This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer File: KF9hqPUjMGRTeGWSdEagBQLhHr8.cer (raw, json) Hash identifier: ekjRamy5S0Sys7JV9E1nLeLjVJiBGYSn7o8sQSlNf1A= Subject key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BB9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:57:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37125 IP: 41.217.204.0/22 IP: 102.164.32.0/21 IP: 2c0f:fff0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15289 (0x3bb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:57:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:41:39:b0:73:0b:ab:ea:b5:df:4c:d4:4a: 06:e0:49:8a:9a:26:76:63:15:28:17:0b:3b:22:29: d4:b6:0a:ea:b6:93:f8:17:e3:64:bb:43:99:0a:23: 34:0d:02:97:a1:e3:ad:d3:fe:86:7b:35:60:23:00: 6b:47:a1:af:7b:7b:ab:e5:c6:63:52:24:29:de:09: ad:62:5b:c7:7b:ad:40:15:4c:72:4f:c9:0d:b1:09: 6b:0b:1f:57:75:19:05:1d:18:44:07:d3:9a:12:72: c2:0f:ec:4c:78:e6:62:53:41:01:b6:bc:76:81:d5: 44:9c:fa:25:c2:16:f0:ae:54:42:4e:f3:e7:d1:ca: 47:aa:f3:19:20:0a:a8:fa:dd:bc:a5:b6:a7:36:80: cd:1c:9a:e5:9f:a9:fa:6b:27:5b:1e:0e:ec:0a:88: 13:63:73:85:11:d5:3d:9b:cc:64:80:70:92:5d:15: 90:7a:7f:3e:2c:af:6e:ff:45:b4:3e:69:22:12:87: f4:88:d0:a0:14:c2:fc:bc:bb:78:b3:c0:97:16:f3: e7:eb:bd:11:06:44:84:ce:5a:7e:b6:fc:bd:f4:08: 10:12:47:d7:57:64:40:29:f6:ef:96:2c:41:91:49: 51:56:19:63:9e:2b:d8:96:cb:7e:d8:ab:2a:7f:e0: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37125 sbgp-ipAddrBlock: critical IPv4: 41.217.204.0/22 102.164.32.0/21 IPv6: 2c0f:fff0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:4d:7a:2e:14:85:6c:18:22:7d:3e:aa:78:76:dc:2a:83:dc: 2d:03:16:15:b4:66:c5:5e:2c:d2:c8:5c:aa:87:b0:9b:63:d4: 98:fc:6b:10:6b:0e:46:39:48:80:b9:7a:dc:21:af:72:3c:7e: 72:c8:42:c2:1d:3c:f9:79:52:f8:90:7c:1f:5f:6e:f5:0b:1c: e8:9d:b1:73:30:da:70:c6:06:de:ec:9f:bf:71:6a:13:41:34: ba:66:6f:8d:16:03:95:ac:a9:91:34:1a:48:7e:36:80:bd:65: fb:85:9a:5a:b6:f9:14:3b:aa:ce:c9:2e:9e:3c:7e:29:e7:c4: 25:2d:3e:18:ec:aa:1d:7a:0a:e9:e1:70:f9:52:a0:f6:71:ee: 70:43:e8:21:38:10:8c:40:e9:8d:17:d9:9d:9c:de:6d:03:8f: 6c:21:39:4f:96:69:c7:7c:76:3d:82:73:3f:90:a2:bb:20:bb: 7f:11:42:70:04:7e:ea:c5:b3:71:a6:90:18:eb:3b:a5:00:a6: 72:ad:ed:14:6f:f3:73:2d:50:12:10:90:e8:dd:38:7e:19:3f: f4:04:ca:b1:ad:8d:94:25:4d:c2:1b:a7:6f:1c:0d:67:6c:ef: d7:fd:7c:c0:f0:34:5e:3e:54:4e:78:22:9e:19:21:d4:07:66: 71:d7:f6:4b -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICO7kwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU3MTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg5RjY5QUYxMTAvBgNVBAUTKDI4NUY2MUE4RjUyMzMwNjQ1Mzc4NjU5 Mjc0NDZBMDA1MDJFMTFFQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGQUE5sHMLq+q130zUSgbgSYqaJnZjFSgXCzsiKdS2Cuq2k/gX42S7Q5kKIzQN Apeh463T/oZ7NWAjAGtHoa97e6vlxmNSJCneCa1iW8d7rUAVTHJPyQ2xCWsLH1d1 GQUdGEQH05oScsIP7Ex45mJTQQG2vHaB1USc+iXCFvCuVEJO8+fRykeq8xkgCqj6 3byltqc2gM0cmuWfqfprJ1seDuwKiBNjc4UR1T2bzGSAcJJdFZB6fz4sr27/RbQ+ aSISh/SI0KAUwvy8u3izwJcW8+frvREGRITOWn62/L30CBASR9dXZEAp9u+WLEGR SVFWGWOeK9iWy37Yqyp/4Ny9AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUKF9hqPUj MGRTeGWSdEagBQLhHr8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4OUY2OS9CNkI1QTQ4QzJGQzQx MUVGQTA0Q0RBOEQ3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODlGNjkvQjZCNUE0OEMyRkM0MTFFRkEwNENEQThENzYyRTk1MUEvS0Y5aHFQ VWpNR1JUZUdXU2RFYWdCUUxoSHI4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkQUwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIp2cwDBANmpCAwDQQC AAIwBwMFACwP//AwDQYJKoZIhvcNAQELBQADggEBAE5Nei4UhWwYIn0+qnh23CqD 3C0DFhW0ZsVeLNLIXKqHsJtj1Jj8axBrDkY5SIC5etwhr3I8fnLIQsIdPPl5UviQ fB9fbvULHOidsXMw2nDGBt7sn79xahNBNLpmb40WA5WsqZE0Gkh+NoC9ZfuFmlq2 +RQ7qs7JLp48finnxCUtPhjsqh16CunhcPlSoPZx7nBD6CE4EIxA6Y0X2Z2c3m0D j2whOU+Wacd8dj2Ccz+Qorsgu38RQnAEfurFs3GmkBjrO6UApnKt7RRv83MtUBIQ kOjdOH4ZP/QEyrGtjZQlTcIbp28cDWds79f9fMDwNF4+VE54Ip4ZIdQHZnHX9ks= -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:15 2026 by rpki-client