This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer File: kFAlcktjykllnsFAWPqwwTHFDp8.cer (raw, json) Hash identifier: ne534ZuEN9sfxSbDkMepG0fyo9CnHGsycbQc09VnqNU= Subject key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B37 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:38:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37069 IP: 41.91.0.0/16 IP: 41.155.128.0/17 IP: 41.190.248.0/22 IP: 102.8.0.0/13 IP: 105.32.0.0/12 IP: 105.180.0.0/14 IP: 105.192.0.0/14 IP: 154.128.0.0/12 IP: 197.150.0.0/15 IP: 197.222.0.0/15 IP: 2c0f:f0b0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15159 (0x3b37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:38:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:12:9e:ee:2c:ff:4e:f3:be:f9:e2:59:39: ad:fe:c2:f8:b7:6f:26:94:20:f9:4c:e1:5d:c8:52: f1:d5:d8:4a:87:ea:cc:67:fd:a0:c2:0f:1b:ef:0d: 25:65:32:fa:36:2f:a3:e4:4d:77:f7:8d:18:7c:e6: 27:ad:3f:02:bb:b5:97:5b:38:c6:c3:5b:c8:54:1a: 67:91:52:0f:6f:c9:8d:d7:a9:b4:fb:de:89:41:45: 08:13:e5:0a:e9:63:c2:f1:d1:ad:8e:64:a3:b9:60: a1:3d:a7:e1:70:47:6c:dc:38:19:ff:10:2c:4d:9d: 84:cf:2b:30:b3:3c:f3:0a:71:35:df:92:a6:f0:3c: 07:6c:82:0b:94:35:4e:cd:24:ec:e7:a2:33:75:ea: 73:fd:2e:51:59:e5:5c:da:ce:2a:b0:73:11:9d:db: 29:52:fe:cd:2f:aa:3d:f1:e0:3c:89:e9:b0:4c:eb: 43:e0:d1:40:1c:f7:c4:83:c8:7e:74:ff:7a:f1:74: 2d:c5:74:a3:4e:14:fb:13:a1:de:98:61:14:da:09: 7f:45:95:e9:e1:ae:20:6b:a8:fe:3a:4a:5f:72:ed: 75:2f:2b:c6:52:63:46:07:ec:f7:a9:0f:50:a6:8c: 86:4a:a6:37:78:8b:d4:94:e3:63:0d:a1:0f:3a:95: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37069 sbgp-ipAddrBlock: critical IPv4: 41.91.0.0/16 41.155.128.0/17 41.190.248.0/22 102.8.0.0/13 105.32.0.0/12 105.180.0.0/14 105.192.0.0/14 154.128.0.0/12 197.150.0.0/15 197.222.0.0/15 IPv6: 2c0f:f0b0::/32 Signature Algorithm: sha256WithRSAEncryption 50:e4:cc:53:9e:0c:9a:92:95:75:a3:9a:fe:d0:da:5a:cf:62: 82:33:71:e9:80:2e:b3:a3:03:c5:a2:fa:5b:f7:c8:b4:97:23: a1:7f:02:4e:94:7f:70:ec:89:b6:da:04:94:18:57:bd:1d:ac: 07:07:61:78:8c:a2:7a:dc:17:2c:e5:43:6b:5a:21:83:8c:ea: 88:1a:e6:0f:70:44:63:6f:93:78:d1:6c:9f:5d:79:27:e9:56: a2:1c:61:22:4d:02:62:d0:17:0e:dc:56:7e:39:1d:a9:12:79: 97:02:4c:11:b6:2a:7e:aa:01:86:68:43:6b:fa:e0:4a:78:f3: 37:a6:5e:82:0b:6d:16:fe:d7:d1:9f:d3:18:64:c4:00:a9:c9: 0f:f2:15:7a:0f:b0:de:2c:d6:19:e5:01:75:48:bd:cd:1f:4e: 70:90:5d:af:63:f7:bb:2f:99:a4:f5:00:a1:d1:49:7f:00:38: 69:a1:5f:b2:a7:69:f3:ec:f9:8e:f6:f3:0f:84:22:31:10:30: 0b:b6:20:2a:a0:2c:8a:c8:58:10:c4:4b:07:ea:27:0d:3c:bc: 4a:9d:56:94:05:45:a2:47:a3:2f:6d:60:21:1a:55:88:dd:03: 6a:e4:9b:64:6b:95:4e:b6:6e:25:5d:54:d0:08:9b:e0:24:ea: 7e:1f:01:d9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgICOzcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjM4NDJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjdDQzY4QUYxMTAvBgNVBAUTKDkwNTAyNTcyNEI2M0NBNDk2NTlFQzE0 MDU4RkFCMEMxMzFDNTBFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC32xKe7iz/TvO++eJZOa3+wvi3byaUIPlM4V3IUvHV2EqH6sxn/aDCDxvvDSVl Mvo2L6PkTXf3jRh85ietPwK7tZdbOMbDW8hUGmeRUg9vyY3XqbT73olBRQgT5Qrp Y8Lx0a2OZKO5YKE9p+FwR2zcOBn/ECxNnYTPKzCzPPMKcTXfkqbwPAdsgguUNU7N JOznojN16nP9LlFZ5VzaziqwcxGd2ylS/s0vqj3x4DyJ6bBM60Pg0UAc98SDyH50 /3rxdC3FdKNOFPsTod6YYRTaCX9FlenhriBrqP46Sl9y7XUvK8ZSY0YH7PepD1Cm jIZKpjd4i9SU42MNoQ86lYR1AgMBAAGjggNIMIIDRDAdBgNVHQ4EFgQUkFAlcktj ykllnsFAWPqwwTHFDp8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3Q0M2OC81Mjc0OTFGQ0QzNUQx MUYwODU4MTc5OTdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFFNEVDOUMva0ZBbGNr dGp5a2xsbnNGQVdQcXd3VEhGRHA4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkM0wXAYIKwYBBQUHAQcBAf8ETTBLMDoEAgABMDQDAwApWwMEBymbgAMEAim+ +AMDA2YIAwMEaSADAwJptAMDAmnAAwMEmoADAwHFlgMDAcXeMA0EAgACMAcDBQAs D/CwMA0GCSqGSIb3DQEBCwUAA4IBAQBQ5MxTngyakpV1o5r+0Npaz2KCM3HpgC6z owPFovpb98i0lyOhfwJOlH9w7Im22gSUGFe9HawHB2F4jKJ63Bcs5UNrWiGDjOqI GuYPcERjb5N40WyfXXkn6VaiHGEiTQJi0BcO3FZ+OR2pEnmXAkwRtip+qgGGaENr +uBKePM3pl6CC20W/tfRn9MYZMQAqckP8hV6D7DeLNYZ5QF1SL3NH05wkF2vY/e7 L5mk9QCh0Ul/ADhpoV+yp2nz7PmO9vMPhCIxEDALtiAqoCyKyFgQxEsH6icNPLxK nVaUBUWiR6MvbWAhGlWI3QNq5Jtka5VOtm4lXVTQCJvgJOp+HwHZ -----END CERTIFICATE-----Generated at Sun Jan 25 21:36:10 2026 by rpki-client