This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer File: MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer (raw, json) Hash identifier: BhBpBlOK9zpOlp89UFilAGQWLuYAJGC4UCpBDNHorcw= Subject key identifier: 32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F30 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:16:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37057 IP: 41.76.16.0/21 IP: 41.191.200.0/21 IP: 197.189.128.0/18 IP: 197.231.32.0/19 IP: 197.254.128.0/18 IP: 2c0f:ffa8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16176 (0x3f30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:16:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FAE49AF, serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:9c:2e:e0:f0:00:fd:51:d1:d3:52:8f:57: eb:78:aa:20:ce:98:0f:46:c3:f7:4a:64:86:6e:78: 41:6f:ec:40:95:54:79:c0:63:d5:ff:eb:a8:93:6f: 30:18:65:fc:29:88:b8:fd:90:01:c1:95:bc:e9:9f: a4:1a:11:35:d8:76:d4:76:db:da:88:6b:b0:69:ef: 98:0c:55:b6:a0:42:f7:f4:a0:79:c1:e5:30:46:04: 4f:57:53:5c:57:b4:92:00:31:1a:60:69:ff:b6:2b: dc:0f:61:a2:f0:ee:50:e1:24:38:73:ab:2d:eb:07: 94:e8:c4:9e:48:57:69:50:a1:1d:12:c4:51:13:dc: 45:6e:e0:5f:8e:90:c2:53:1a:21:a7:b1:85:78:1d: 7a:5f:20:4e:29:54:6f:3d:21:eb:0b:61:1e:32:64: 8f:7a:65:4c:cd:13:6c:ea:ed:45:2a:02:b3:3c:a3: dd:29:6f:17:20:c5:cd:43:03:ec:ce:c2:ab:4b:a9: 3c:96:fc:11:ca:fe:f4:fd:6e:49:12:07:7c:6e:07: 31:e9:e2:dd:0f:a4:45:e6:e7:93:ea:d4:12:ed:fe: 6d:4c:8d:22:70:1a:9c:72:a4:6a:7b:e9:79:30:e6: 14:3b:d0:75:8b:58:36:ba:32:01:6c:5f:22:95:7d: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37057 sbgp-ipAddrBlock: critical IPv4: 41.76.16.0/21 41.191.200.0/21 197.189.128.0/18 197.231.32.0/19 197.254.128.0/18 IPv6: 2c0f:ffa8::/32 Signature Algorithm: sha256WithRSAEncryption 72:82:01:18:66:9a:84:5f:28:04:b1:e9:d4:cf:c4:9f:51:0f: fc:5b:81:3b:cb:8a:53:1e:a0:7b:bb:86:f1:5e:cb:a7:12:19: 57:96:91:52:d9:70:7f:c3:4f:80:6c:58:b1:74:5b:34:6c:d5: e8:1c:8a:17:6e:01:19:db:70:95:0c:42:34:6f:86:c7:95:cc: 6b:6e:c5:15:6a:d9:3c:8f:c0:58:6e:b1:27:f3:ff:12:69:0d: 88:71:b1:1a:c1:d7:47:1b:a7:03:69:78:15:2b:f1:e0:4f:f1: a1:ca:ee:44:cc:b6:f9:62:48:d0:16:9d:16:b6:ed:c2:ea:0d: 1c:24:65:c1:c3:c9:4a:02:6a:d5:4b:13:05:aa:32:02:f7:6c: 08:5b:35:36:b8:7b:52:34:48:33:98:f4:8c:4f:64:bd:61:b0: 65:2b:1e:30:4e:09:1c:c5:35:80:c8:49:a5:96:8e:c5:7b:00: a8:c9:94:39:2a:ea:87:b4:88:7d:98:7d:29:28:cb:b6:59:d8: 9e:27:b7:8e:51:40:4f:48:1d:2b:e5:d7:c1:40:d7:9f:1c:7d: 60:af:0c:1c:96:32:08:03:83:18:8e:d7:69:3f:d0:94:59:d9: cf:9d:ff:ec:5e:b7:d9:58:3f:3b:d5:5b:63:0c:b5:a4:a2:dd: 07:c7:7d:be -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgICPzAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTE2MjZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZBRTQ5QUYxMTAvBgNVBAUTKDMyMzk0RjlBMDUwODlBNTE0MEU4NENB RkU4OUUyRDE5QzFCNTIzMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJZZwu4PAA/VHR01KPV+t4qiDOmA9Gw/dKZIZueEFv7ECVVHnAY9X/66iTbzAY ZfwpiLj9kAHBlbzpn6QaETXYdtR229qIa7Bp75gMVbagQvf0oHnB5TBGBE9XU1xX tJIAMRpgaf+2K9wPYaLw7lDhJDhzqy3rB5ToxJ5IV2lQoR0SxFET3EVu4F+OkMJT GiGnsYV4HXpfIE4pVG89IesLYR4yZI96ZUzNE2zq7UUqArM8o90pbxcgxc1DA+zO wqtLqTyW/BHK/vT9bkkSB3xuBzHp4t0PpEXm55Pq1BLt/m1MjSJwGpxypGp76Xkw 5hQ70HWLWDa6MgFsXyKVfXirAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUMjlPmgUI mlFA6Eyv6J4tGcG1IyAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQUU0OS9BN0FFMTY1OEJGREUx MUYwODA3MjBGNzlEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkFFNDkvQTdBRTE2NThCRkRFMTFGMDgwNzIwRjc5REFFNEVDOUMvTWpsUG1n VUltbEZBNkV5djZKNHRHY0cxSXlBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkMEwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAMpTBADBAMpv8gDBAbF vYADBAXF5yADBAbF/oAwDQQCAAIwBwMFACwP/6gwDQYJKoZIhvcNAQELBQADggEB AHKCARhmmoRfKASx6dTPxJ9RD/xbgTvLilMeoHu7hvFey6cSGVeWkVLZcH/DT4Bs WLF0WzRs1egcihduARnbcJUMQjRvhseVzGtuxRVq2TyPwFhusSfz/xJpDYhxsRrB 10cbpwNpeBUr8eBP8aHK7kTMtvliSNAWnRa27cLqDRwkZcHDyUoCatVLEwWqMgL3 bAhbNTa4e1I0SDOY9IxPZL1hsGUrHjBOCRzFNYDISaWWjsV7AKjJlDkq6oe0iH2Y fSkoy7ZZ2J4nt45RQE9IHSvl18FA158cfWCvDByWMggDgxiO12k/0JRZ2c+d/+xe t9lYPzvVW2MMtaSi3QfHfb4= -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:34 2026 by rpki-client