This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer File: KFr00NNaAfToZi1wYXSTEwgbBW8.cer (raw, json) Hash identifier: QvliJMzl9c0K5xZk/AJ25/P3HTDqIi8FOwLnJzgTVII= Subject key identifier: 28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CC5 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:36:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328272 IP: 102.208.146.0/23 IP: 196.11.103.0/24 IP: 2001:43f8:10c0::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15557 (0x3cc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:36:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A45F8AF, serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:c2:f9:8c:97:28:17:e0:ef:fe:f7:3a:2b: b1:69:0a:75:da:d6:6c:27:27:b1:99:9c:2a:83:a5: 0e:b3:d8:3c:ae:7a:7b:47:68:e1:a7:48:98:3a:27: 47:51:08:99:ce:a0:23:77:1b:53:58:68:1e:df:11: 75:fd:29:18:55:2c:5e:85:aa:4f:8a:1f:ce:6f:ce: a2:58:1a:68:e9:b6:61:28:41:b4:cb:1a:fe:29:06: 2b:2a:5f:d3:37:61:21:78:a0:fc:56:7c:76:c6:3a: 0c:50:76:3e:a9:ed:0c:4d:77:94:3a:a4:b2:52:f6: db:a0:5b:ca:f4:47:a3:80:df:8a:4c:cc:81:0f:00: a7:ed:80:3c:c9:63:c5:be:86:fa:4d:1a:5d:2b:27: dc:eb:bf:7c:6b:17:68:5c:1b:c9:06:f1:5c:23:f6: ff:70:10:31:a3:dc:8c:39:d1:fc:ee:45:e3:14:6c: b7:72:9e:aa:8e:13:e2:15:c8:d7:e0:14:cb:0e:bb: ab:a5:32:4b:3c:8a:4f:cf:8f:b3:ff:53:84:93:2f: 63:12:6c:5b:62:89:3f:3d:f8:bc:a5:74:f1:42:eb: 7d:b2:98:69:3b:cf:57:a7:b7:a7:dd:5a:22:05:01: b9:40:e1:5e:26:6b:50:ec:33:2d:e5:c7:a1:6c:ad: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328272 sbgp-ipAddrBlock: critical IPv4: 102.208.146.0/23 196.11.103.0/24 IPv6: 2001:43f8:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 33:ab:03:c8:5b:f7:67:51:b2:82:84:33:10:d0:a3:08:e0:e4: 00:b9:00:4e:92:2f:3b:b6:b9:eb:ea:29:4a:6d:97:59:04:9a: 3b:3a:91:c5:b2:77:fe:4a:00:1d:38:8c:d4:25:05:c7:a7:ca: b0:a0:c2:ce:34:83:a7:6d:c2:0f:cd:98:d7:19:7f:ba:a2:79: 98:09:bf:af:94:52:88:3e:b7:cf:c6:20:fd:ae:fc:45:d5:06: c2:98:38:96:ae:c2:e5:5b:4f:af:33:33:98:7f:39:2a:16:a6: 89:63:69:9a:97:5f:88:06:4a:a9:95:c3:d4:f8:5a:19:28:e1: 6b:45:b7:b4:7f:7a:d1:0c:95:48:1b:a7:8b:80:d4:ab:eb:82: 8c:1f:c7:04:39:0b:4f:3f:35:e5:2a:33:6c:2a:fb:be:b3:68: 79:ff:63:52:6f:2f:59:49:57:6f:72:9e:6f:ba:82:32:7d:da: 06:c0:f4:e9:c3:55:76:a5:74:b8:68:5b:48:57:40:aa:9c:11: 7c:f7:53:3f:81:0d:b5:e0:dd:d8:64:03:8f:9a:ef:0b:a2:1f: 23:72:64:80:1e:be:04:d2:9a:83:11:80:a0:e5:75:e9:15:f7: 49:95:1d:23:04:26:de:bd:48:ae:98:3b:6f:3a:b9:bd:97:05: 49:74:85:57 -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgICPMUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzM2MjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE0NUY4QUYxMTAvBgNVBAUTKDI4NUFGNEQwRDM1QTAxRjRFODY2MkQ3 MDYxNzQ5MzEzMDgxQjA1NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8AsL5jJcoF+Dv/vc6K7FpCnXa1mwnJ7GZnCqDpQ6z2DyuentHaOGnSJg6J0dR CJnOoCN3G1NYaB7fEXX9KRhVLF6Fqk+KH85vzqJYGmjptmEoQbTLGv4pBisqX9M3 YSF4oPxWfHbGOgxQdj6p7QxNd5Q6pLJS9tugW8r0R6OA34pMzIEPAKftgDzJY8W+ hvpNGl0rJ9zrv3xrF2hcG8kG8Vwj9v9wEDGj3Iw50fzuReMUbLdynqqOE+IVyNfg FMsOu6ulMks8ik/Pj7P/U4STL2MSbFtiiT89+LyldPFC632ymGk7z1ent6fdWiIF AblA4V4ma1DsMy3lx6FsraEXAgMBAAGjggMiMIIDHjAdBgNVHQ4EFgQUKFr00NNa AfToZi1wYXSTEwgbBW8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNDVGOC85NTE4N0IxODdDMUUx MUYwQUI4N0NFRTBEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTQ1RjgvOTUxODdCMTg3QzFFMTFGMEFCODdDRUUwREFFNEVDOUMvS0ZyMDBO TmFBZlRvWmkxd1lYU1RFd2diQlc4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAlAwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBAFm0JIDBADEC2cwDwQC AAIwCQMHACABQ/gQwDANBgkqhkiG9w0BAQsFAAOCAQEAM6sDyFv3Z1GygoQzENCj CODkALkATpIvO7a56+opSm2XWQSaOzqRxbJ3/koAHTiM1CUFx6fKsKDCzjSDp23C D82Y1xl/uqJ5mAm/r5RSiD63z8Yg/a78RdUGwpg4lq7C5VtPrzMzmH85KhamiWNp mpdfiAZKqZXD1PhaGSjha0W3tH960QyVSBuni4DUq+uCjB/HBDkLTz815SozbCr7 vrNoef9jUm8vWUlXb3Keb7qCMn3aBsD06cNVdqV0uGhbSFdAqpwRfPdTP4ENteDd 2GQDj5rvC6IfI3JkgB6+BNKagxGAoOV16RX3SZUdIwQm3r1Irpg7bzq5vZcFSXSF Vw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:15 2026 by rpki-client