This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer File: X8N97OtwCLunQTR4RbdrR2d66mk.cer (raw, json) Hash identifier: CQV9+dqRxn//q/+O2jtR0mw50aByF+tBL0UVYvpzVx0= Subject key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 398A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:35:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37073 IP: 41.216.144.0/20 IP: 2c0f:5a40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14730 (0x398a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:35:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:93:d5:46:8d:5d:28:f2:0b:72:0f:04:05: 45:aa:a3:db:5c:86:0d:9d:3e:80:79:8b:52:91:94: ac:b5:42:77:c4:90:5f:98:91:e0:0a:5c:3e:31:d5: 23:c8:f2:64:1e:63:e8:c8:ce:72:b0:e0:41:ed:1c: bb:c1:01:fc:ad:cf:4d:75:fe:46:88:db:79:61:2f: 5b:97:8a:2b:bc:cb:e9:1f:5e:ce:3a:8e:00:b6:88: 71:cc:fc:cd:e5:0e:e0:fb:5c:0a:5d:5f:88:81:31: 2c:e1:cd:9e:d1:48:c9:4d:9e:0f:28:22:09:b0:01: df:9a:34:cf:25:0b:2b:92:e0:2f:a3:0d:62:77:89: ff:50:32:8a:cd:7e:c4:b4:ee:8c:c6:88:11:00:fd: 92:65:51:67:77:5e:71:c7:50:52:24:61:f2:22:c7: e2:a6:3f:ea:2a:1a:d7:40:9d:9f:a1:7b:b9:14:20: 79:25:54:8c:10:e4:37:ce:8f:fc:7f:1f:96:57:e4: 9b:13:c8:97:c9:e2:86:79:6c:18:e0:fe:b4:38:7d: 2a:6b:0a:f6:56:f9:1b:57:b2:b8:15:f4:7b:4c:7f: a4:af:93:46:dd:e7:cd:42:3c:fc:5f:7d:76:74:95: 56:ff:59:53:e8:f7:8f:2b:9a:9b:5f:86:7c:b8:b0: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37073 sbgp-ipAddrBlock: critical IPv4: 41.216.144.0/20 IPv6: 2c0f:5a40::/32 Signature Algorithm: sha256WithRSAEncryption ae:b1:a6:27:d3:ee:8c:d4:c0:93:fc:ec:d4:ea:17:ce:74:ac: da:8e:cc:b6:69:e4:d3:11:7b:b4:83:72:28:d3:38:f9:8f:2d: 2f:85:44:3e:ca:b8:db:bf:1a:e6:60:0c:2b:3f:b8:16:8c:75: f5:80:f2:b4:2a:c2:4a:93:89:b0:3a:fc:54:26:71:b5:32:b1: 52:ba:c6:3d:4a:08:14:13:63:b7:ea:1a:66:2c:e7:67:8b:ba: 6d:8f:c9:d0:ee:14:a0:57:b2:d8:8e:5c:ee:c0:3f:c6:89:46: d9:89:61:46:91:ae:5a:84:98:16:b5:70:ee:c3:68:f1:b8:6d: 80:35:1c:e1:ea:01:7d:06:14:e1:53:fa:6d:0e:dd:f3:34:74: 02:ad:2a:b5:dd:b5:7d:6b:ac:00:0a:35:9e:e0:1c:1a:a2:2a: 8a:09:8a:78:9b:6a:06:7f:7c:45:fd:bb:49:3b:18:13:81:c6: 40:8f:93:3c:35:af:fd:94:ad:c6:e5:03:61:d6:3b:6a:76:22: 62:65:21:a8:10:ff:30:07:f9:56:54:08:b0:9a:5c:5e:23:61: 88:98:79:66:9a:39:ee:30:88:e8:ec:d6:50:0b:75:03:29:1e: 60:78:1b:13:52:7b:3b:4d:0d:e0:c1:e1:14:5d:6f:81:1c:6d: be:60:b8:5a -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOYowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTM1MjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjUwNTY3QUYxMTAvBgNVBAUTKDVGQzM3REVDRUI3MDA4QkJBNzQxMzQ3 ODQ1Qjc2QjQ3Njc3QUVBNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0e5PVRo1dKPILcg8EBUWqo9tchg2dPoB5i1KRlKy1QnfEkF+YkeAKXD4x1SPI 8mQeY+jIznKw4EHtHLvBAfytz011/kaI23lhL1uXiiu8y+kfXs46jgC2iHHM/M3l DuD7XApdX4iBMSzhzZ7RSMlNng8oIgmwAd+aNM8lCyuS4C+jDWJ3if9QMorNfsS0 7ozGiBEA/ZJlUWd3XnHHUFIkYfIix+KmP+oqGtdAnZ+he7kUIHklVIwQ5DfOj/x/ H5ZX5JsTyJfJ4oZ5bBjg/rQ4fSprCvZW+RtXsrgV9HtMf6Svk0bd581CPPxffXZ0 lVb/WVPo948rmptfhny4sE+/AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUX8N97Otw CLunQTR4RbdrR2d66mkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1MDU2Ny8zM0UzMzAyNjc0QkEx MUVFQUE5NEMxNzM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFEOUU2RkMvWDhOOTdP dHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkNEwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAQp2JAwDQQCAAIwBwMF ACwPWkAwDQYJKoZIhvcNAQELBQADggEBAK6xpifT7ozUwJP87NTqF850rNqOzLZp 5NMRe7SDcijTOPmPLS+FRD7KuNu/GuZgDCs/uBaMdfWA8rQqwkqTibA6/FQmcbUy sVK6xj1KCBQTY7fqGmYs52eLum2PydDuFKBXstiOXO7AP8aJRtmJYUaRrlqEmBa1 cO7DaPG4bYA1HOHqAX0GFOFT+m0O3fM0dAKtKrXdtX1rrAAKNZ7gHBqiKooJinib agZ/fEX9u0k7GBOBxkCPkzw1r/2UrcblA2HWO2p2ImJlIagQ/zAH+VZUCLCaXF4j YYiYeWaaOe4wiOjs1lALdQMpHmB4GxNSeztNDeDB4RRdb4Ecbb5guFo= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:17 2026 by rpki-client