This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer File: c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer (raw, json) Hash identifier: V6HOnx5DEHZzPxFTtaiCCG43/xSdqKsS8TCF+Pkm+XI= Subject key identifier: 73:9B:13:9D:0B:79:78:B0:F7:50:E6:18:4D:24:CF:CB:27:87:45:79 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E13 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:29:04 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.223.52.0/22 IP: 2c0f:e878::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15891 (0x3e13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:29:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F633BAF, serialNumber=739B139D0B7978B0F750E6184D24CFCB27874579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:b1:85:de:d4:df:4d:35:1d:ac:d2:df:9b: 55:de:2f:18:4e:29:15:4e:25:00:b7:3b:64:e7:4a: c8:b4:bc:ae:3b:7c:3d:5d:11:04:0e:b5:73:08:30: 17:48:1d:da:d5:34:97:d1:05:c9:88:6c:d1:f6:f7: c0:c3:5d:ae:ab:c0:7c:1c:36:2d:24:3a:3d:59:89: 99:71:f4:a0:aa:b0:6e:74:80:11:2c:d4:83:4f:9e: b5:a1:f7:1c:2f:9d:c8:e0:7c:82:0b:23:f1:71:02: 89:99:7b:a7:d1:95:2e:b2:44:9e:f5:06:66:6f:cc: cb:97:b0:d4:a8:2f:51:34:7b:50:43:b3:c8:22:35: de:b3:31:96:85:7e:79:6a:24:6d:f1:91:df:e4:7e: 88:4c:34:1d:b3:64:00:1e:20:84:2d:23:38:2f:48: d2:36:8d:55:03:39:35:1f:89:b5:26:8a:2f:24:5e: f9:a5:d7:f4:1a:c5:d6:c1:78:67:48:25:95:18:bc: 0a:71:e6:c4:bc:a1:2e:35:58:c3:05:55:e7:b3:ab: be:ad:c4:e6:7b:ae:97:9c:e3:bc:6d:65:9a:55:7f: 4a:31:d7:5d:18:ed:9f:7c:e4:fb:b0:3a:da:50:7e: fe:58:8b:23:b6:97:be:ac:f2:c5:a5:1b:7c:82:03: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9B:13:9D:0B:79:78:B0:F7:50:E6:18:4D:24:CF:CB:27:87:45:79 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft sbgp-ipAddrBlock: critical IPv4: 102.223.52.0/22 IPv6: 2c0f:e878::/32 Signature Algorithm: sha256WithRSAEncryption 72:cb:cb:90:81:5a:dc:a0:1d:bc:d8:cd:25:91:3d:94:38:7a: 23:7a:c9:a8:ca:9d:c7:1e:90:bb:b1:30:78:8b:0c:77:ff:be: 4c:5a:ed:f1:64:31:01:dc:24:e4:2e:c9:28:69:1e:bc:60:32: ad:9d:0c:ae:d2:08:a5:cc:32:bc:60:fe:33:23:9e:10:00:5f: e4:c9:df:ab:f4:11:94:3e:83:b0:03:e0:c4:cf:e8:87:9a:e8: 14:35:d4:f6:47:a5:b8:f6:37:56:98:1e:b2:f9:2a:fb:30:ce: f7:e2:32:11:95:1b:73:7a:20:ee:82:14:d2:e4:49:19:12:6b: 8d:86:ed:98:94:45:bc:6d:1e:99:3d:1c:ab:f7:84:a8:17:02: 46:4d:d5:be:af:75:78:9a:00:d2:06:8a:a4:be:89:cb:92:dc: 23:67:89:21:33:90:61:2b:86:09:70:15:97:ac:19:56:37:c1: 26:ac:0d:0b:2d:e3:bb:df:e4:93:be:62:44:a4:9e:e7:82:d9: ac:b3:ba:23:4e:00:4b:8d:ac:75:32:04:69:a6:cb:0d:33:9b: d2:8d:e0:e7:b5:18:a2:75:77:e9:bf:cc:61:0a:54:45:86:7f: ea:24:d8:e3:d1:ac:e3:69:32:b0:f0:b5:d2:cb:c4:47:d8:86: f6:ed:c5:17 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICPhMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDI5MDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY2MzNCQUYxMTAvBgNVBAUTKDczOUIxMzlEMEI3OTc4QjBGNzUwRTYx ODREMjRDRkNCMjc4NzQ1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8G7GF3tTfTTUdrNLfm1XeLxhOKRVOJQC3O2TnSsi0vK47fD1dEQQOtXMIMBdI HdrVNJfRBcmIbNH298DDXa6rwHwcNi0kOj1ZiZlx9KCqsG50gBEs1INPnrWh9xwv ncjgfIILI/FxAomZe6fRlS6yRJ71BmZvzMuXsNSoL1E0e1BDs8giNd6zMZaFfnlq JG3xkd/kfohMNB2zZAAeIIQtIzgvSNI2jVUDOTUfibUmii8kXvml1/QaxdbBeGdI JZUYvApx5sS8oS41WMMFVeezq76txOZ7rpec47xtZZpVf0ox110Y7Z985PuwOtpQ fv5YiyO2l76s8sWlG3yCAzCdAgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUc5sTnQt5 eLD3UOYYTSTPyyeHRXkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNjMzQi9CMDNCQjlBODFBMUQx MUVDOEEyQUU0MzJEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjYzM0IvQjAzQkI5QTgxQTFEMTFFQzhBMkFFNDMyRDhBMDE0Q0UvYzVzVG5R dDVlTEQzVU9ZWVRTVFB5eWVIUlhrLm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbfNDANBAIAAjAHAwUALA/oeDANBgkqhkiG9w0BAQsFAAOCAQEAcsvL kIFa3KAdvNjNJZE9lDh6I3rJqMqdxx6Qu7EweIsMd/++TFrt8WQxAdwk5C7JKGke vGAyrZ0MrtIIpcwyvGD+MyOeEABf5Mnfq/QRlD6DsAPgxM/oh5roFDXU9keluPY3 Vpgesvkq+zDO9+IyEZUbc3og7oIU0uRJGRJrjYbtmJRFvG0emT0cq/eEqBcCRk3V vq91eJoA0gaKpL6Jy5LcI2eJITOQYSuGCXAVl6wZVjfBJqwNCy3ju9/kk75iRKSe 54LZrLO6I04AS42sdTIEaabLDTOb0o3g57UYonV36b/MYQpURYZ/6iTY49Gs42ky sPC10svER9iG9u3FFw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:50 2026 by rpki-client