This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer File: M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer (raw, json) Hash identifier: UYtZuvlPrgfQGz5/IpvQ6monDe6zTrbFyRDPIbeXdWs= Subject key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E8F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:49:04 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329389 IP: 102.210.32.0/22 IP: 2001:43fc:3000::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16015 (0x3e8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:49:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:d3:ae:a1:25:8b:2c:be:53:9a:21:2a:ce: f4:b3:4a:7b:79:18:1f:93:b6:37:74:66:1f:36:0f: a0:a6:bf:d0:d3:ed:70:e6:8a:87:1d:1d:89:47:94: fc:95:8b:a2:2d:f1:cd:5e:be:06:bd:be:b8:0b:ff: 2f:4b:76:0d:28:e8:a8:b9:71:5f:5a:6c:2b:7e:b2: de:9a:99:6f:58:cb:73:f9:11:14:3c:66:bd:d1:c9: 19:b1:f3:49:9a:8d:e5:88:66:31:e7:b9:93:6d:28: 8b:d6:31:26:09:e2:cb:d9:96:9f:9a:6b:ba:5e:a0: fd:72:56:8b:cc:f2:4d:82:45:e0:ae:11:a9:d2:c2: 91:c2:55:03:d0:7a:cf:04:ba:eb:25:f5:05:30:05: a8:7e:e2:fb:6e:3c:52:17:80:ca:c5:cb:4f:d7:1d: 5a:da:b2:50:4e:9e:a2:4e:db:d5:4f:7f:63:fb:12: a1:89:ce:5e:a7:d2:e0:fc:1e:2f:b9:62:c1:8d:86: 69:5b:9e:e0:85:b5:24:96:df:65:b0:8a:52:20:e7: 74:73:08:72:e0:91:97:d4:4a:de:5a:94:27:92:61: 16:b7:10:f8:4c:c1:e9:1b:2a:96:e3:ea:1c:c3:6c: 25:2b:70:08:53:13:ac:0b:b6:97:e0:ad:4c:4f:26: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329389 sbgp-ipAddrBlock: critical IPv4: 102.210.32.0/22 IPv6: 2001:43fc:3000::/48 Signature Algorithm: sha256WithRSAEncryption aa:c0:77:5a:83:7f:11:55:4e:5c:98:86:61:be:8a:cc:de:79: e8:91:1c:85:c4:be:46:3f:bb:e7:b1:e7:29:97:cc:4a:54:1c: 16:f6:06:a6:cd:6d:9a:43:1c:df:a1:3b:65:b2:a3:61:71:6d: e4:05:bb:e8:9b:19:cb:93:9d:1b:41:41:d5:da:1d:40:83:b3: 66:bb:52:01:9c:4e:8f:80:33:d7:33:01:2a:71:c7:29:ea:13: 5f:3d:47:72:7d:bc:c5:4e:8f:94:4e:3e:e4:80:ef:e9:d7:77: 25:94:f3:5b:8c:fa:13:af:c9:0b:58:9b:fa:15:25:ac:43:2e: 86:67:32:eb:e9:6c:f2:b5:60:d3:d1:1a:2f:5e:c7:9c:98:1d: 06:d7:3d:51:81:19:0e:f4:2f:8d:26:91:7e:31:6d:ae:a2:b9: 5d:6c:19:74:a7:50:56:10:90:19:fb:ad:d8:81:c9:ef:0a:84: d3:7b:1d:17:d9:99:26:85:22:93:87:c8:b0:1e:39:f9:30:52: 39:c7:74:c2:38:69:35:fc:35:dd:bc:dd:b5:01:d6:dd:79:e5: a1:45:1f:b2:f9:63:85:5e:24:ca:e9:c4:c4:e6:8f:d8:78:11: f8:3c:f9:f6:60:fc:6d:ba:a1:31:76:fb:9a:f3:8d:d8:9b:f1: 51:1e:6e:a0 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgICPo8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDQ5MDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU0Q0M2QUYxMTAvBgNVBAUTKDMzOTRERjcwMTkyMzQ0M0M1Rjk4RjAz REI3RkYwNTczQUVCNzY0OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIv9OuoSWLLL5TmiEqzvSzSnt5GB+Ttjd0Zh82D6Cmv9DT7XDmiocdHYlHlPyV i6It8c1evga9vrgL/y9Ldg0o6Ki5cV9abCt+st6amW9Yy3P5ERQ8Zr3RyRmx80ma jeWIZjHnuZNtKIvWMSYJ4svZlp+aa7peoP1yVovM8k2CReCuEanSwpHCVQPQes8E uusl9QUwBah+4vtuPFIXgMrFy0/XHVraslBOnqJO29VPf2P7EqGJzl6n0uD8Hi+5 YsGNhmlbnuCFtSSW32WwilIg53RzCHLgkZfUSt5alCeSYRa3EPhMwekbKpbj6hzD bCUrcAhTE6wLtpfgrUxPJvOlAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUM5TfcBkj RDxfmPA9t/8Fc663ZJIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNENDNi8zRkJGQ0UyRTAyNTcx MUVGODkzNTU3RjQwMDcwMDFCMS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTRDQzYvM0ZCRkNFMkUwMjU3MTFFRjg5MzU1N0Y0MDA3MDAxQjEvTTVUZmNC a2pSRHhmbVBBOXRfOEZjNjYzWkpJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBq0wMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJm0iAwDwQCAAIwCQMH ACABQ/wwADANBgkqhkiG9w0BAQsFAAOCAQEAqsB3WoN/EVVOXJiGYb6KzN556JEc hcS+Rj+757HnKZfMSlQcFvYGps1tmkMc36E7ZbKjYXFt5AW76JsZy5OdG0FB1dod QIOzZrtSAZxOj4Az1zMBKnHHKeoTXz1Hcn28xU6PlE4+5IDv6dd3JZTzW4z6E6/J C1ib+hUlrEMuhmcy6+ls8rVg09EaL17HnJgdBtc9UYEZDvQvjSaRfjFtrqK5XWwZ dKdQVhCQGfut2IHJ7wqE03sdF9mZJoUik4fIsB45+TBSOcd0wjhpNfw13bzdtQHW 3XnloUUfsvljhV4kyunExOaP2HgR+Dz59mD8bbqhMXb7mvON2JvxUR5uoA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:28 2026 by rpki-client