This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer File: LNMcPCUfXtoYP5OOf8s6Sh26id0.cer (raw, json) Hash identifier: 930uF5icEA+NGBzMVdDGnkmYEFm6JDNuu94bL+FeyMY= Subject key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C20 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:12:46 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36933 IP: 41.206.0.0/19 IP: 41.220.64.0/20 IP: 102.88.0.0/13 IP: 197.210.0.0/16 IP: 2c0f:f5c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15392 (0x3c20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:12:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FDDEEAF, serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:15:2e:af:57:77:a8:cf:b7:13:e3:67:ef: 66:9b:93:c6:ba:15:e4:ab:97:59:ed:90:1c:78:03: d8:4d:00:ae:95:ac:a2:84:ca:e2:68:72:f2:76:c8: d8:b5:e6:fd:58:d5:f7:bc:a6:ce:80:f7:c3:1a:a7: b9:dc:8f:68:45:47:77:54:c3:20:6f:a5:5d:44:f4: 92:49:19:81:7c:43:e5:1d:d1:32:ba:df:be:70:a2: 19:0b:2c:7e:9a:92:0c:54:24:84:6d:af:c0:e5:aa: 4b:47:92:d7:b7:d2:95:e3:0f:c9:0c:d3:69:00:b3: 84:46:63:4d:d6:bd:97:89:3d:71:ec:f7:49:95:4f: ae:2d:05:c6:aa:c4:4a:43:3f:61:c8:f2:61:a0:86: 05:7c:26:a7:15:0c:8a:12:c0:4a:48:6e:b9:4e:bb: 89:e0:6b:f7:dd:33:29:e0:38:6a:f0:d6:d6:3c:fe: 29:cf:ad:c8:53:0f:e1:1d:44:23:8f:8b:f0:70:17: 7a:81:61:03:0d:de:c7:77:6e:e6:a7:fb:23:7b:dc: f0:d0:01:ad:6a:ed:ca:79:ad:18:4e:25:e7:75:be: c3:cd:02:75:cd:dc:91:10:6d:16:88:dd:80:c7:16: cb:48:b9:21:c4:15:59:1d:09:b0:44:07:40:57:5a: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36933 sbgp-ipAddrBlock: critical IPv4: 41.206.0.0/19 41.220.64.0/20 102.88.0.0/13 197.210.0.0/16 IPv6: 2c0f:f5c0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:03:f3:c8:35:05:64:c4:55:2d:c0:33:2d:11:fc:c6:90:74: 4e:16:aa:32:35:18:8e:86:26:90:55:41:93:9b:f7:61:c7:d2: 37:41:04:fe:1c:3d:5b:53:be:1c:11:ed:87:9a:2f:81:66:12: 18:96:a8:ef:4a:2b:0c:71:6b:64:d0:29:8e:ee:40:e5:fe:0c: ca:bc:d3:a4:62:18:f2:3f:da:95:77:c8:8b:cc:9e:b6:29:ac: 0a:f6:43:d6:24:26:b9:14:f3:df:40:56:1f:80:25:e6:6a:64: 31:37:61:37:c8:f9:60:a3:d0:50:6f:e2:b1:85:3c:15:8b:77: 41:46:65:ea:c1:ad:83:45:b9:03:f8:6a:95:1b:a5:0f:c3:6e: 68:b4:58:c0:7e:5d:1e:33:8e:5a:09:de:20:8c:a5:00:da:ae: fe:4f:ac:c1:5b:2c:44:2f:b8:97:f4:94:6e:33:3a:12:11:8f: 05:fc:92:9d:9c:40:af:e7:fa:72:95:90:f4:b6:8b:bd:18:c0: 66:c8:8f:02:d2:f6:a4:58:ef:48:a6:3e:30:8d:c6:02:d8:e5: 3b:f6:db:31:6d:6e:5d:8f:52:9d:41:f7:54:51:f5:ee:16:c1: 90:f7:a1:b6:5c:63:42:21:47:96:55:9d:aa:7e:9c:ea:01:92: ce:d6:a5:6d -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgICPCAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzEyNDZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZEREVFQUYxMTAvBgNVBAUTKDJDRDMxQzNDMjUxRjVFREExODNGOTM4 RTdGQ0IzQTRBMURCQTg5REQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDARBUur1d3qM+3E+Nn72abk8a6FeSrl1ntkBx4A9hNAK6VrKKEyuJocvJ2yNi1 5v1Y1fe8ps6A98Map7ncj2hFR3dUwyBvpV1E9JJJGYF8Q+Ud0TK6375wohkLLH6a kgxUJIRtr8DlqktHkte30pXjD8kM02kAs4RGY03WvZeJPXHs90mVT64tBcaqxEpD P2HI8mGghgV8JqcVDIoSwEpIbrlOu4nga/fdMyngOGrw1tY8/inPrchTD+EdRCOP i/BwF3qBYQMN3sd3buan+yN73PDQAa1q7cp5rRhOJed1vsPNAnXN3JEQbRaI3YDH FstIuSHEFVkdCbBEB0BXWt1JAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQULNMcPCUf XtoYP5OOf8s6Sh26id0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGRERFRS8yMTRDNUFFQ0I0OUIx MUVBQTNGNjFGMEZGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkRERUUvMjE0QzVBRUNCNDlCMTFFQUEzRjYxRjBGRjhBRUEyMjgvTE5NY1BD VWZYdG9ZUDVPT2Y4czZTaDI2aWQwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkEUwPgYIKwYBBQUHAQcBAf8ELzAtMBwEAgABMBYDBAUpzgADBAQp3EADAwNm WAMDAMXSMA0EAgACMAcDBQAsD/XAMA0GCSqGSIb3DQEBCwUAA4IBAQCbA/PINQVk xFUtwDMtEfzGkHROFqoyNRiOhiaQVUGTm/dhx9I3QQT+HD1bU74cEe2Hmi+BZhIY lqjvSisMcWtk0CmO7kDl/gzKvNOkYhjyP9qVd8iLzJ62KawK9kPWJCa5FPPfQFYf gCXmamQxN2E3yPlgo9BQb+KxhTwVi3dBRmXqwa2DRbkD+GqVG6UPw25otFjAfl0e M45aCd4gjKUA2q7+T6zBWyxEL7iX9JRuMzoSEY8F/JKdnECv5/pylZD0tou9GMBm yI8C0vakWO9Ipj4wjcYC2OU79tsxbW5dj1KdQfdUUfXuFsGQ96G2XGNCIUeWVZ2q fpzqAZLO1qVt -----END CERTIFICATE-----Generated at Sun Jan 25 21:36:06 2026 by rpki-client