This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer File: MU_85UKRThk8fBoqA8c1dGLqGBY.cer (raw, json) Hash identifier: ijpAU1JZptXOpG4SU4X1DNPSt8XhnbWEL/qNhw6yfuI= Subject key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3928 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:20:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 19676 AS: 21280 AS: 33768 AS: 36942 IP: 41.60.0.0/16 IP: 41.72.192.0/19 IP: 41.77.144.0/21 IP: 41.79.132.0/22 IP: 41.84.128.0/19 IP: 41.160.0.0/12 IP: 41.190.128.0/19 IP: 41.191.224.0/21 IP: 41.215.248.0/22 IP: 41.216.96.0/19 IP: 41.220.224.0/19 IP: 41.222.0.0/21 IP: 41.223.224.0/22 IP: 154.120.192.0/18 IP: 196.12.128.0/19 IP: 196.27.96.0/19 IP: 196.46.124.0/22 IP: 196.201.1.0/24 IP: 196.201.16.0/21 IP: 196.201.228.0/22 IP: 196.216.64.0/19 IP: 197.155.64.0/19 IP: 197.155.224.0/20 IP: 197.211.192.0/18 IP: 2001:4238::/32 IP: 2001:42a8::/32 IP: 2001:4328::/32 IP: 2001:43b8::/32 IP: 2c0f:f830::/32 IP: 2c0f:f8f0::/32 IP: 2c0f:fa10::/32 IP: 2c0f:fe30::/32 IP: 2c0f:fe40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14632 (0x3928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:20:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:37:4b:7b:fc:f9:41:3e:68:f7:77:32:7a: a9:de:58:b6:94:20:05:13:91:87:94:7d:b4:6e:4a: 26:e6:6b:1e:2f:57:8e:53:1a:6a:43:d3:88:ab:94: 20:db:7d:a3:c4:e1:64:91:5b:33:24:e7:59:36:d6: fd:f3:60:03:22:71:9b:1a:37:cc:d3:9c:a2:5b:50: fe:a3:6f:7c:38:8f:f9:53:0b:f0:a4:dc:2b:5b:7a: 6b:a7:1d:19:1b:63:36:2e:31:56:36:ff:26:22:83: 21:04:28:69:fe:70:5a:3c:e4:24:b7:f3:ba:c7:24: 8c:f3:01:99:af:6b:06:19:42:3d:01:44:bf:1a:5c: 02:82:27:1f:d2:3c:79:07:5c:5b:68:72:80:42:47: 9c:1e:b1:db:7b:21:46:07:59:d6:46:ed:bf:de:54: 8b:b9:d5:8e:58:b2:32:ea:82:0e:ad:3d:f0:75:b7: 48:55:80:b9:50:8a:39:86:37:e4:52:99:64:6c:a8: 68:35:46:b8:86:15:d1:ad:0f:b4:30:3a:10:a4:2e: 44:b5:be:f5:f1:25:ee:f6:3c:4f:21:33:c7:ec:a4: ce:d5:ae:3f:01:8c:54:ad:d5:cf:43:fa:c6:dd:af: b6:22:65:75:46:33:0b:a5:ce:39:d5:82:bc:ba:3b: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 19676 21280 33768 36942 sbgp-ipAddrBlock: critical IPv4: 41.60.0.0/16 41.72.192.0/19 41.77.144.0/21 41.79.132.0/22 41.84.128.0/19 41.160.0.0/12 41.190.128.0/19 41.191.224.0/21 41.215.248.0/22 41.216.96.0/19 41.220.224.0/19 41.222.0.0/21 41.223.224.0/22 154.120.192.0/18 196.12.128.0/19 196.27.96.0/19 196.46.124.0/22 196.201.1.0/24 196.201.16.0/21 196.201.228.0/22 196.216.64.0/19 197.155.64.0/19 197.155.224.0/20 197.211.192.0/18 IPv6: 2001:4238::/32 2001:42a8::/32 2001:4328::/32 2001:43b8::/32 2c0f:f830::/32 2c0f:f8f0::/32 2c0f:fa10::/32 2c0f:fe30::/32 2c0f:fe40::/32 Signature Algorithm: sha256WithRSAEncryption 27:92:f8:15:bb:45:ef:30:2e:c1:61:e8:59:ce:26:f2:d2:bf: 9e:01:a2:4e:d9:f1:e5:ce:88:29:0e:b7:3e:c2:12:7a:39:e4: 4f:d8:69:0d:4e:c7:b6:9b:c0:08:40:04:d2:be:d2:19:b0:56: 0d:d1:b6:aa:0a:2b:6f:7c:c5:4b:75:b6:de:98:63:f1:83:70: 8d:8b:f9:ec:12:92:d4:b1:30:34:d1:eb:1c:e4:22:3e:a0:fe: 44:c6:de:c7:bf:f9:fb:e0:ae:03:67:32:27:8c:53:07:67:28: 79:1a:7c:16:5a:31:9c:d3:aa:17:be:40:9e:cc:78:77:82:0f: 59:90:6f:7f:8c:31:24:b7:75:9d:97:3a:ea:b4:cf:cb:a9:88: b7:61:5b:65:4c:3a:ee:98:7b:ca:99:ba:72:a2:25:d0:42:f4: cc:10:b8:19:d6:b0:87:6e:a1:98:c7:37:15:05:d6:3f:8e:78: 83:75:f4:fb:0c:13:db:41:8e:7f:32:bf:eb:3d:b8:d2:0a:e3: 94:94:8d:64:46:15:06:2b:6c:90:1c:12:5b:67:ca:c8:ec:20: 87:5e:81:60:98:67:f3:d9:72:a0:56:4e:ce:93:c8:fe:6a:55: 8f:a1:8e:b2:c7:14:e2:cb:84:f0:60:cf:6e:3d:fa:43:50:e0: 2d:25:56:92 -----BEGIN CERTIFICATE----- MIIG9zCCBd+gAwIBAgICOSgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTIwMjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjY4MDM3QUYxMTAvBgNVBAUTKDMxNEZGQ0U1NDI5MTRFMTkzQzdDMUEy QTAzQzczNTc0NjJFQTE4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjqzdLe/z5QT5o93cyeqneWLaUIAUTkYeUfbRuSibmax4vV45TGmpD04irlCDb faPE4WSRWzMk51k21v3zYAMicZsaN8zTnKJbUP6jb3w4j/lTC/Ck3CtbemunHRkb YzYuMVY2/yYigyEEKGn+cFo85CS387rHJIzzAZmvawYZQj0BRL8aXAKCJx/SPHkH XFtocoBCR5wesdt7IUYHWdZG7b/eVIu51Y5YsjLqgg6tPfB1t0hVgLlQijmGN+RS mWRsqGg1RriGFdGtD7QwOhCkLkS1vvXxJe72PE8hM8fspM7Vrj8BjFSt1c9D+sbd r7YiZXVGMwulzjnVgry6O6QzAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUMU/85UKR Thk8fBoqA8c1dGLqGBYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2ODAzNy8yQUIzOTBFMjZEQzcx MUU2ODI2NTM2MkRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjgwMzcvMkFCMzkwRTI2REM3MTFFNjgyNjUzNjJERjhBRUEyMjgvTVVfODVV S1JUaGs4ZkJvcUE4YzFkR0xxR0JZLm1mdDAnBggrBgEFBQcBCAEB/wQYMBagFDAS AgJM3AICUyACAwCD6AIDAJBOMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCBlQQCAAEw gY4DAwApPAMEBSlIwAMEAylNkAMEAilPhAMEBSlUgAMDBCmgAwQFKb6AAwQDKb/g AwQCKdf4AwQFKdhgAwQFKdzgAwQDKd4AAwQCKd/gAwQGmnjAAwQFxAyAAwQFxBtg AwQCxC58AwQAxMkBAwQDxMkQAwQCxMnkAwQFxNhAAwQFxZtAAwQExZvgAwQGxdPA MEUEAgACMD8DBQAgAUI4AwUAIAFCqAMFACABQygDBQAgAUO4AwUALA/4MAMFACwP +PADBQAsD/oQAwUALA/+MAMFACwP/kAwDQYJKoZIhvcNAQELBQADggEBACeS+BW7 Re8wLsFh6FnOJvLSv54Bok7Z8eXOiCkOtz7CEno55E/YaQ1Ox7abwAhABNK+0hmw Vg3RtqoKK298xUt1tt6YY/GDcI2L+ewSktSxMDTR6xzkIj6g/kTG3se/+fvgrgNn MieMUwdnKHkafBZaMZzTqhe+QJ7MeHeCD1mQb3+MMSS3dZ2XOuq0z8upiLdhW2VM Ou6Ye8qZunKiJdBC9MwQuBnWsIduoZjHNxUF1j+OeIN19PsME9tBjn8yv+s9uNIK 45SUjWRGFQYrbJAcEltnysjsIIdegWCYZ/PZcqBWTs6TyP5qVY+hjrLHFOLLhPBg z249+kNQ4C0lVpI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:32 2026 by rpki-client