This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer File: M1pTwRMuVAw6td9C8UiHszJN60Q.cer (raw, json) Hash identifier: oBJPh35Bjca/FHFjTdZecWoVakmJJOXExoUzTwvJ0SQ= Subject key identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 399A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:37:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327817 IP: 102.222.28.0/22 IP: 154.73.216.0/22 IP: 2c0f:f798::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14746 (0x399a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:37:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A2CD2AF, serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:6c:f1:52:57:87:f9:16:a6:71:ca:aa:96: cb:4c:c0:84:a8:b1:8b:a1:70:36:88:72:ca:fe:5f: 52:c7:87:86:8f:24:f8:14:cc:bd:f6:bd:3a:c7:84: 2d:a0:65:c3:a5:97:5f:ed:6a:af:f6:26:3b:2d:58: 4d:7a:b0:be:c6:5c:de:27:80:a0:b4:02:60:a9:be: 3e:9a:51:5e:04:1c:39:b9:96:06:54:2e:3c:bc:18: 7f:f6:2a:2a:a2:79:ab:91:ef:92:d6:3a:7f:6a:b5: f2:cb:b4:3f:a4:64:ce:df:5f:1d:71:a6:28:86:ed: f3:0b:cb:89:20:1d:5d:df:9c:d3:4c:83:2e:0d:de: 0b:67:83:ae:a3:df:7b:de:6d:3f:e2:65:26:32:fb: 06:d5:24:fb:f4:df:22:63:c5:40:55:ca:3e:0d:00: aa:e2:3e:10:8f:50:d8:a0:23:b5:9e:0d:0f:56:4f: cf:74:a7:2a:6d:7c:f5:44:08:af:2e:01:d0:fc:ea: 00:84:a8:dd:de:d2:8c:2e:9e:26:1f:11:d9:26:1c: 9a:b7:40:ea:0e:94:52:8a:bf:4a:37:71:9a:c8:f2: 12:f3:65:1d:1f:5d:cb:03:c6:25:0d:fb:e4:1c:a4: a5:70:1f:49:2b:a2:a6:c6:80:c1:66:3c:3f:90:de: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327817 sbgp-ipAddrBlock: critical IPv4: 102.222.28.0/22 154.73.216.0/22 IPv6: 2c0f:f798::/32 Signature Algorithm: sha256WithRSAEncryption 50:a2:d5:a1:07:2a:c7:23:83:90:4f:d4:3d:07:1a:b2:ca:3a: 54:85:77:a5:e8:08:5f:c3:24:77:45:5e:14:bd:66:82:e0:92: 5e:4e:9d:b2:ae:20:6d:fa:c6:ff:a2:3b:90:44:b8:41:06:90: 65:f0:80:a7:cb:cb:87:ea:58:2f:0f:5a:31:56:b7:3a:c0:8b: 85:e7:47:23:27:6e:24:49:45:b8:b7:a8:26:7f:de:c1:70:06: 8e:1d:10:87:da:c1:19:69:bd:8d:c5:9d:1c:4c:33:02:1c:ec: 6f:10:b2:56:02:bc:ba:9c:27:8d:9d:58:96:22:0f:18:93:01: e9:d0:cd:85:a4:fd:de:f3:0b:b2:96:b2:8a:a5:7e:03:cf:16: 41:26:fd:2c:c2:76:be:21:4d:e2:4b:9c:11:c2:5f:c8:f0:3d: 80:df:eb:e7:67:23:68:7f:8c:08:e8:7a:4a:d9:55:5f:93:2f: 00:d7:e8:ea:0c:8f:9e:cc:8f:bf:17:08:79:12:4f:42:c2:72: 62:e4:b4:94:66:e9:0a:89:f6:74:07:56:12:1d:1d:5b:cc:c0: aa:59:1e:7c:f8:09:82:3b:05:aa:24:25:db:81:b9:90:eb:b6: 8f:84:ca:38:70:9b:97:b4:3c:0d:21:8b:6c:6d:ad:5c:56:06: 05:6b:a0:f5 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOZowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTM3NDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkEyQ0QyQUYxMTAvBgNVBAUTKDMzNUE1M0MxMTMyRTU0MEMzQUI1REY0 MkYxNDg4N0IzMzI0REVCNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA5mzxUleH+RamccqqlstMwISosYuhcDaIcsr+X1LHh4aPJPgUzL32vTrHhC2g ZcOll1/taq/2JjstWE16sL7GXN4ngKC0AmCpvj6aUV4EHDm5lgZULjy8GH/2Kiqi eauR75LWOn9qtfLLtD+kZM7fXx1xpiiG7fMLy4kgHV3fnNNMgy4N3gtng66j33ve bT/iZSYy+wbVJPv03yJjxUBVyj4NAKriPhCPUNigI7WeDQ9WT890pyptfPVECK8u AdD86gCEqN3e0owuniYfEdkmHJq3QOoOlFKKv0o3cZrI8hLzZR0fXcsDxiUN++Qc pKVwH0kroqbGgMFmPD+Q3rdXAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUM1pTwRMu VAw6td9C8UiHszJN60QwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMkNEMi81NTNGNTBGMDY0RTUx MUU4OTY4RkVGMkVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTJDRDIvNTUzRjUwRjA2NEU1MTFFODk2OEZFRjJFRjhBRUEyMjgvTTFwVHdS TXVWQXc2dGQ5QzhVaUhzekpONjBRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAIkwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm3hwDBAKaSdgwDQQC AAIwBwMFACwP95gwDQYJKoZIhvcNAQELBQADggEBAFCi1aEHKscjg5BP1D0HGrLK OlSFd6XoCF/DJHdFXhS9ZoLgkl5OnbKuIG36xv+iO5BEuEEGkGXwgKfLy4fqWC8P WjFWtzrAi4XnRyMnbiRJRbi3qCZ/3sFwBo4dEIfawRlpvY3FnRxMMwIc7G8QslYC vLqcJ42dWJYiDxiTAenQzYWk/d7zC7KWsoqlfgPPFkEm/SzCdr4hTeJLnBHCX8jw PYDf6+dnI2h/jAjoekrZVV+TLwDX6OoMj57Mj78XCHkST0LCcmLktJRm6QqJ9nQH VhIdHVvMwKpZHnz4CYI7BaokJduBuZDrto+Eyjhwm5e0PA0hi2xtrVxWBgVroPU= -----END CERTIFICATE-----Generated at Sun Jan 25 04:21:21 2026 by rpki-client