This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer File: SmfXXBQJ0u538xkN5zXsl-9jDVg.cer (raw, json) Hash identifier: BmBpPYApg12/fabN0qXR32R5RidRYhNUbipEKPFCUAg= Subject key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AB4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:20:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328189 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15028 (0x3ab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:20:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:0a:fe:7a:57:ed:d7:0c:66:40:fa:11:d7: 46:ec:24:85:a8:a3:f7:19:b6:23:91:02:ba:e1:3b: 98:6c:24:5a:c4:95:d4:6e:cb:98:3a:bb:16:34:60: fe:23:5b:77:3d:0c:60:fd:ff:a0:12:61:e8:55:c2: 0a:87:2a:a6:1c:f3:0d:52:94:09:e4:44:06:16:b6: 84:49:de:61:95:d1:99:cc:48:e0:af:15:2c:02:d6: 51:a6:5a:77:48:9a:ba:3e:0b:00:c7:e9:a6:0a:b8: 2b:b5:6b:36:eb:04:be:b7:de:d7:09:9d:07:ef:ee: 07:f2:dd:ec:85:35:23:a0:13:82:41:31:54:27:29: ea:b2:5c:ed:98:35:1b:a7:56:ab:ed:56:92:8a:7e: a8:45:d9:45:6f:89:ac:6b:d2:50:2a:16:3a:e8:67: f7:56:6e:81:13:06:49:9c:aa:81:32:c8:5d:fe:83: 9a:1e:97:24:8f:20:06:3e:79:2e:65:d2:e7:f6:d0: 29:d6:1e:2c:6c:ce:c6:50:d8:c0:67:8f:a9:61:30: 07:cf:7b:4a:66:f2:2a:63:2a:c7:50:8c:39:4e:83: 49:60:a6:91:c1:48:c8:42:e9:79:dc:a8:07:03:59: c6:8a:c7:15:a5:93:c7:b2:50:1a:45:43:f4:14:71: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328189 Signature Algorithm: sha256WithRSAEncryption 73:b1:e2:81:a6:7a:09:89:05:eb:17:74:a8:dd:39:12:c8:59: 78:9f:2b:0d:86:02:50:69:ef:a5:ae:39:67:8a:6d:28:8c:44: 2e:3f:87:70:40:27:9b:18:66:5c:b7:1e:fb:29:7f:a3:da:71: a9:ea:63:54:50:d6:f9:e1:1b:69:a3:95:5f:9e:5e:a5:ab:3e: 6c:84:19:eb:4c:17:be:53:17:1c:46:af:0a:cb:58:f2:3a:48: f9:64:eb:fe:aa:d0:1c:43:34:97:66:87:fe:a0:d0:bc:39:84: aa:ef:af:47:bb:53:94:4e:29:d8:ac:85:54:38:e1:5e:20:15: 9c:f2:2c:97:3b:e2:2c:22:45:59:76:53:9b:33:87:ae:97:34: d7:27:a9:ba:bf:a4:e1:36:f2:0f:f1:9a:ad:22:6b:85:19:62: 12:d7:d4:e1:db:93:17:48:65:c9:08:df:92:f8:55:b6:f5:c4: 8a:ac:4b:0b:47:bf:fa:ff:28:18:40:7a:d1:b5:08:08:c9:04: ff:5e:87:4e:e0:60:ed:18:f9:d2:72:a4:91:7f:c2:4c:86:43: af:92:3b:ad:06:d4:40:06:00:5d:90:b9:6e:a9:e9:9c:26:1f: b0:0c:8c:8d:3a:6d:6f:b1:91:2b:b4:43:6c:66:21:72:ad:f9: ed:80:45:66 -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgICOrQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjIwMjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjcwMERCQUYxMTAvBgNVBAUTKDRBNjdENzVDMTQwOUQyRUU3N0YzMTkw REU3MzVFQzk3RUY2MzBENTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQfAr+elft1wxmQPoR10bsJIWoo/cZtiORArrhO5hsJFrEldRuy5g6uxY0YP4j W3c9DGD9/6ASYehVwgqHKqYc8w1SlAnkRAYWtoRJ3mGV0ZnMSOCvFSwC1lGmWndI mro+CwDH6aYKuCu1azbrBL633tcJnQfv7gfy3eyFNSOgE4JBMVQnKeqyXO2YNRun VqvtVpKKfqhF2UVviaxr0lAqFjroZ/dWboETBkmcqoEyyF3+g5oelySPIAY+eS5l 0uf20CnWHixszsZQ2MBnj6lhMAfPe0pm8ipjKsdQjDlOg0lgppHBSMhC6XncqAcD WcaKxxWlk8eyUBpFQ/QUcT39AgMBAAGjggLqMIIC5jAdBgNVHQ4EFgQUSmfXXBQJ 0u538xkN5zXsl+9jDVgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3MDBEQi9GOUIwOEYwMEY1MDEx MUVCOTA5NUU2MDREOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzAwREIvRjlCMDhGMDBGNTAxMTFFQjkwOTVFNjA0RDhBMDE0Q0UvU21mWFhC UUowdTUzOHhrTjV6WHNsLTlqRFZnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAf0wDQYJKoZIhvcNAQELBQADggEBAHOx4oGmegmJBesXdKjdORLIWXifKw2G AlBp76WuOWeKbSiMRC4/h3BAJ5sYZly3Hvspf6PacanqY1RQ1vnhG2mjlV+eXqWr PmyEGetMF75TFxxGrwrLWPI6SPlk6/6q0BxDNJdmh/6g0Lw5hKrvr0e7U5ROKdis hVQ44V4gFZzyLJc74iwiRVl2U5szh66XNNcnqbq/pOE28g/xmq0ia4UZYhLX1OHb kxdIZckI35L4Vbb1xIqsSwtHv/r/KBhAetG1CAjJBP9eh07gYO0Y+dJypJF/wkyG Q6+SO60G1EAGAF2QuW6p6ZwmH7AMjI06bW+xkSu0Q2xmIXKt+e2ARWY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:28 2026 by rpki-client