This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer File: XY4nZDYESZrfo7elNFeDrRLbr_M.cer (raw, json) Hash identifier: FXAOQmCn3Q0kYbpuqnxTVaHT91yKOw+ghqog6zw/KiQ= Subject key identifier: 5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F6D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Wed 07 Jan 2026 21:49:29 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328049 IP: 2c0f:f2b0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16237 (0x3f6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 7 21:49:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369B304AF, serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:52:55:17:e8:e5:29:03:bf:b3:8e:5b:45: e3:dc:58:77:77:12:de:20:2d:cd:84:5b:df:7f:ec: da:f9:a1:5b:04:43:12:35:19:60:6e:f4:f6:2c:34: 92:34:eb:2f:41:7f:2f:e1:71:8a:87:c8:63:86:84: 8a:33:56:06:35:f5:81:75:e3:94:2b:89:62:04:a2: c0:9e:03:ab:4c:65:69:35:a1:f9:e1:c9:ae:56:38: 4c:6a:46:55:8f:3a:d9:4f:f3:4d:d0:f9:a1:61:90: 0a:77:8a:b9:f0:56:44:ed:79:63:c3:97:08:79:a9: 0b:76:19:18:1b:1f:10:5b:aa:3a:83:fe:6d:f3:13: 4e:31:28:fc:a0:5d:65:5c:dd:97:42:7f:bf:fa:fc: c9:a9:31:9b:78:ed:89:13:9d:a2:7d:c9:17:80:de: f3:7e:0c:06:0c:d0:83:96:54:8a:01:53:95:99:9f: f6:ed:20:42:7c:eb:a4:43:a7:43:ca:83:ed:89:43: 92:26:a3:a1:a7:2d:ea:e9:24:4e:c4:cc:23:07:9c: 44:b2:cf:07:20:da:ee:6d:d5:f1:9a:ee:7c:4c:55: e1:e5:70:71:c6:19:c2:b4:0d:34:69:6c:c3:2c:75: 40:1c:63:2c:f0:a3:25:d1:1f:ea:c9:2c:b8:e8:fd: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328049 sbgp-ipAddrBlock: critical IPv6: 2c0f:f2b0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:a0:e7:34:b2:87:9c:2e:ae:d9:d6:63:9a:b5:a3:36:94:19: b3:ca:07:e5:e0:e8:11:f9:ae:aa:10:a1:a4:f4:e7:30:c5:96: 8b:9b:c3:f5:94:96:8c:ee:22:8d:c7:1f:1c:31:b7:5d:bd:f4: 5b:1d:e5:91:fa:e6:2e:da:38:10:d0:33:da:92:7c:57:f2:5a: 04:29:b7:1f:3b:4d:cc:d4:7e:fb:6a:11:39:38:d4:1b:65:f5: de:08:24:c3:f6:5f:12:ed:9c:ee:0b:06:93:bf:06:fd:72:34: 9f:a4:dc:4c:82:a4:19:5d:af:f3:4a:db:55:f5:d0:d6:7c:f9: a3:b1:fd:aa:55:58:b7:4f:11:6d:41:d2:93:6c:09:16:30:bb: 73:f9:1a:ed:a9:88:74:f1:e4:f8:cc:02:0e:ca:98:2d:c7:55: dc:52:02:9e:38:e4:55:dc:24:74:4f:f5:77:d2:25:ce:fc:66: 7a:1c:71:fc:05:e0:4f:0f:e9:ab:17:8e:1b:c9:9b:03:b0:94: 35:f5:0a:8f:b9:74:77:f5:4d:fc:4f:ef:1c:7d:68:d6:54:17: ca:cc:d6:cf:ac:75:42:b8:b0:ce:f3:4a:e7:91:e4:61:3b:1b: 45:b9:d4:d5:6e:5a:00:2c:40:9a:c7:a0:30:36:e4:8b:82:bc: 66:d7:f2:fe -----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgICP20wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDcyMTQ5MjlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjlCMzA0QUYxMTAvBgNVBAUTKDVEOEUyNzY0MzYwNDQ5OUFERkEzQjdB NTM0NTc4M0FEMTJEQkFGRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2m1JVF+jlKQO/s45bRePcWHd3Et4gLc2EW99/7Nr5oVsEQxI1GWBu9PYsNJI0 6y9Bfy/hcYqHyGOGhIozVgY19YF145QriWIEosCeA6tMZWk1ofnhya5WOExqRlWP OtlP803Q+aFhkAp3irnwVkTteWPDlwh5qQt2GRgbHxBbqjqD/m3zE04xKPygXWVc 3ZdCf7/6/MmpMZt47YkTnaJ9yReA3vN+DAYM0IOWVIoBU5WZn/btIEJ866RDp0PK g+2JQ5Imo6GnLerpJE7EzCMHnESyzwcg2u5t1fGa7nxMVeHlcHHGGcK0DTRpbMMs dUAcYyzwoyXRH+rJLLjo/QxPAgMBAAGjggMMMIIDCDAdBgNVHQ4EFgQUXY4nZDYE SZrfo7elNFeDrRLbr/MwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5QjMwNC9COThBMzUyQ0VDMTIx MUYwQUJBNzU3QTBEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OUIzMDQvQjk4QTM1MkNFQzEyMTFGMEFCQTc1N0EwREFFNEVDOUMvWFk0blpE WUVTWnJmbzdlbE5GZURyUkxicl9NLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAXEwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/KwMA0GCSqGSIb3 DQEBCwUAA4IBAQBqoOc0soecLq7Z1mOataM2lBmzygfl4OgR+a6qEKGk9OcwxZaL m8P1lJaM7iKNxx8cMbddvfRbHeWR+uYu2jgQ0DPaknxX8loEKbcfO03M1H77ahE5 ONQbZfXeCCTD9l8S7ZzuCwaTvwb9cjSfpNxMgqQZXa/zSttV9dDWfPmjsf2qVVi3 TxFtQdKTbAkWMLtz+RrtqYh08eT4zAIOypgtx1XcUgKeOORV3CR0T/V30iXO/GZ6 HHH8BeBPD+mrF44byZsDsJQ19QqPuXR39U38T+8cfWjWVBfKzNbPrHVCuLDO80rn keRhOxtFudTVbloALECax6AwNuSLgrxm1/L+ -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:33 2026 by rpki-client