: b9:42:17:9a:32:a7:e6:2a:b6:9c:6b:6c:56:13:97:6c:6e:62: b5:36:48:53:48:fe:26:fe:b1:55:d6:69:78:6f:4b:17:95:db: 4d:39:3f:33:9e:85:20:43:5a:23:c4:59:d9:1f:be:61:1a:26: cd:30:f7:94:32:d1:e0:e2:47:a4:f0:3d:24:c1:35:51:05:81: 7f:be:22:0b -----BEGIN CERTIFICATE----- MIIGujCCBaKgAwIBAgICOv0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjMwMjNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc2NzhGQUYxMTAvBgNVBAUTKDI0QjVFRTY3NDcxNUEyRUVFRTg4NjRF QTVGNUVFNDczMjNDRjc2NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh5aUw/AAsFb/3wcqdj6m1rrE7JEI5gK02lmypM28JHjlNr3/ZQaB0yw7BeHJZ fCdI5N5ITrjkY28LMDkYzAQxb6XSvJTwK9bIKQB81TwrCXR0f1WzmcIaF2ml3OPL Jc8q/Rle9DDmZ0q31SA3HAEpZ+snkcgRyCzSQLfRxWGCqGwcc7uJO8YPVnMC7j/G YQam/1A9vPZO9yDIxvaU/CwNognVnAlvoCEQcDHhozHT/vtqWrz6GZa/yAlmE8pU 3K5iCqpEe+BP4v3dUltPVtop7Pr9LuNDzlG/QA6arvE/b934xkOfXI59fe/fjrG3 bmJc3O6H8ZaaGxM2iXCoFXmnAgMBAAGjggOvMIIDqzAdBgNVHQ4EFgQUJLXuZ0cV ou7uiGTqX17kcyPPdmwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3Njc4Ri85MjVDODBGQzY1MEIx MUVGQkUyOTAyNTY3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzY3OEYvOTI1QzgwRkM2NTBCMTFFRkJFMjkwMjU2NzYyRTk1MUEvSkxYdVow Y1ZvdTd1aUdUcVgxN2tjeVBQZG13Lm1mdDA5BggrBgEFBQcBCAEB/wQqMCigJjAk AgILWQICEFICAhHbAgIjqQICLTECAi87AgJA/QICYNQCAnAaMIGjBggrBgEFBQcB BwEB/wSBkzCBkDBxBAIAATBrAwMEKXADAwAptQMDACnDAwQGKdAAAwMBabADAwRp 0AMDAWnsAwQFxAPgMAwDBADEBFcDBAHEBFwDAwDEBwMEAMQL7wMEAsQN5AMEBsQW QAMDAcQeAwQFxCmgAwQFxCwAAwQGxC8AAwMExUAwGwQCAAIwFQMFACABQhgDBQAg AUJgAwUALA/7CDANBgkqhkiG9w0BAQsFAAOCAQEADLIv+ep2duxNA+9Hx0xB4D+U N2p0/Eblgy3x6lffjAze7hh1nqx688xX0u4QcnQWfI33dhW2sUxK0JW2hU9+zLQz k1TokntbtBikGGxHUxIEY1f0PeQV6T0aiYejaxJbtkAHSmPe2Yn7mK6+g508dI8G IlqnkWsoVSwoRRnc02RvaDa2WCIMRp49d/gagPU0JJe+G/rhpU8OJnAUOLTIIjzK +ixVBsD8PMzsyVrRvPN4Az/MuUIXmjKn5iq2nGtsVhOXbG5itTZIU0j+Jv6xVdZp eG9LF5XbTTk/M56FIENaI8RZ2R++YRomzTD3lDLR4OJHpPA9JME1UQWBf74iCw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:43:55 2026 by rpki-client