This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer File: XK2jLPsAGrpuTJ9SE9kodlsVozc.cer (raw, json) Hash identifier: mic11Q13R+YUkWwUvo7DxqtNHfDdbRj3oqGk3CahmIA= Subject key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B12 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:33:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 196.250.252.0/22 IP: 196.251.252.0/22 IP: 2001:43f8:e00::/40 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15122 (0x3b12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:33:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:c9:eb:4b:cc:ae:52:e0:79:bd:c5:ac:dc: d8:a0:e2:47:b7:b7:ff:cb:b4:e4:31:0f:56:07:ac: 92:44:6b:83:3b:d3:aa:7d:ea:06:8f:5f:7e:93:31: 9b:69:1a:2e:47:51:54:bf:09:06:6d:80:e0:ab:ab: fa:8f:fb:8d:76:be:2e:10:44:9f:c1:e5:52:9e:8b: f7:44:70:ad:4a:c0:78:e7:6f:c3:03:54:19:1b:91: a2:53:84:5e:0c:90:14:10:a4:ba:d6:f1:00:92:fe: e9:2c:85:57:09:05:35:03:87:ff:13:b0:dd:eb:7a: be:a6:08:a1:be:00:cb:18:b0:88:80:36:24:5e:ac: f6:e5:18:b1:53:68:5b:e4:30:94:cf:b7:6d:db:d8: 3a:e6:9d:94:b7:82:81:16:4d:f1:db:5d:e8:f8:2b: b7:47:e6:da:66:13:e5:b1:fa:6f:3b:ab:54:38:fd: 0f:fd:fd:5c:c9:39:9b:ad:25:3c:67:b2:d0:db:10: 34:ed:0e:9d:35:b6:13:41:83:d0:e6:b1:51:c2:85: 8b:62:88:c2:3e:fb:8b:c1:cd:ff:b8:72:0c:39:15: b8:7b:9a:bb:5e:f2:a8:92:be:4f:b8:a3:fd:0e:6a: e8:b3:ff:c3:3b:af:49:0d:a1:75:f7:47:5e:76:49: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft sbgp-ipAddrBlock: critical IPv4: 196.250.252.0/22 196.251.252.0/22 IPv6: 2001:43f8:e00::/40 Signature Algorithm: sha256WithRSAEncryption 7e:e0:b9:88:e0:cc:a7:82:84:65:56:20:b8:a7:27:ab:35:32: 15:6c:d9:f2:bf:8b:18:dd:bd:f1:35:b7:5a:04:d6:41:36:d0: ea:5d:56:9e:79:97:26:f7:98:aa:99:bc:5e:72:24:bd:00:19: a3:54:46:21:68:c8:b0:d0:a6:aa:13:ef:bd:77:19:0b:8b:2c: 83:cd:17:ce:ad:a7:86:f0:e6:76:d4:b7:2b:7f:a5:97:cf:5e: f8:ff:5a:52:c1:66:f1:b7:9e:9c:54:db:b2:0a:8e:ff:1b:fc: f2:8b:b9:84:03:84:c3:f3:11:79:f4:a4:e4:41:7e:d9:1b:fb: 4c:f1:89:7c:d0:15:64:49:84:3e:10:15:1d:70:82:41:ee:d3: 15:3c:ea:e3:3e:a2:f6:e7:5a:1d:0c:2b:a2:3a:de:c7:10:97: 60:65:14:ee:c8:dc:fa:59:28:fc:cd:aa:8b:6d:3e:d7:09:e0: 2d:b1:e0:75:a7:a3:7c:68:93:b8:45:14:09:c1:8a:b1:97:da: e6:fe:53:e2:0c:5d:2d:30:78:39:06:62:75:f8:2b:78:64:88: d8:f3:7e:30:67:13:75:17:65:be:76:87:e0:7f:e4:fe:d2:5d: 3c:1d:18:d6:f4:16:f8:07:b2:70:bf:01:f7:8d:45:17:97:27: 1e:db:25:98 -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgICOxIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjMzMjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg1ODhFQUYxMTAvBgNVBAUTKDVDQURBMzJDRkIwMDFBQkE2RTRDOUY1 MjEzRDkyODc2NUIxNUEzMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhjMnrS8yuUuB5vcWs3Nig4ke3t//LtOQxD1YHrJJEa4M706p96gaPX36TMZtp Gi5HUVS/CQZtgOCrq/qP+412vi4QRJ/B5VKei/dEcK1KwHjnb8MDVBkbkaJThF4M kBQQpLrW8QCS/ukshVcJBTUDh/8TsN3rer6mCKG+AMsYsIiANiRerPblGLFTaFvk MJTPt23b2DrmnZS3goEWTfHbXej4K7dH5tpmE+Wx+m87q1Q4/Q/9/VzJOZutJTxn stDbEDTtDp01thNBg9DmsVHChYtiiMI++4vBzf+4cgw5Fbh7mrte8qiSvk+4o/0O auiz/8M7r0kNoXX3R152STYhAgMBAAGjggMFMIIDATAdBgNVHQ4EFgQUXK2jLPsA GrpuTJ9SE9kodlsVozcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4NTg4RS9BMzgyMzk1NkNCMkYx MUU5ODkwRDFCMjdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODU4OEUvQTM4MjM5NTZDQjJGMTFFOTg5MEQxQjI3RjhBRUEyMjgvWEsyakxQ c0FHcnB1VEo5U0U5a29kbHNWb3pjLm1mdDA1BggrBgEFBQcBBwEB/wQmMCQwEgQC AAEwDAMEAsT6/AMEAsT7/DAOBAIAAjAIAwYAIAFD+A4wDQYJKoZIhvcNAQELBQAD ggEBAH7guYjgzKeChGVWILinJ6s1MhVs2fK/ixjdvfE1t1oE1kE20OpdVp55lyb3 mKqZvF5yJL0AGaNURiFoyLDQpqoT7713GQuLLIPNF86tp4bw5nbUtyt/pZfPXvj/ WlLBZvG3npxU27IKjv8b/PKLuYQDhMPzEXn0pORBftkb+0zxiXzQFWRJhD4QFR1w gkHu0xU86uM+ovbnWh0MK6I63scQl2BlFO7I3PpZKPzNqottPtcJ4C2x4HWno3xo k7hFFAnBirGX2ub+U+IMXS0weDkGYnX4K3hkiNjzfjBnE3UXZb52h+B/5P7SXTwd GNb0FvgHsnC/AfeNRReXJx7bJZg= -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:04 2026 by rpki-client