This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer File: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer (raw, json) Hash identifier: zaClUE32FPlrMJWeadyldMjs/7osVXnENfa2+vmmeDk= Subject key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A67 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:09:24 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.222.100.0/22 IP: 2001:43f8:1700::/46 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14951 (0x3a67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:09:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:d3:3c:f3:29:16:15:fa:6f:37:cc:f6:53: a5:0d:28:3f:33:8d:9a:27:79:99:6a:48:be:a4:cb: f2:b0:bd:bf:70:af:53:a7:a6:63:fa:45:a2:4d:16: 4f:19:81:b6:24:3f:bc:c7:19:67:b8:3a:93:d6:de: e0:56:40:85:46:e8:f3:4c:8b:76:ea:04:6c:37:96: c9:15:be:b4:a6:57:95:4e:d2:af:37:d5:f7:f4:f5: d6:ec:2f:52:2a:fd:d8:d0:a6:4b:82:c4:66:06:d5: cd:76:20:dc:fe:45:9c:9c:03:11:4f:aa:de:7c:5a: e6:d3:4f:3f:72:e8:c0:3b:5c:06:87:03:35:af:60: ff:1a:1e:96:26:ed:f5:b5:b4:b6:4c:07:b6:c6:24: b1:9b:36:bd:cf:b9:6f:da:a2:9e:42:e6:44:cf:af: cb:ad:52:e2:6c:d6:ce:52:e2:f7:bf:9a:f4:d9:0d: 52:ea:00:4e:f7:e9:99:5b:45:eb:fd:55:07:bd:05: 78:59:07:6d:c3:45:c6:c8:93:07:a3:66:5b:a2:d7: 30:34:74:85:57:d2:71:fc:b8:33:28:3c:8f:9a:a9: 2b:95:43:0d:ef:86:6e:42:8e:b0:a7:48:5f:63:5c: a4:5e:bd:2d:90:94:11:2a:a0:65:af:7f:a7:ff:3d: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft sbgp-ipAddrBlock: critical IPv4: 102.222.100.0/22 IPv6: 2001:43f8:1700::/46 Signature Algorithm: sha256WithRSAEncryption bc:26:cf:1e:ff:2b:f8:c6:34:9f:8b:dc:4d:85:ff:d8:11:6f: 04:20:bc:0d:d0:cc:6b:bc:b1:7f:fc:81:b6:19:89:61:7c:36: 15:55:4e:c7:60:24:eb:ab:5a:82:a9:cd:a7:e8:b6:e6:1f:80: 47:48:f8:23:b3:38:14:23:a5:42:6a:8e:20:bf:4c:64:4a:c9: 2c:8c:b3:f1:02:83:c9:a8:3b:9a:d8:6a:24:81:2f:fc:a9:03: c6:ca:cd:9b:9c:8b:77:4c:33:2a:e9:3f:82:5e:a3:15:62:35: ad:bc:3f:02:e2:5f:95:d0:af:7a:2f:31:7d:ca:6c:3e:2f:5e: 48:3a:67:ab:22:f1:cf:3d:53:b4:69:31:7f:2b:36:ac:1c:28: 2d:a3:ab:f8:17:56:2b:44:d1:46:ba:0c:9c:a8:4f:04:6c:cd: c6:ca:37:55:a9:45:f9:24:e5:79:8c:1a:35:35:47:2b:f2:b0: f7:19:74:8b:6d:1b:13:52:0e:24:77:05:95:c4:5c:a2:f3:05: 1d:65:0c:be:5c:30:7b:c8:14:13:be:22:ae:62:00:15:ff:64: 17:70:f7:15:21:3d:99:99:0d:7d:3c:de:58:97:2c:09:44:b2: 44:02:2a:ee:7c:cb:33:78:c9:41:c2:cf:aa:0f:d3:f4:70:d0: 84:0d:99:1c -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgICOmcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjA5MjRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjY4MjhCQUYxMTAvBgNVBAUTKDMzRDM4QzQ0MTFBNDg4NTgxNjk3RjYx REJGNUZCNEZEMzU4RDgyMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLX9M88ykWFfpvN8z2U6UNKD8zjZoneZlqSL6ky/Kwvb9wr1OnpmP6RaJNFk8Z gbYkP7zHGWe4OpPW3uBWQIVG6PNMi3bqBGw3lskVvrSmV5VO0q831ff09dbsL1Iq /djQpkuCxGYG1c12INz+RZycAxFPqt58WubTTz9y6MA7XAaHAzWvYP8aHpYm7fW1 tLZMB7bGJLGbNr3PuW/aop5C5kTPr8utUuJs1s5S4ve/mvTZDVLqAE736ZlbRev9 VQe9BXhZB23DRcbIkwejZlui1zA0dIVX0nH8uDMoPI+aqSuVQw3vhm5CjrCnSF9j XKRevS2QlBEqoGWvf6f/PRiXAgMBAAGjggMAMIIC/DAdBgNVHQ4EFgQUM9OMRBGk iFgWl/Ydv1+0/TWNgh8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2ODI4Qi80QTBDODdBMkQzMDEx MUVBQjE0RjYxM0NGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjgyOEIvNEEwQzg3QTJEMzAxMTFFQUIxNEY2MTNDRjhBRUEyMjgvTTlPTVJC R2tpRmdXbF9ZZHYxLTBfVFdOZ2g4Lm1mdDAwBggrBgEFBQcBBwEB/wQhMB8wDAQC AAEwBgMEAmbeZDAPBAIAAjAJAwcCIAFD+BcAMA0GCSqGSIb3DQEBCwUAA4IBAQC8 Js8e/yv4xjSfi9xNhf/YEW8EILwN0MxrvLF//IG2GYlhfDYVVU7HYCTrq1qCqc2n 6LbmH4BHSPgjszgUI6VCao4gv0xkSsksjLPxAoPJqDua2GokgS/8qQPGys2bnIt3 TDMq6T+CXqMVYjWtvD8C4l+V0K96LzF9ymw+L15IOmerIvHPPVO0aTF/KzasHCgt o6v4F1YrRNFGugycqE8EbM3GyjdVqUX5JOV5jBo1NUcr8rD3GXSLbRsTUg4kdwWV xFyi8wUdZQy+XDB7yBQTviKuYgAV/2QXcPcVIT2ZmQ19PN5YlywJRLJEAirufMsz eMlBws+qD9P0cNCEDZkc -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:42 2026 by rpki-client