This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer File: ai026HfXJSbET24AT680-ZBPIxE.cer (raw, json) Hash identifier: S7USEtXAwHynmGvdRjwBn0bkGwsEMpDfv1rzOj62ZpQ= Subject key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CE5 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:41:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 21003 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15589 (0x3ce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:41:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:f6:4b:49:3e:20:34:d5:f9:44:c6:37:1e: d3:00:c2:13:e7:3a:34:06:6f:81:4e:51:b5:8c:c5: 9e:36:8d:1e:96:47:50:39:2d:ea:c5:70:f3:a9:83: 03:f5:a2:dc:84:78:4f:ff:e6:8b:04:7b:d9:4f:85: ab:ad:d6:d5:5d:b7:21:c8:09:3f:0d:ae:64:90:03: b2:3f:8a:f8:27:23:51:bd:15:ea:2a:8c:49:3b:b8: 43:2e:f0:8e:c6:7f:24:dc:9b:d7:c2:fe:e9:c1:12: 57:25:61:ef:7d:a3:36:85:6b:bb:c6:56:d4:d7:4a: 84:63:b6:54:0f:8d:e1:76:d6:ae:b1:35:0e:f7:2b: 8a:c4:1a:4e:5b:ed:c1:bf:3d:4d:1e:69:e7:b3:6d: 29:a3:e6:76:31:8f:a7:33:52:02:3c:bd:c5:0b:91: 7f:cb:a7:35:bd:e2:53:8c:50:8a:e6:a2:99:b0:4f: 59:c0:3a:0b:4c:30:dc:7c:24:6e:4d:4d:e5:39:58: 52:60:90:9c:95:ba:37:c5:bc:5b:f5:d1:18:44:a9: a4:b5:f9:34:4f:9b:ee:14:89:91:6d:7a:49:9d:60: e4:a2:2d:c0:ce:dd:57:96:70:89:f5:61:66:6b:a1: 5e:a4:10:84:b9:fd:0c:cc:54:42:77:9b:46:a3:4f: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 21003 Signature Algorithm: sha256WithRSAEncryption 3b:e0:0b:4b:ed:ef:82:21:e6:98:22:17:0a:30:10:6c:a4:f8: 51:6a:90:b5:7b:d0:e4:6d:4e:dd:80:92:92:47:fc:d6:50:bc: 79:77:fd:f0:2f:d3:db:2c:6d:09:a8:99:6f:5d:ee:44:8f:f1: cf:7d:a5:cf:09:bf:9a:46:43:e5:33:8e:49:af:1e:37:44:c4: 4e:fa:30:43:4b:91:92:05:fe:f9:e8:a2:d7:29:d2:db:a8:20: 42:e9:e3:ee:70:06:7c:4c:2d:91:ec:69:50:dc:3f:dc:50:b7: 17:d1:61:8b:6c:2d:5c:4d:6d:1f:08:41:a0:13:2a:d1:e9:29: e1:b9:ae:f5:0c:7c:9e:28:83:42:f8:2e:a7:d5:85:24:2d:82: 29:40:2b:3d:dc:1b:6b:ae:ee:fe:b8:01:d6:21:5a:70:57:e8: 90:c1:89:d5:37:b7:cd:ed:13:15:b7:a3:0e:80:b0:64:8f:43: 47:e4:91:67:8c:a3:e1:ba:f4:d0:b7:9c:b5:f8:4e:13:33:1a: 57:ee:c6:0f:92:81:93:52:5d:04:dd:e8:27:aa:74:86:73:73: 7f:25:e3:6f:28:c2:65:31:7b:a4:f9:a1:fa:11:33:d9:c6:82: ac:c3:e0:39:20:f7:01:89:23:9b:2f:20:fc:32:03:d9:e7:63: 8b:5b:46:2a -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgICPOUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzQxMTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE5OTFEQUYxMTAvBgNVBAUTKDZBMkQzNkU4NzdENzI1MjZDNDRGNkUw MDRGQUYzNEY5OTA0RjIzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdjfZLST4gNNX5RMY3HtMAwhPnOjQGb4FOUbWMxZ42jR6WR1A5LerFcPOpgwP1 otyEeE//5osEe9lPhaut1tVdtyHICT8NrmSQA7I/ivgnI1G9FeoqjEk7uEMu8I7G fyTcm9fC/unBElclYe99ozaFa7vGVtTXSoRjtlQPjeF21q6xNQ73K4rEGk5b7cG/ PU0eaeezbSmj5nYxj6czUgI8vcULkX/LpzW94lOMUIrmopmwT1nAOgtMMNx8JG5N TeU5WFJgkJyVujfFvFv10RhEqaS1+TRPm+4UiZFtekmdYOSiLcDO3VeWcIn1YWZr oV6kEIS5/QzMVEJ3m0ajT7KxAgMBAAGjggLpMIIC5TAdBgNVHQ4EFgQUai026HfX JSbET24AT680+ZBPIxEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBOTkxRC84MTlBN0YyNDE5RjMx MUVCQjJBMjgzMDhGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTk5MUQvODE5QTdGMjQxOUYzMTFFQkIyQTI4MzA4RjhBRUEyMjgvYWkwMjZI ZlhKU2JFVDI0QVQ2ODAtWkJQSXhFLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJSCzANBgkqhkiG9w0BAQsFAAOCAQEAO+ALS+3vgiHmmCIXCjAQbKT4UWqQtXvQ 5G1O3YCSkkf81lC8eXf98C/T2yxtCaiZb13uRI/xz32lzwm/mkZD5TOOSa8eN0TE TvowQ0uRkgX++eii1ynS26ggQunj7nAGfEwtkexpUNw/3FC3F9Fhi2wtXE1tHwhB oBMq0ekp4bmu9Qx8niiDQvgup9WFJC2CKUArPdwba67u/rgB1iFacFfokMGJ1Te3 ze0TFbejDoCwZI9DR+SRZ4yj4br00LectfhOEzMaV+7GD5KBk1JdBN3oJ6p0hnNz fyXjbyjCZTF7pPmh+hEz2caCrMPgOSD3AYkjmy8g/DID2edji1tGKg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:44 2026 by rpki-client