This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer File: MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer (raw, json) Hash identifier: SW7Hfb5raR+42hBT+oQZzgSJtChe1jTgHJjb82VfqhI= Subject key identifier: 32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36CE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Wed 12 Nov 2025 15:46:00 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 37057 IP: 41.76.16.0/21 IP: 41.191.200.0/21 IP: 197.189.128.0/18 IP: 197.231.32.0/19 IP: 197.254.128.0/18 IP: 2c0f:ffa8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14030 (0x36ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 12 15:46:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36FAE49AF, serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:9c:2e:e0:f0:00:fd:51:d1:d3:52:8f:57: eb:78:aa:20:ce:98:0f:46:c3:f7:4a:64:86:6e:78: 41:6f:ec:40:95:54:79:c0:63:d5:ff:eb:a8:93:6f: 30:18:65:fc:29:88:b8:fd:90:01:c1:95:bc:e9:9f: a4:1a:11:35:d8:76:d4:76:db:da:88:6b:b0:69:ef: 98:0c:55:b6:a0:42:f7:f4:a0:79:c1:e5:30:46:04: 4f:57:53:5c:57:b4:92:00:31:1a:60:69:ff:b6:2b: dc:0f:61:a2:f0:ee:50:e1:24:38:73:ab:2d:eb:07: 94:e8:c4:9e:48:57:69:50:a1:1d:12:c4:51:13:dc: 45:6e:e0:5f:8e:90:c2:53:1a:21:a7:b1:85:78:1d: 7a:5f:20:4e:29:54:6f:3d:21:eb:0b:61:1e:32:64: 8f:7a:65:4c:cd:13:6c:ea:ed:45:2a:02:b3:3c:a3: dd:29:6f:17:20:c5:cd:43:03:ec:ce:c2:ab:4b:a9: 3c:96:fc:11:ca:fe:f4:fd:6e:49:12:07:7c:6e:07: 31:e9:e2:dd:0f:a4:45:e6:e7:93:ea:d4:12:ed:fe: 6d:4c:8d:22:70:1a:9c:72:a4:6a:7b:e9:79:30:e6: 14:3b:d0:75:8b:58:36:ba:32:01:6c:5f:22:95:7d: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37057 sbgp-ipAddrBlock: critical IPv4: 41.76.16.0/21 41.191.200.0/21 197.189.128.0/18 197.231.32.0/19 197.254.128.0/18 IPv6: 2c0f:ffa8::/32 Signature Algorithm: sha256WithRSAEncryption c0:40:5a:ed:89:7b:af:19:cf:c0:7e:c1:91:21:5e:7d:32:2b: c7:a8:9c:4a:d1:06:b3:83:94:6e:ac:f0:45:9e:2e:58:5a:d0: 11:5a:ec:03:d2:4f:0b:c0:c0:f3:2d:15:59:ee:c9:2a:bd:4c: 45:bd:28:c0:f7:98:9a:50:19:98:15:1d:f1:34:a6:d5:28:cc: 76:f6:a4:4a:93:80:79:b2:61:b7:3b:bf:7a:07:fe:76:96:2a: ca:0f:0e:c4:96:0c:a4:0c:17:8c:e5:0d:ec:2c:e5:e9:10:0d: e8:52:1e:c9:bc:ce:66:b8:b0:8e:88:40:e6:a6:b1:13:79:a0: 83:57:5b:17:cf:19:70:31:6b:15:6b:87:80:ce:f3:29:d9:65: 87:f6:3d:99:8d:85:f5:16:81:0a:cb:79:b3:7c:c8:c3:c2:d9: 57:31:84:a3:40:37:c2:15:ea:7d:3f:c1:39:f6:e4:2e:98:4b: dd:fe:cf:32:91:85:39:64:b0:46:81:af:26:f7:52:69:b5:a1: cf:a8:22:7d:8e:5d:df:af:27:4f:51:48:3c:df:2c:8c:20:5a: e7:4f:10:25:d4:5e:f0:38:da:6e:cd:c4:7d:89:07:5a:04:92: 66:87:84:1a:9d:1d:6a:87:10:5e:b4:ea:4b:2d:88:dc:5a:20: cb:fc:42:c4 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgICNs4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTIxNTQ2MDBaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZBRTQ5QUYxMTAvBgNVBAUTKDMyMzk0RjlBMDUwODlBNTE0MEU4NENB RkU4OUUyRDE5QzFCNTIzMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJZZwu4PAA/VHR01KPV+t4qiDOmA9Gw/dKZIZueEFv7ECVVHnAY9X/66iTbzAY ZfwpiLj9kAHBlbzpn6QaETXYdtR229qIa7Bp75gMVbagQvf0oHnB5TBGBE9XU1xX tJIAMRpgaf+2K9wPYaLw7lDhJDhzqy3rB5ToxJ5IV2lQoR0SxFET3EVu4F+OkMJT GiGnsYV4HXpfIE4pVG89IesLYR4yZI96ZUzNE2zq7UUqArM8o90pbxcgxc1DA+zO wqtLqTyW/BHK/vT9bkkSB3xuBzHp4t0PpEXm55Pq1BLt/m1MjSJwGpxypGp76Xkw 5hQ70HWLWDa6MgFsXyKVfXirAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUMjlPmgUI mlFA6Eyv6J4tGcG1IyAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQUU0OS9BN0FFMTY1OEJGREUx MUYwODA3MjBGNzlEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkFFNDkvQTdBRTE2NThCRkRFMTFGMDgwNzIwRjc5REFFNEVDOUMvTWpsUG1n VUltbEZBNkV5djZKNHRHY0cxSXlBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkMEwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAMpTBADBAMpv8gDBAbF vYADBAXF5yADBAbF/oAwDQQCAAIwBwMFACwP/6gwDQYJKoZIhvcNAQELBQADggEB AMBAWu2Je68Zz8B+wZEhXn0yK8eonErRBrODlG6s8EWeLlha0BFa7APSTwvAwPMt FVnuySq9TEW9KMD3mJpQGZgVHfE0ptUozHb2pEqTgHmyYbc7v3oH/naWKsoPDsSW DKQMF4zlDews5ekQDehSHsm8zma4sI6IQOamsRN5oINXWxfPGXAxaxVrh4DO8ynZ ZYf2PZmNhfUWgQrLebN8yMPC2VcxhKNAN8IV6n0/wTn25C6YS93+zzKRhTlksEaB ryb3Umm1oc+oIn2OXd+vJ09RSDzfLIwgWudPECXUXvA42m7NxH2JB1oEkmaHhBqd HWqHEF606kstiNxaIMv8QsQ= -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:34 2025 by rpki-client