This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer File: XyKMRr7ytMupTLKfEMNoDuKIPbM.cer (raw, json) Hash identifier: Kl1ATy657IQqIezQDfH/1qhp+MCvKUfinBxO32XDgg0= Subject key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CB9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:34:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37613 IP: 41.242.112.0/22 IP: 2c0f:f170::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15545 (0x3cb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:34:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:cf:87:f2:47:21:85:f6:87:0f:d0:dd:35: 5e:e0:52:da:77:bc:64:11:11:d0:9d:55:b0:e1:ca: 74:e9:07:be:74:60:47:aa:6f:65:98:28:a6:d2:27: 2a:c9:49:2b:c1:b8:d6:38:d4:ed:a6:f9:1b:e0:47: 4a:59:42:5d:1e:8d:b6:10:6e:ce:92:eb:f1:e5:de: e0:dc:4b:41:fa:91:ea:45:e0:70:4e:51:07:4f:6a: e4:e8:ac:95:81:e9:23:bc:c9:5c:30:b3:7f:79:50: 84:02:d9:5c:ae:12:82:09:8d:bb:47:1e:ae:a4:16: 52:9f:c9:ba:f9:a2:f1:a0:4d:06:8f:31:a0:3c:ac: f3:44:92:87:62:1c:0d:89:5f:2e:0f:50:b3:be:fd: ce:81:5b:a7:e9:a1:de:79:a6:63:f2:31:74:88:d4: 0e:31:e4:46:c7:17:17:50:2e:08:91:4b:18:a6:92: 5b:c0:e7:3d:f5:7e:24:50:b4:d7:e6:b7:93:7e:49: dd:1f:d7:d7:40:01:13:88:c4:59:1a:4f:e3:40:55: 5e:df:7f:36:8b:ca:66:21:60:62:0e:78:6c:e2:e5: ef:dd:e4:82:58:8d:e7:7e:ae:89:56:84:a4:83:43: c7:7f:97:d6:ca:bd:97:31:2d:45:9b:f1:b6:5c:2f: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37613 sbgp-ipAddrBlock: critical IPv4: 41.242.112.0/22 IPv6: 2c0f:f170::/32 Signature Algorithm: sha256WithRSAEncryption 55:87:36:09:7c:b9:cf:01:20:80:9c:3a:06:d9:12:e9:42:56: 7e:50:6b:24:d9:0b:7a:73:f0:05:7a:5a:db:c7:6d:88:9f:9c: 7d:a4:20:b6:ac:66:74:19:60:44:c8:04:eb:ec:96:2c:21:c9: 9a:22:6b:ff:ee:cf:af:36:a9:1f:a6:8a:ba:61:ec:90:6b:8a: 0f:23:00:15:5d:14:17:98:35:1b:aa:64:1f:e3:5a:01:86:d5: cd:7e:16:f1:e1:5a:28:f5:63:01:cb:00:26:9a:b5:90:a3:e1: 42:36:f3:0c:cb:dc:2c:a5:9c:8d:e2:1e:48:c4:0e:65:33:ab: 4e:b5:56:b9:3c:05:89:34:8b:4d:27:9a:ea:b5:f8:eb:39:39: 21:65:b8:08:cc:f4:41:3f:49:48:28:90:43:f0:4a:76:f3:45: d8:1b:f1:38:c4:60:ac:8c:f3:9d:74:2d:f3:50:7a:28:24:d8: 12:e9:f1:ed:64:04:ee:ca:f4:d0:de:e5:c5:81:dd:59:2e:25: d5:5b:f3:da:4f:7d:1d:79:96:30:d8:25:30:b8:aa:0d:43:d6: c2:18:79:69:48:a7:dd:59:14:15:22:9c:b2:cd:96:43:b1:18: c7:fc:46:76:f2:92:52:a7:fa:05:e0:d2:01:db:eb:54:41:96: d2:2f:45:00 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPLkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzM0NTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE0MUEwQUYxMTAvBgNVBAUTKDVGMjI4QzQ2QkVGMkI0Q0JBOTRDQjI5 RjEwQzM2ODBFRTI4ODNEQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDTs+H8kchhfaHD9DdNV7gUtp3vGQREdCdVbDhynTpB750YEeqb2WYKKbSJyrJ SSvBuNY41O2m+RvgR0pZQl0ejbYQbs6S6/Hl3uDcS0H6kepF4HBOUQdPauTorJWB 6SO8yVwws395UIQC2VyuEoIJjbtHHq6kFlKfybr5ovGgTQaPMaA8rPNEkodiHA2J Xy4PULO+/c6BW6fpod55pmPyMXSI1A4x5EbHFxdQLgiRSximklvA5z31fiRQtNfm t5N+Sd0f19dAAROIxFkaT+NAVV7ffzaLymYhYGIOeGzi5e/d5IJYjed+rolWhKSD Q8d/l9bKvZcxLUWb8bZcLxS1AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUXyKMRr7y tMupTLKfEMNoDuKIPbMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNDFBMC9GMDYzQ0UzMjBBOTcx MUVFQjlCNDI1MjM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTQxQTAvRjA2M0NFMzIwQTk3MTFFRUI5QjQyNTIzNEFEOUU2RkMvWHlLTVJy N3l0TXVwVExLZkVNTm9EdUtJUGJNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAku0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIp8nAwDQQCAAIwBwMF ACwP8XAwDQYJKoZIhvcNAQELBQADggEBAFWHNgl8uc8BIICcOgbZEulCVn5QayTZ C3pz8AV6WtvHbYifnH2kILasZnQZYETIBOvsliwhyZoia//uz682qR+mirph7JBr ig8jABVdFBeYNRuqZB/jWgGG1c1+FvHhWij1YwHLACaatZCj4UI28wzL3CylnI3i HkjEDmUzq061Vrk8BYk0i00nmuq1+Os5OSFluAjM9EE/SUgokEPwSnbzRdgb8TjE YKyM8510LfNQeigk2BLp8e1kBO7K9NDe5cWB3VkuJdVb89pPfR15ljDYJTC4qg1D 1sIYeWlIp91ZFBUinLLNlkOxGMf8RnbyklKn+gXg0gHb61RBltIvRQA= -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:45 2026 by rpki-client