This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer (raw, json) Hash identifier: DT+8udeaDLC2Ksn1DnVAnaNLESZBNiuMJoXQNA95ZdY= Subject key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E78 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:45:18 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327996 IP: 102.132.32.0/19 IP: 102.212.84.0/22 IP: 102.212.128.0/22 IP: 102.213.20.0/22 IP: 102.213.144.0/22 IP: 196.11.176.0/21 IP: 196.251.128.0/21 IP: 2c0f:5a00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15992 (0x3e78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:45:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:43:e2:c5:bd:c7:f4:a9:53:3d:0c:ef:8a: 4d:ae:6d:cc:29:35:31:82:f2:c9:7b:76:25:2d:68: 11:9f:18:c9:bd:76:f0:36:20:2c:ba:f7:6a:41:27: 2e:e8:34:54:ef:63:3d:da:18:ed:df:7b:df:32:26: 13:9b:8e:cf:ef:5a:cd:39:1e:3a:4e:08:fc:1d:ca: 16:46:69:8d:44:1c:e9:6d:32:b5:c0:03:ac:3d:91: ef:05:d5:1e:f3:ba:ec:9c:46:f8:1c:88:ff:2a:91: 13:d3:d0:de:98:ab:a6:da:5c:b1:3a:8c:6a:f4:62: d1:79:ec:4b:6a:6a:54:04:83:7c:1b:ee:98:ad:da: 8e:53:a9:d0:b9:b7:5b:ac:9c:29:6c:69:43:a7:b9: 2f:ec:bc:6a:9c:6a:be:14:8f:5f:69:9e:b4:c4:24: 3e:de:7f:2f:42:82:08:2e:f5:71:90:19:0e:5e:7d: 49:73:6c:48:b7:5f:4d:d4:1e:bb:79:3b:28:6e:8b: 31:b8:3d:dd:e9:ad:1a:c8:29:59:1b:65:f8:8c:3a: e2:f3:94:f9:6a:be:8e:fc:ad:f4:8f:6e:60:2b:97: ac:df:9b:b5:b1:3b:6f:33:c6:80:4c:19:02:a8:86: 71:3d:8b:1b:49:9b:fd:d7:76:80:18:2f:72:d6:a7: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327996 sbgp-ipAddrBlock: critical IPv4: 102.132.32.0/19 102.212.84.0/22 102.212.128.0/22 102.213.20.0/22 102.213.144.0/22 196.11.176.0/21 196.251.128.0/21 IPv6: 2c0f:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 48:29:54:90:e1:bd:04:c2:50:94:79:63:e7:5c:da:50:37:3e: 72:81:8c:e9:3f:b5:c0:0f:4d:19:ff:24:67:54:49:c0:76:5a: c5:2a:98:1c:95:e6:9a:0b:5e:0e:16:82:da:f9:51:5c:3b:2b: 76:7f:19:b1:69:dd:13:e8:80:24:54:11:b3:8c:26:89:97:55: 5f:9b:cc:a6:db:6d:0b:0a:8e:33:fb:1b:b4:2a:c9:ea:b5:c6: 41:d8:57:3e:dc:bc:a4:ef:f7:49:fa:94:13:c2:68:39:be:4a: 62:3f:6b:35:7c:fb:2f:2f:e9:38:8d:73:62:c3:1b:52:7b:c2: df:3d:b9:10:ad:ce:b8:7b:0c:fd:8c:95:24:db:b2:c2:b9:8f: 94:d0:f3:99:31:5d:f9:9f:4d:9b:58:79:ec:12:61:bd:75:c9: 35:40:0f:22:37:43:89:24:95:c4:d3:47:da:d2:c6:2e:ac:3b: cf:1f:0f:a4:54:38:da:9b:3f:86:82:ee:82:3e:e8:d8:82:99: 0b:9a:ed:9e:38:32:56:ca:5e:15:ee:49:af:ad:86:17:3d:0c: aa:86:b7:77:7f:d1:91:99:01:53:c5:a4:11:55:19:5e:6c:4d: 58:e1:cf:b0:32:d8:72:e6:8d:9d:de:92:9a:d7:42:4f:68:93: ef:41:33:c6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgICPngwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDQ1MThaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkUyOUVEQUYxMTAvBgNVBAUTKDJBM0NDOUU1NTE5QTVBNUJCMTNEMDgz MTBDQTkzNDgyNDg5NkZBNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW5kPixb3H9KlTPQzvik2ubcwpNTGC8sl7diUtaBGfGMm9dvA2ICy692pBJy7o NFTvYz3aGO3fe98yJhObjs/vWs05HjpOCPwdyhZGaY1EHOltMrXAA6w9ke8F1R7z uuycRvgciP8qkRPT0N6Yq6baXLE6jGr0YtF57EtqalQEg3wb7pit2o5TqdC5t1us nClsaUOnuS/svGqcar4Uj19pnrTEJD7efy9Cgggu9XGQGQ5efUlzbEi3X03UHrt5 OyhuizG4Pd3prRrIKVkbZfiMOuLzlPlqvo78rfSPbmArl6zfm7WxO28zxoBMGQKo hnE9ixtJm/3XdoAYL3LWp8BfAgMBAAGjggM+MIIDOjAdBgNVHQ4EFgQUKjzJ5VGa WluxPQgxDKk0gkiW+lowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFMjlFRC8xQzVCNUQwMkRDMDkx MUVDOUNFQkRFOUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTI5RUQvMUM1QjVEMDJEQzA5MTFFQzlDRUJERTlCRjEyMjI0NjgvS2p6SjVW R2FXbHV4UFFneERLazBna2lXLWxvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFATwwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAVmhCADBAJm1FQDBAJm 1IADBAJm1RQDBAJm1ZADBAPEC7ADBAPE+4AwDQQCAAIwBwMFACwPWgAwDQYJKoZI hvcNAQELBQADggEBAEgpVJDhvQTCUJR5Y+dc2lA3PnKBjOk/tcAPTRn/JGdUScB2 WsUqmByV5poLXg4Wgtr5UVw7K3Z/GbFp3RPogCRUEbOMJomXVV+bzKbbbQsKjjP7 G7Qqyeq1xkHYVz7cvKTv90n6lBPCaDm+SmI/azV8+y8v6TiNc2LDG1J7wt89uRCt zrh7DP2MlSTbssK5j5TQ85kxXfmfTZtYeewSYb11yTVADyI3Q4kklcTTR9rSxi6s O88fD6RUONqbP4aC7oI+6NiCmQua7Z44MlbKXhXuSa+thhc9DKqGt3d/0ZGZAVPF pBFVGV5sTVjhz7Ay2HLmjZ3ekprXQk9ok+9BM8Y= -----END CERTIFICATE-----Generated at Sun Jan 25 06:03:27 2026 by rpki-client