This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer File: XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer (raw, json) Hash identifier: BZn8CzfKcHPrtvTGlJeTMEXeJwqqfb6R3HYd6f0xR9w= Subject key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 391D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:18:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329050 IP: 102.216.21.0/24 IP: 2001:43fc:6000::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14621 (0x391d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:18:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:d4:b9:e1:21:7f:77:4b:3f:0b:f5:ca:e3: 0c:ff:10:2a:73:ff:f1:17:a9:7a:4e:13:fe:32:e0: 86:32:45:4c:0d:6b:75:9f:6d:32:92:61:06:b1:ee: 72:cd:64:98:8f:45:ee:c3:42:52:ee:73:4a:05:d0: 3a:ab:58:39:f7:81:bd:b2:c6:4b:63:6f:eb:de:d1: ff:70:d3:d0:33:0f:65:b4:05:fe:2a:57:64:3a:7a: d7:32:ab:1c:c5:11:ee:4a:6b:1c:0b:33:0e:01:ff: 71:41:b9:6a:6a:76:0c:d3:ad:27:84:d2:ab:30:14: d4:3d:79:5d:0c:90:e0:20:07:1f:d2:bb:2d:ac:45: 33:80:a6:6e:3c:44:77:38:9a:3c:d7:5a:2b:4e:33: e9:17:cc:26:93:65:53:f1:18:5f:d2:25:7f:7b:d8: a4:08:53:61:04:8d:76:0d:40:07:17:78:d3:a6:84: 9e:10:77:40:ec:e2:8c:dd:95:23:c8:d0:45:c4:30: 5d:f6:97:69:db:89:dc:f7:14:0f:c7:a8:0e:1c:03: 79:d5:d6:b1:e4:da:52:32:88:6f:b1:2a:83:4d:43: e3:0d:dc:8c:7d:4d:07:d8:5a:bd:03:c8:aa:a8:ec: 87:c6:d8:52:5b:f9:0c:ee:9c:92:d2:05:a2:fa:f9: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329050 sbgp-ipAddrBlock: critical IPv4: 102.216.21.0/24 IPv6: 2001:43fc:6000::/48 Signature Algorithm: sha256WithRSAEncryption 06:41:02:81:b8:ae:24:71:a4:bf:17:c2:b4:0e:da:3f:3d:36: 0e:3e:57:da:12:74:8e:2c:5e:91:a8:a9:83:ff:98:45:ad:7e: 1c:ea:ad:89:ad:0c:f7:ff:9d:65:ba:63:5d:62:49:39:5d:51: 4f:3b:1c:20:86:15:bc:22:b8:80:82:67:bc:54:cd:27:71:21: a5:0b:f3:87:d7:dd:07:aa:b3:20:91:06:7f:8b:65:ad:86:8f: 93:d8:02:4f:71:a2:aa:3b:2d:99:79:29:db:a1:9a:e9:6e:01: 4b:a7:52:d2:27:c3:14:af:7b:2b:7a:77:6a:48:80:fe:18:58: 8d:88:31:09:3a:01:e3:f2:96:69:56:27:05:5e:eb:df:60:75: 6a:52:a0:e8:2a:cc:7f:00:e4:fb:8a:81:46:22:d2:36:aa:47: 78:5c:00:c8:ef:57:5c:96:b2:13:3d:1b:06:47:f8:ce:27:02: fc:65:5a:b7:08:72:6f:80:27:1a:50:41:af:ed:00:67:f8:78: 87:1a:d8:dd:9f:3f:e2:b7:4a:35:f9:f1:f0:e6:48:f1:b2:52: b3:ff:5f:38:fb:7f:75:a2:e7:4a:35:13:e3:bd:72:f6:6d:45: 13:c1:f5:74:36:5c:60:78:e8:ce:9d:02:62:a6:77:71:3e:09: 32:5c:13:71 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgICOR0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTE4NDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ0REFCQUYxMTAvBgNVBAUTKDVENUMyQTk2QjJFMzcyQjBBQzQ3RjQ4 REJEQzdEN0ZEMUZCREIxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBx9S54SF/d0s/C/XK4wz/ECpz//EXqXpOE/4y4IYyRUwNa3WfbTKSYQax7nLN ZJiPRe7DQlLuc0oF0DqrWDn3gb2yxktjb+ve0f9w09AzD2W0Bf4qV2Q6etcyqxzF Ee5KaxwLMw4B/3FBuWpqdgzTrSeE0qswFNQ9eV0MkOAgBx/Suy2sRTOApm48RHc4 mjzXWitOM+kXzCaTZVPxGF/SJX972KQIU2EEjXYNQAcXeNOmhJ4Qd0Ds4ozdlSPI 0EXEMF32l2nbidz3FA/HqA4cA3nV1rHk2lIyiG+xKoNNQ+MN3Ix9TQfYWr0DyKqo 7IfG2FJb+QzunJLSBaL6+fihAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUXVwqlrLj crCsR/SNvcfX/R+9sTIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NERBQi9CNTExRjdFNEYyNDkx MUVDQTI3OTExOTJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDREQUIvQjUxMUY3RTRGMjQ5MTFFQ0EyNzkxMTkyRjEyMjI0NjgvWFZ3cWxy TGpjckNzUl9TTnZjZlhfUi05c1RJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBVowMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABm2BUwDwQCAAIwCQMH ACABQ/xgADANBgkqhkiG9w0BAQsFAAOCAQEABkECgbiuJHGkvxfCtA7aPz02Dj5X 2hJ0jixekaipg/+YRa1+HOqtia0M9/+dZbpjXWJJOV1RTzscIIYVvCK4gIJnvFTN J3EhpQvzh9fdB6qzIJEGf4tlrYaPk9gCT3GiqjstmXkp26Ga6W4BS6dS0ifDFK97 K3p3akiA/hhYjYgxCToB4/KWaVYnBV7r32B1alKg6CrMfwDk+4qBRiLSNqpHeFwA yO9XXJayEz0bBkf4zicC/GVatwhyb4AnGlBBr+0AZ/h4hxrY3Z8/4rdKNfnx8OZI 8bJSs/9fOPt/daLnSjUT471y9m1FE8H1dDZcYHjozp0CYqZ3cT4JMlwTcQ== -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:29 2026 by rpki-client