This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer File: kFAlcktjykllnsFAWPqwwTHFDp8.cer (raw, json) Hash identifier: mD7rpkyZWwOn0YzNsbXecEZVGvLveTR8cbmdfEuJq9c= Subject key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 371A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Sun 07 Dec 2025 11:10:30 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 37069 IP: 41.91.0.0/16 IP: 41.155.128.0/17 IP: 41.190.248.0/22 IP: 102.8.0.0/13 IP: 105.32.0.0/12 IP: 105.180.0.0/14 IP: 105.192.0.0/14 IP: 154.128.0.0/12 IP: 197.150.0.0/15 IP: 197.222.0.0/15 IP: 2c0f:f0b0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14106 (0x371a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Dec 7 11:10:30 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:12:9e:ee:2c:ff:4e:f3:be:f9:e2:59:39: ad:fe:c2:f8:b7:6f:26:94:20:f9:4c:e1:5d:c8:52: f1:d5:d8:4a:87:ea:cc:67:fd:a0:c2:0f:1b:ef:0d: 25:65:32:fa:36:2f:a3:e4:4d:77:f7:8d:18:7c:e6: 27:ad:3f:02:bb:b5:97:5b:38:c6:c3:5b:c8:54:1a: 67:91:52:0f:6f:c9:8d:d7:a9:b4:fb:de:89:41:45: 08:13:e5:0a:e9:63:c2:f1:d1:ad:8e:64:a3:b9:60: a1:3d:a7:e1:70:47:6c:dc:38:19:ff:10:2c:4d:9d: 84:cf:2b:30:b3:3c:f3:0a:71:35:df:92:a6:f0:3c: 07:6c:82:0b:94:35:4e:cd:24:ec:e7:a2:33:75:ea: 73:fd:2e:51:59:e5:5c:da:ce:2a:b0:73:11:9d:db: 29:52:fe:cd:2f:aa:3d:f1:e0:3c:89:e9:b0:4c:eb: 43:e0:d1:40:1c:f7:c4:83:c8:7e:74:ff:7a:f1:74: 2d:c5:74:a3:4e:14:fb:13:a1:de:98:61:14:da:09: 7f:45:95:e9:e1:ae:20:6b:a8:fe:3a:4a:5f:72:ed: 75:2f:2b:c6:52:63:46:07:ec:f7:a9:0f:50:a6:8c: 86:4a:a6:37:78:8b:d4:94:e3:63:0d:a1:0f:3a:95: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37069 sbgp-ipAddrBlock: critical IPv4: 41.91.0.0/16 41.155.128.0/17 41.190.248.0/22 102.8.0.0/13 105.32.0.0/12 105.180.0.0/14 105.192.0.0/14 154.128.0.0/12 197.150.0.0/15 197.222.0.0/15 IPv6: 2c0f:f0b0::/32 Signature Algorithm: sha256WithRSAEncryption bc:aa:1c:9b:35:cd:a8:b9:04:fe:73:5b:9c:f0:e4:80:80:65: de:e8:15:8a:dd:06:5e:59:b2:47:27:da:09:7b:24:7e:74:92: 96:1a:7e:22:27:41:5d:1d:3d:56:db:1e:dc:55:97:97:30:8b: 17:61:80:3b:9f:82:94:6a:af:5a:38:b3:cd:e4:9d:b3:bc:7e: 28:46:8f:a9:dd:6a:58:e6:83:d1:72:84:f4:0b:e6:21:4a:85: 55:b1:4f:cd:4f:1e:a6:6f:d6:9e:11:6f:36:99:d6:d0:d4:bf: 24:9f:43:67:e5:c8:cc:c9:cc:a5:0a:dd:3b:43:7e:78:66:52: c4:68:67:12:85:77:6d:36:f6:5b:7b:9c:5b:a3:7f:5b:ce:03: 4e:6b:3d:5f:34:f6:23:98:e4:95:fe:ca:ec:e5:21:61:48:05: 25:f6:64:31:44:f4:b8:99:36:20:b4:73:77:a3:a8:c0:81:d5: 34:78:e6:2d:54:67:8e:6e:f2:a1:72:3c:40:a8:ca:af:66:20: 34:b5:33:90:1f:35:0b:a1:a1:d3:d3:c9:fd:9d:14:0e:f0:d7: 75:d5:3e:74:40:e2:ed:9e:51:0d:2f:1c:44:1b:50:c8:0a:b4: f5:33:76:bd:c7:97:aa:f8:89:3b:45:96:f6:e1:72:83:99:79: ee:59:3e:d8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgICNxowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTEyMDcxMTEwMzBaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjdDQzY4QUYxMTAvBgNVBAUTKDkwNTAyNTcyNEI2M0NBNDk2NTlFQzE0 MDU4RkFCMEMxMzFDNTBFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC32xKe7iz/TvO++eJZOa3+wvi3byaUIPlM4V3IUvHV2EqH6sxn/aDCDxvvDSVl Mvo2L6PkTXf3jRh85ietPwK7tZdbOMbDW8hUGmeRUg9vyY3XqbT73olBRQgT5Qrp Y8Lx0a2OZKO5YKE9p+FwR2zcOBn/ECxNnYTPKzCzPPMKcTXfkqbwPAdsgguUNU7N JOznojN16nP9LlFZ5VzaziqwcxGd2ylS/s0vqj3x4DyJ6bBM60Pg0UAc98SDyH50 /3rxdC3FdKNOFPsTod6YYRTaCX9FlenhriBrqP46Sl9y7XUvK8ZSY0YH7PepD1Cm jIZKpjd4i9SU42MNoQ86lYR1AgMBAAGjggNIMIIDRDAdBgNVHQ4EFgQUkFAlcktj ykllnsFAWPqwwTHFDp8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3Q0M2OC81Mjc0OTFGQ0QzNUQx MUYwODU4MTc5OTdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFFNEVDOUMva0ZBbGNr dGp5a2xsbnNGQVdQcXd3VEhGRHA4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkM0wXAYIKwYBBQUHAQcBAf8ETTBLMDoEAgABMDQDAwApWwMEBymbgAMEAim+ +AMDA2YIAwMEaSADAwJptAMDAmnAAwMEmoADAwHFlgMDAcXeMA0EAgACMAcDBQAs D/CwMA0GCSqGSIb3DQEBCwUAA4IBAQC8qhybNc2ouQT+c1uc8OSAgGXe6BWK3QZe WbJHJ9oJeyR+dJKWGn4iJ0FdHT1W2x7cVZeXMIsXYYA7n4KUaq9aOLPN5J2zvH4o Ro+p3WpY5oPRcoT0C+YhSoVVsU/NTx6mb9aeEW82mdbQ1L8kn0Nn5cjMycylCt07 Q354ZlLEaGcShXdtNvZbe5xbo39bzgNOaz1fNPYjmOSV/srs5SFhSAUl9mQxRPS4 mTYgtHN3o6jAgdU0eOYtVGeObvKhcjxAqMqvZiA0tTOQHzULoaHT08n9nRQO8Nd1 1T50QOLtnlENLxxEG1DICrT1M3a9x5eq+Ik7RZb24XKDmXnuWT7Y -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:32 2025 by rpki-client