This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer File: M_vh3N40HGSYaNQWvz6gAALE3yA.cer (raw, json) Hash identifier: wAmOmi/WFqsJN1JoqjRO0GwZ97Aplbyu2NW6hXcAiGk= Subject key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39FF Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:54:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37799 AS: 328442 IP: 102.68.56.0/21 IP: 102.213.120.0/22 IP: 102.216.240.0/22 IP: 196.60.92.0/24 IP: 2001:43ff:6000::/48 IP: 2c0f:ed00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14847 (0x39ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:54:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F365C754AF, serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:9e:1b:4c:88:4e:e4:47:52:53:68:ff:06: 16:c9:81:5e:ef:70:e6:13:c3:fe:01:e6:38:2d:db: a6:25:e5:f9:88:8d:ef:63:f5:01:f9:57:dc:4b:dd: 6b:95:3d:85:75:28:64:cf:40:62:45:50:74:91:97: 2e:1d:64:d8:18:0a:57:65:10:7c:9f:3d:04:cd:ce: 42:ba:43:6d:ad:89:78:ce:9f:08:a5:1c:da:79:c6: 92:51:be:3e:f7:46:35:f1:7a:1e:94:61:3d:e1:2f: 2f:ac:94:9a:98:90:c3:d3:f6:bd:f3:c5:1a:b8:46: 0e:7b:d0:c8:ea:17:5c:22:40:36:ee:8f:46:03:23: 6a:f8:3c:63:10:71:ac:2b:d3:ed:c0:7e:39:90:28: 92:29:32:ac:8a:3f:4e:39:76:41:8a:80:63:19:49: bc:30:26:47:c6:b7:19:09:71:ea:d2:3c:ed:73:4b: a8:f5:db:57:75:47:a0:25:3d:42:be:b8:1d:13:07: 3d:76:f3:51:4a:b1:4d:5d:f7:b5:41:5c:8c:e8:67: c5:70:ff:67:73:65:dd:e8:57:0a:2e:58:1a:33:4c: 91:21:0e:2b:6d:42:b6:24:96:50:0f:b7:81:56:34: 3c:26:6d:df:b6:8a:2a:b4:04:9b:88:43:90:e7:df: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37799 328442 sbgp-ipAddrBlock: critical IPv4: 102.68.56.0/21 102.213.120.0/22 102.216.240.0/22 196.60.92.0/24 IPv6: 2001:43ff:6000::/48 2c0f:ed00::/32 Signature Algorithm: sha256WithRSAEncryption 24:c8:7b:0f:0c:40:27:40:be:6b:fd:ee:69:a7:2f:53:83:12: 21:bc:ba:09:8b:46:f5:f4:c2:0e:a5:be:57:0a:89:9e:6d:4b: 47:f5:c6:7d:a1:3f:5c:81:65:01:78:f8:79:2d:55:f2:be:a1: 12:4c:30:82:e1:7b:18:3d:f9:49:6e:6e:6d:65:32:63:c7:1b: 3b:d1:79:5a:ad:e2:22:9d:56:bb:d6:03:10:7c:8f:4e:57:d6: 6f:20:2f:53:ba:3d:2b:f9:79:ad:22:30:82:35:a6:e2:d2:20: 2a:3c:f2:4f:a8:d1:52:72:ce:f1:8a:be:05:a6:55:1f:03:03: 8d:b9:65:d2:7f:49:19:f0:b6:d5:51:97:98:8d:34:d4:d7:f0: c5:c6:4a:80:5e:3b:31:42:2d:a8:e6:dd:bb:c3:fa:17:84:5f: ab:57:56:0a:47:be:f2:c5:ab:19:5e:63:e9:d5:f4:10:47:2c: 91:9e:c6:f4:51:7c:3f:af:a2:88:1b:2b:f7:ee:bf:65:a0:e6: b4:45:ee:1d:90:c8:da:45:56:67:92:ea:70:73:13:29:18:d4: 8c:a8:0d:12:d2:d9:7a:f4:c2:34:07:af:22:eb:cc:69:29:7f: a1:7a:25:e3:5b:82:21:eb:a3:19:8c:84:3f:56:27:ad:e6:f0: 7c:14:73:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgICOf8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTU0MjFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjVDNzU0QUYxMTAvBgNVBAUTKDMzRkJFMURDREUzNDFDNjQ5ODY4RDQx NkJGM0VBMDAwMDJDNERGMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIjZ4bTIhO5EdSU2j/BhbJgV7vcOYTw/4B5jgt26Yl5fmIje9j9QH5V9xL3WuV PYV1KGTPQGJFUHSRly4dZNgYCldlEHyfPQTNzkK6Q22tiXjOnwilHNp5xpJRvj73 RjXxeh6UYT3hLy+slJqYkMPT9r3zxRq4Rg570MjqF1wiQDbuj0YDI2r4PGMQcawr 0+3AfjmQKJIpMqyKP045dkGKgGMZSbwwJkfGtxkJcerSPO1zS6j121d1R6AlPUK+ uB0TBz1281FKsU1d97VBXIzoZ8Vw/2dzZd3oVwouWBozTJEhDittQrYkllAPt4FW NDwmbd+2iiq0BJuIQ5Dn38sDAgMBAAGjggM6MIIDNjAdBgNVHQ4EFgQUM/vh3N40 HGSYaNQWvz6gAALE3yAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1Qzc1NC85QzIzNDFFOERCOTEx MUVEQkVCRjYyMEMzMDZEOEMxRC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NUM3NTQvOUMyMzQxRThEQjkxMTFFREJFQkY2MjBDMzA2RDhDMUQvTV92aDNO NDBIR1NZYU5RV3Z6NmdBQUxFM3lBLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAk6cCAwUC+jBJBggrBgEFBQcBBwEB/wQ6MDgwHgQCAAEwGAMEA2ZEOAMEAmbV eAMEAmbY8AMEAMQ8XDAWBAIAAjAQAwcAIAFD/2AAAwUALA/tADANBgkqhkiG9w0B AQsFAAOCAQEAJMh7DwxAJ0C+a/3uaacvU4MSIby6CYtG9fTCDqW+VwqJnm1LR/XG faE/XIFlAXj4eS1V8r6hEkwwguF7GD35SW5ubWUyY8cbO9F5Wq3iIp1Wu9YDEHyP TlfWbyAvU7o9K/l5rSIwgjWm4tIgKjzyT6jRUnLO8Yq+BaZVHwMDjbll0n9JGfC2 1VGXmI001NfwxcZKgF47MUItqObdu8P6F4Rfq1dWCke+8sWrGV5j6dX0EEcskZ7G 9FF8P6+iiBsr9+6/ZaDmtEXuHZDI2kVWZ5LqcHMTKRjUjKgNEtLZevTCNAevIuvM aSl/oXol41uCIeujGYyEP1YnrebwfBRzaw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:30 2026 by rpki-client