This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer File: Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer (raw, json) Hash identifier: lHa0x92EqEg0yoLVS/T6YYtqiHWG9KJOhUVI1LPDy4o= Subject key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E1B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:30:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 17652 AS: 23889 IP: 102.112.0.0/13 IP: 196.20.128.0/17 IP: 196.192.0.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15899 (0x3e1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:30:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:a9:fe:54:f8:2d:3a:20:b9:29:8d:48:3a: 7c:22:60:25:78:b5:6b:54:35:ca:c1:1a:6c:17:d0: 6e:fc:94:d6:fd:f6:71:b9:28:ff:fe:b9:74:f9:84: 0a:61:03:80:35:cb:1d:18:b2:83:9e:57:88:79:fb: 4e:b3:df:a7:c4:00:f8:33:3c:a1:99:0b:3c:70:27: 33:7b:af:6e:de:21:fe:63:7e:56:85:df:47:c6:04: 44:93:e1:2f:95:37:98:47:53:aa:7c:e3:2b:a0:37: 68:08:09:97:6f:9c:80:93:1c:b3:36:3b:79:e1:64: a5:72:32:96:63:40:75:92:22:ad:76:aa:69:81:0f: e6:17:31:db:48:ce:ff:a5:de:3d:ba:5d:41:08:fe: a5:6b:a5:c2:4a:6e:66:8c:be:bd:82:32:1d:7b:df: bf:3e:f7:a2:03:ff:a1:1b:c6:47:ec:04:78:9b:bb: cb:43:e0:70:af:bb:01:33:0a:1c:0d:1e:b1:77:e6: b6:94:a5:12:5e:14:4d:8e:f9:03:f4:dc:f9:56:18: 12:e7:89:37:c3:7b:8d:50:42:d2:b5:e9:35:ee:f3: 06:d7:b1:3e:19:bc:e8:d2:ef:76:1b:58:bc:70:2e: 4a:e3:9c:6a:a1:95:a6:22:10:16:88:8b:1a:23:62: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 17652 23889 sbgp-ipAddrBlock: critical IPv4: 102.112.0.0/13 196.20.128.0/17 196.192.0.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:4f:9d:7e:f8:62:69:53:91:d7:f4:cc:f0:17:c3:32:c5:59: 04:9f:ba:f3:45:89:07:2f:c4:c4:e6:22:89:c5:4a:00:ac:77: 6c:d2:88:1a:a2:ee:44:7b:b3:7d:18:01:6a:45:4c:09:d9:b1: e3:00:69:ce:d1:f9:80:70:6a:3d:24:77:6e:f7:a2:cb:ba:d2: 82:4a:2e:8e:23:fa:0d:ab:7e:93:58:4a:fc:93:b8:d4:4e:f0: b0:f5:83:68:fe:d6:f3:8d:e7:92:2c:30:b5:cc:1f:e5:e3:24: 30:d0:8d:98:45:57:c7:9d:63:43:0e:9e:15:c9:e0:15:dd:21: 8a:a0:7c:2f:85:aa:39:53:52:d5:9c:8d:52:9e:0c:14:f3:06: e9:65:ad:85:8e:5e:1b:61:a9:3d:98:ae:5b:e7:79:6c:a7:85: ec:07:dc:84:5c:3a:af:ed:ca:85:25:16:8e:62:73:28:94:3e: ff:4a:a1:e5:b8:a9:74:72:7d:0a:62:93:ae:53:69:2a:ab:8b: 7f:c5:84:83:ef:cf:85:bd:48:53:c9:94:72:9b:7a:b4:93:8f: 18:40:1a:da:5d:d1:12:ce:0c:90:ab:f2:4a:08:c1:e3:f0:ab: e5:0f:05:64:26:9b:b5:85:7e:0b:d0:65:58:07:56:d6:73:cc: 68:e4:0b:d1 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgICPhswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDMwMTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkQzOTMwQUYxMTAvBgNVBAUTKDM1Q0YwNjdEQzI2RUU0ODk1RjRCMTZB RDlCRDMwMEZFQUJDM0EzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwOqn+VPgtOiC5KY1IOnwiYCV4tWtUNcrBGmwX0G78lNb99nG5KP/+uXT5hAph A4A1yx0YsoOeV4h5+06z36fEAPgzPKGZCzxwJzN7r27eIf5jflaF30fGBEST4S+V N5hHU6p84yugN2gICZdvnICTHLM2O3nhZKVyMpZjQHWSIq12qmmBD+YXMdtIzv+l 3j26XUEI/qVrpcJKbmaMvr2CMh17378+96ID/6EbxkfsBHibu8tD4HCvuwEzChwN HrF35raUpRJeFE2O+QP03PlWGBLniTfDe41QQtK16TXu8wbXsT4ZvOjS73YbWLxw LkrjnGqhlaYiEBaIixojYmbLAgMBAAGjggMZMIIDFTAdBgNVHQ4EFgQUNc8GfcJu 5IlfSxatm9MA/qvDo1MwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZEMzkzMC82M0M0NkVDOEEwRjMx MUVDOTQ2RURBOTQ1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RDM5MzAvNjNDNDZFQzhBMEYzMTFFQzk0NkVEQTk0NUE0MEQ1NzcvTmM4R2Zj SnU1SWxmU3hhdG05TUFfcXZEbzFNLm1mdDAdBggrBgEFBQcBCAEB/wQOMAygCjAI AgJE9AICXVEwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgABMBEDAwNmcAMEB8QUgAME BMTAADANBgkqhkiG9w0BAQsFAAOCAQEAnk+dfvhiaVOR1/TM8BfDMsVZBJ+680WJ By/ExOYiicVKAKx3bNKIGqLuRHuzfRgBakVMCdmx4wBpztH5gHBqPSR3bveiy7rS gkoujiP6Dat+k1hK/JO41E7wsPWDaP7W843nkiwwtcwf5eMkMNCNmEVXx51jQw6e FcngFd0hiqB8L4WqOVNS1ZyNUp4MFPMG6WWthY5eG2GpPZiuW+d5bKeF7AfchFw6 r+3KhSUWjmJzKJQ+/0qh5bipdHJ9CmKTrlNpKquLf8WEg+/Phb1IU8mUcpt6tJOP GEAa2l3REs4MkKvySgjB4/Cr5Q8FZCabtYV+C9BlWAdW1nPMaOQL0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:48 2026 by rpki-client