This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer File: M-hGYU4VRCxoAFpeP85ct1bgSn8.cer (raw, json) Hash identifier: vBy4+iClo7mfvucSzdfH82dIQ2Njf1S9iVKl3/iPhaM= Subject key identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 376C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:04:28 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328917 IP: 102.211.124.0/22 IP: 102.219.76.0/22 IP: 2c0f:5240::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14188 (0x376c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:04:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3613F08AF, serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:62:03:04:99:90:ab:8f:26:32:63:9b:2f: 94:b5:b4:6f:f3:f8:73:5c:38:c7:3e:33:2d:cf:9b: bb:e9:40:24:f3:1b:89:80:a8:96:b6:5b:83:75:c0: 3d:7a:9f:5e:6d:5e:c3:ae:0d:51:2b:1e:17:af:ea: bb:d4:c7:4c:64:97:ec:55:f8:03:e2:50:47:f7:e1: 89:66:91:81:af:ef:7e:83:32:fe:bc:59:61:b3:17: e3:ec:e7:89:3e:6c:c1:a6:d7:5e:75:83:d2:33:32: dd:0f:76:5b:c9:ab:db:b7:36:fd:2c:77:92:8b:0c: 84:5e:1c:e9:de:02:b3:c6:20:8d:0f:e9:8a:13:3f: f8:24:f8:88:43:05:cb:47:48:35:40:27:f3:23:31: 9f:5b:13:1c:57:de:d3:c3:af:8d:2a:e4:91:54:c4: 77:03:bc:fe:d9:21:bf:c3:c2:3a:74:0c:5f:97:c9: 5f:98:f1:ec:de:20:e2:61:35:32:97:b3:59:4f:51: 68:9f:e9:b8:8f:1c:7b:4c:d6:70:7e:69:75:d8:56: 4e:5b:0b:d3:c0:d7:62:5d:f4:b9:da:b8:bf:e0:bc: 03:b5:c7:65:6a:df:61:ec:68:b7:56:19:4f:4a:26: f3:79:de:a0:af:ff:28:e1:f0:ed:c9:63:bc:83:85: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328917 sbgp-ipAddrBlock: critical IPv4: 102.211.124.0/22 102.219.76.0/22 IPv6: 2c0f:5240::/32 Signature Algorithm: sha256WithRSAEncryption 4d:e4:fe:d8:0b:f4:62:85:2c:4d:af:51:c8:de:13:a0:f1:03: 5a:82:3a:5a:fe:11:be:7e:47:a7:67:a0:82:57:9d:9c:38:a1: 5d:8e:91:5b:6b:92:eb:8e:bf:88:f7:02:21:53:f2:a6:0d:58: 93:a8:34:1e:5a:0d:d9:8c:f8:ad:ea:2e:fd:a1:96:35:e1:70: b3:d3:27:1b:16:03:bd:d0:39:43:30:21:96:76:46:96:4a:78: 22:db:93:c4:cc:ee:c8:cc:e2:5c:a9:fc:d4:98:f3:40:42:10: 70:65:22:76:6a:cb:0d:4a:5a:ef:1e:1b:0b:2d:49:8d:d0:10: b7:d3:ad:75:82:c8:94:e7:c7:5a:e7:f6:e7:7c:c3:6d:43:9d: 48:b8:44:81:ef:8b:9f:c3:e4:90:22:75:12:9c:b6:d6:38:cc: ef:f2:49:68:8b:ad:1e:f3:b6:e6:0a:bb:6c:03:54:bf:90:60: 1f:dd:4e:61:f7:a1:21:f1:78:a6:8a:bf:55:b4:78:93:f9:a4: 28:7b:bd:c7:72:3e:b5:8d:62:d7:44:ac:40:0f:76:ad:52:d4: e6:55:16:8b:4b:44:28:32:f8:be:70:d4:8b:93:ce:15:0c:b3: cc:de:61:eb:5e:1c:0a:2d:c7:80:0c:00:8b:44:0b:dd:86:b9: 90:b2:75:d1 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICN2wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDA0MjhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjEzRjA4QUYxMTAvBgNVBAUTKDMzRTg0NjYxNEUxNTQ0MkM2ODAwNUE1 RTNGQ0U1Q0I3NTZFMDRBN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6cWIDBJmQq48mMmObL5S1tG/z+HNcOMc+My3Pm7vpQCTzG4mAqJa2W4N1wD16 n15tXsOuDVErHhev6rvUx0xkl+xV+APiUEf34YlmkYGv736DMv68WWGzF+Ps54k+ bMGm1151g9IzMt0PdlvJq9u3Nv0sd5KLDIReHOneArPGII0P6YoTP/gk+IhDBctH SDVAJ/MjMZ9bExxX3tPDr40q5JFUxHcDvP7ZIb/Dwjp0DF+XyV+Y8ezeIOJhNTKX s1lPUWif6biPHHtM1nB+aXXYVk5bC9PA12Jd9LnauL/gvAO1x2Vq32HsaLdWGU9K JvN53qCv/yjh8O3JY7yDhajHAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUM+hGYU4V RCxoAFpeP85ct1bgSn8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxM0YwOC9CRjQ3MkM3ODY5MDUx MUVFQjA5OTI1ODg0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTNGMDgvQkY0NzJDNzg2OTA1MTFFRUIwOTkyNTg4NEFEOUU2RkMvTS1oR1lV NFZSQ3hvQUZwZVA4NWN0MWJnU244Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBNUwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm03wDBAJm20wwDQQC AAIwBwMFACwPUkAwDQYJKoZIhvcNAQELBQADggEBAE3k/tgL9GKFLE2vUcjeE6Dx A1qCOlr+Eb5+R6dnoIJXnZw4oV2OkVtrkuuOv4j3AiFT8qYNWJOoNB5aDdmM+K3q Lv2hljXhcLPTJxsWA73QOUMwIZZ2RpZKeCLbk8TM7sjM4lyp/NSY80BCEHBlInZq yw1KWu8eGwstSY3QELfTrXWCyJTnx1rn9ud8w21DnUi4RIHvi5/D5JAidRKcttY4 zO/ySWiLrR7ztuYKu2wDVL+QYB/dTmH3oSHxeKaKv1W0eJP5pCh7vcdyPrWNYtdE rEAPdq1S1OZVFotLRCgy+L5w1IuTzhUMs8zeYeteHAotx4AMAItEC92GuZCyddE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:01 2026 by rpki-client