This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer File: cfbjXgELx4fYmgtLqTPZlvrU2tI.cer (raw, json) Hash identifier: geXTgoqFw2bF+PX5A4xMywA2wIYpO9TIvMANQK1rxws= Subject key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BA7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:54:33 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327978 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15271 (0x3ba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:54:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:df:77:02:a9:f5:08:6d:47:a2:6c:b9:b2:e5: f1:ca:61:d6:b3:e3:67:e2:a9:06:b2:2b:23:62:f8: 79:10:0a:84:dc:80:35:3d:a7:6d:48:66:46:92:5e: ff:cb:f0:56:fe:f3:c7:63:d7:79:7a:c7:77:53:e4: 5b:4a:c0:26:3d:39:c6:df:d2:92:30:d6:2f:b1:40: cd:1f:aa:a4:7e:f2:a6:06:d5:fb:3d:d2:21:21:58: fa:08:44:16:75:05:11:fe:d7:30:72:0e:a9:52:74: 5f:a4:2b:12:4c:b6:eb:3c:08:b7:48:c5:47:ba:ef: 20:2c:23:8b:b4:2c:d7:dc:cb:13:49:61:77:a0:51: 9b:05:71:1e:ad:08:25:f0:00:6c:13:23:17:48:21: 78:ea:54:b8:5b:3b:94:b9:41:b3:31:b1:42:5b:77: ab:e9:17:77:e1:2c:af:35:68:b7:60:90:d7:0f:29: 0a:bc:0c:16:e6:57:b2:25:5c:ce:37:6e:c8:ca:bc: 34:da:da:08:5a:18:46:46:bb:02:b6:05:f0:71:74: 42:98:05:d4:0a:4c:fd:34:e1:81:d2:00:d1:c1:52: 28:cc:95:03:3f:d4:d6:6a:bb:1b:c0:d4:a1:bc:76: 6d:96:52:ba:40:0e:0a:b8:f4:d5:19:ea:93:26:ce: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327978 Signature Algorithm: sha256WithRSAEncryption 74:9b:ed:7d:93:bb:d5:68:31:b4:d0:6e:18:81:56:b0:b7:e3: a7:93:27:ac:9d:8e:6c:e8:7c:ed:74:b5:a2:9c:c8:78:49:1f: 5e:63:4d:6c:98:7b:26:6c:16:af:3b:df:f3:94:2e:d5:59:63: 89:12:2d:d8:9f:30:24:e3:78:f6:ad:4c:57:7e:f0:8c:4b:0f: 71:47:4c:f4:3f:10:9e:12:f4:2a:de:fd:9b:30:60:3d:2b:47: 70:16:e7:28:3a:ef:e5:38:d8:2f:f7:61:be:47:16:b0:61:71: 22:c1:89:64:e7:73:74:2f:4e:c8:ef:54:85:fd:93:bb:f6:a7: e1:ef:76:0d:71:7d:26:62:ef:cb:0b:dc:0a:6d:92:bb:01:d8: c5:d8:06:cb:1b:ac:3b:ff:e7:fe:45:e8:21:16:82:7f:17:67: 55:1a:63:80:15:61:a8:c1:f0:f8:c8:2a:d1:c1:13:05:43:21: 5e:4c:9c:4e:09:8d:8c:0a:b8:cb:90:2f:28:b1:b2:5c:06:6b: 53:31:4d:11:d9:29:dd:94:95:4b:76:e4:bb:06:7f:2f:1a:2e: b1:8a:1f:b3:c1:67:0b:63:08:8e:c3:57:dd:0a:dc:1a:14:c1: 3b:84:55:c7:c3:2f:71:35:12:77:a6:5e:4f:49:cc:df:d7:b6: ab:d4:4c:73 -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgICO6cwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU0MzNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg4MkExQUYxMTAvBgNVBAUTKDcxRjZFMzVFMDEwQkM3ODdEODlBMEI0 QkE5MzNEOTk2RkFENERBRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr33cCqfUIbUeibLmy5fHKYdaz42fiqQayKyNi+HkQCoTcgDU9p21IZkaSXv/L 8Fb+88dj13l6x3dT5FtKwCY9Ocbf0pIw1i+xQM0fqqR+8qYG1fs90iEhWPoIRBZ1 BRH+1zByDqlSdF+kKxJMtus8CLdIxUe67yAsI4u0LNfcyxNJYXegUZsFcR6tCCXw AGwTIxdIIXjqVLhbO5S5QbMxsUJbd6vpF3fhLK81aLdgkNcPKQq8DBbmV7IlXM43 bsjKvDTa2ghaGEZGuwK2BfBxdEKYBdQKTP004YHSANHBUijMlQM/1NZquxvA1KG8 dm2WUrpADgq49NUZ6pMmztqFAgMBAAGjggLqMIIC5jAdBgNVHQ4EFgQUcfbjXgEL x4fYmgtLqTPZlvrU2tIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4ODJBMS9BQTc1NTgyQ0M3QzQx MUVCQjUyMEE2NjhGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODgyQTEvQUE3NTU4MkNDN0M0MTFFQkI1MjBBNjY4RjhBRUEyMjgvY2Zialhn RUx4NGZZbWd0THFUUFpsdnJVMnRJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFASowDQYJKoZIhvcNAQELBQADggEBAHSb7X2Tu9VoMbTQbhiBVrC346eTJ6yd jmzofO10taKcyHhJH15jTWyYeyZsFq873/OULtVZY4kSLdifMCTjePatTFd+8IxL D3FHTPQ/EJ4S9Cre/ZswYD0rR3AW5yg67+U42C/3Yb5HFrBhcSLBiWTnc3QvTsjv VIX9k7v2p+Hvdg1xfSZi78sL3AptkrsB2MXYBssbrDv/5/5F6CEWgn8XZ1UaY4AV YajB8PjIKtHBEwVDIV5MnE4JjYwKuMuQLyixslwGa1MxTRHZKd2UlUt25LsGfy8a LrGKH7PBZwtjCI7DV90K3BoUwTuEVcfDL3E1EnemXk9JzN/XtqvUTHM= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:56 2026 by rpki-client