This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer File: RfLi_fMRPvxjNXV8r49bXsSszbM.cer (raw, json) Hash identifier: LYg32qAEmdoy4C6zjwDTNdwywkcB4lUmSWFOZVacvr4= Subject key identifier: 45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CCE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:37:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329643 IP: 102.204.60.0/22 IP: 2c0f:3cc0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15566 (0x3cce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:37:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A6D8BAF, serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1f:93:f3:6b:97:9a:29:a4:8f:eb:87:4e:94: 3d:40:97:e7:a6:5b:bd:30:ea:77:b2:c1:1c:9a:e4: ef:39:67:5e:2a:9e:ee:b1:f5:6a:28:fe:62:80:20: ff:b7:da:75:1d:92:b8:b1:11:d3:2d:89:cf:02:83: c4:46:fb:c2:c8:7a:d9:de:e9:9a:74:89:3a:e4:01: da:ca:23:57:22:cf:36:f9:db:4f:38:52:ae:eb:66: 08:e7:c4:a9:f1:05:41:fb:66:15:45:ae:47:3a:e4: a3:d2:c0:48:b8:ef:a0:3c:ea:5f:75:94:1d:55:d4: d6:84:3f:a1:01:4b:07:e6:86:7c:0d:29:6b:71:cc: 61:e9:b0:05:a8:bb:60:f2:5d:32:bc:85:d5:26:ea: a5:b3:7d:d9:35:c6:fa:b9:b7:62:f5:aa:d9:ca:7b: 28:a5:61:73:ff:e7:f0:0b:69:78:d1:2f:4e:ea:e4: d0:b5:74:37:a3:9b:56:1f:bf:73:5e:dd:a4:48:7a: 44:2f:75:91:e4:0a:76:da:ea:24:53:d9:73:c0:40: 95:c9:54:ac:53:9c:d2:51:89:44:af:37:d5:d5:26: 43:4a:3b:9b:4c:b9:47:cc:02:52:97:d0:d6:0b:b3: 38:dd:83:76:3f:e6:f5:a3:07:26:65:d7:c8:00:fd: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329643 sbgp-ipAddrBlock: critical IPv4: 102.204.60.0/22 IPv6: 2c0f:3cc0::/32 Signature Algorithm: sha256WithRSAEncryption b1:12:66:fd:ee:3a:8e:8c:e9:df:32:63:ef:a4:a6:25:17:53: 95:aa:e0:52:25:54:e9:ab:16:9a:a2:95:d2:ee:44:4e:19:5d: e6:58:04:ba:ee:a5:99:b8:11:fc:f9:74:ae:cc:f4:7e:60:22: 7c:7b:ba:5d:14:e7:f7:62:82:0d:4a:69:a9:5e:da:63:52:71: df:d3:48:8f:10:44:85:cc:1c:9b:17:7e:40:c2:64:75:65:c3: df:6a:ed:aa:5a:9a:50:b1:9b:b1:1b:7e:e1:08:87:2b:28:99: ee:db:91:a3:0a:a5:dc:ad:ff:7f:18:72:c8:39:d8:08:88:3b: 68:f7:fb:01:48:c5:31:e0:dd:cc:67:1e:55:fc:e2:29:6f:7a: 21:14:20:51:60:a8:e0:8a:04:b2:bd:e2:c9:51:34:8f:d7:cc: d9:a0:a8:8b:dd:e9:3c:a7:02:0e:22:e4:e2:c9:67:79:0f:d3: fb:47:65:56:50:ba:18:8e:95:eb:c4:5c:4d:39:16:7d:21:57: a0:d7:77:55:a1:b2:07:f7:ad:ab:db:94:d8:5a:ec:7f:f1:77: 5e:53:de:46:59:35:95:3f:82:2b:1e:66:6b:58:1b:1b:a7:8a: 7c:ff:88:dd:66:27:68:c0:7a:8e:7d:92:e7:f9:5e:c1:c0:d6: d3:c2:ca:65 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPM4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzM3NDlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE2RDhCQUYxMTAvBgNVBAUTKDQ1RjJFMkZERjMxMTNFRkM2MzM1NzU3 Q0FGOEY1QjVFQzRBQ0NEQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvH5Pza5eaKaSP64dOlD1Al+emW70w6neywRya5O85Z14qnu6x9Woo/mKAIP+3 2nUdkrixEdMtic8Cg8RG+8LIetne6Zp0iTrkAdrKI1cizzb52084Uq7rZgjnxKnx BUH7ZhVFrkc65KPSwEi476A86l91lB1V1NaEP6EBSwfmhnwNKWtxzGHpsAWou2Dy XTK8hdUm6qWzfdk1xvq5t2L1qtnKeyilYXP/5/ALaXjRL07q5NC1dDejm1Yfv3Ne 3aRIekQvdZHkCnba6iRT2XPAQJXJVKxTnNJRiUSvN9XVJkNKO5tMuUfMAlKX0NYL szjdg3Y/5vWjByZl18gA/cybAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQURfLi/fMR PvxjNXV8r49bXsSszbMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNkQ4Qi9GRjU1RDc2RUIzREMx MUYwQUQwRjFGRENEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTZEOEIvRkY1NUQ3NkVCM0RDMTFGMEFEMEYxRkRDREFFNEVDOUMvUmZMaV9m TVJQdnhqTlhWOHI0OWJYc1NzemJNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB6swLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzDwwDQQCAAIwBwMF ACwPPMAwDQYJKoZIhvcNAQELBQADggEBALESZv3uOo6M6d8yY++kpiUXU5Wq4FIl VOmrFpqildLuRE4ZXeZYBLrupZm4Efz5dK7M9H5gInx7ul0U5/digg1Kaale2mNS cd/TSI8QRIXMHJsXfkDCZHVlw99q7apamlCxm7EbfuEIhysome7bkaMKpdyt/38Y csg52AiIO2j3+wFIxTHg3cxnHlX84ilveiEUIFFgqOCKBLK94slRNI/XzNmgqIvd 6TynAg4i5OLJZ3kP0/tHZVZQuhiOlevEXE05Fn0hV6DXd1Whsgf3ravblNha7H/x d15T3kZZNZU/giseZmtYGxuninz/iN1mJ2jAeo59kuf5XsHA1tPCymU= -----END CERTIFICATE-----Generated at Sun Jan 25 05:59:30 2026 by rpki-client