This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer File: kXMyk_xjUK7funWpFv_0G1Fez0w.cer (raw, json) Hash identifier: xPKe0QXNFKheA3ExrglMCzCx21CWd661+P1lnc2OLTA= Subject key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B7F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:49:01 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.207.108.0/22 IP: 102.218.108.0/22 IP: 2c0f:3d00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15231 (0x3b7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:49:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:00:44:9f:f9:e1:11:f6:70:e8:06:df:58: 28:56:34:d6:a6:ac:7e:f7:6d:6a:c3:d3:b1:bb:d1: ea:07:a9:e0:d4:f5:57:f3:1f:48:70:8d:60:d9:19: c9:e0:81:47:bc:f6:d8:43:fb:7a:6e:c6:68:21:2e: dc:3b:8f:21:b5:2e:b5:5a:81:71:58:0a:bb:39:9b: ed:da:d3:52:4c:25:44:a7:70:b9:10:63:f1:3a:86: 1a:ff:6d:ac:09:85:da:52:39:ee:78:ce:90:6d:ae: 8f:6f:44:4f:f2:56:f1:f4:7c:4b:2c:13:8e:af:e6: de:6d:fb:3e:a2:bc:5b:ea:63:75:3e:71:e0:6c:4f: b4:13:22:2c:09:9c:d6:10:3c:3c:e9:79:87:7b:1a: 72:4f:83:fd:48:22:4a:19:23:ef:fc:79:2c:b9:93: ea:00:38:46:06:4e:23:f6:65:2e:64:d3:b4:91:02: 95:58:f4:83:72:03:8b:1e:86:5c:08:e8:7d:e7:d5: 08:8d:5a:bf:89:c4:56:16:36:44:80:7e:6d:ff:23: a7:d0:f1:e8:3a:d9:94:89:72:2c:92:f9:6e:6c:7c: d7:e2:df:36:5c:72:11:a2:0c:5f:d5:4b:3a:ff:7b: e5:c2:8c:ff:2c:fc:cc:31:cd:a8:a9:ce:b8:d2:d2: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft sbgp-ipAddrBlock: critical IPv4: 102.207.108.0/22 102.218.108.0/22 IPv6: 2c0f:3d00::/32 Signature Algorithm: sha256WithRSAEncryption 1a:2c:5e:c7:61:e8:95:0e:c6:25:80:4b:d4:34:e2:0c:df:ca: e7:c1:21:30:71:4b:2e:06:6a:76:12:16:4f:11:41:0e:bf:ee: 15:29:77:88:5a:ce:10:b1:7a:4e:4e:3f:1b:36:ca:2e:55:bc: 5a:67:7a:5d:6f:78:54:35:84:77:c0:c6:8a:8c:58:cf:d0:92: 9f:c7:65:7b:64:5a:6d:56:d0:6a:e1:00:21:b8:fd:50:44:8e: 30:01:16:e0:6c:5f:96:a4:9c:0a:cd:9c:2d:1c:22:36:e6:99: ed:b2:28:4b:06:8b:90:2c:90:ee:36:b6:83:84:f4:ea:f1:bc: 30:36:1c:94:f1:84:ed:68:e0:6f:c5:af:09:41:d9:b1:9a:f9: 7a:fa:18:b3:fc:91:29:fc:28:a7:97:b1:c2:42:65:ff:25:d7: 40:54:77:94:26:cf:29:90:da:85:72:ce:b4:84:25:58:e2:0c: af:a6:9a:3a:e4:da:7a:12:6b:52:46:a6:70:4d:97:3d:45:6d: 0d:8e:43:1c:ae:2f:a8:78:53:9a:f5:90:78:5d:4e:b7:e3:07: 96:f8:fd:65:93:22:89:cd:e0:32:44:3b:8c:a4:ff:0b:2a:38: 42:ae:44:95:23:5c:63:e1:4e:7c:b0:d1:b4:1b:fd:d6:ea:29: 15:e9:66:4d -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgICO38wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjQ5MDFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjgzQTU0QUYxMTAvBgNVBAUTKDkxNzMzMjkzRkM2MzUwQUVERkJBNzVB OTE2RkZGNDFCNTE1RUNGNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSxwBEn/nhEfZw6AbfWChWNNamrH73bWrD07G70eoHqeDU9VfzH0hwjWDZGcng gUe89thD+3puxmghLtw7jyG1LrVagXFYCrs5m+3a01JMJUSncLkQY/E6hhr/bawJ hdpSOe54zpBtro9vRE/yVvH0fEssE46v5t5t+z6ivFvqY3U+ceBsT7QTIiwJnNYQ PDzpeYd7GnJPg/1IIkoZI+/8eSy5k+oAOEYGTiP2ZS5k07SRApVY9INyA4sehlwI 6H3n1QiNWr+JxFYWNkSAfm3/I6fQ8eg62ZSJciyS+W5sfNfi3zZcchGiDF/VSzr/ e+XCjP8s/MwxzaipzrjS0h4vAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUkXMyk/xj UK7funWpFv/0G1Fez0wwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4M0E1NC81QzM2NzdGMjFGNzgx MUVDOUExMjMxMUFEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODNBNTQvNUMzNjc3RjIxRjc4MTFFQzlBMTIzMTFBRDhBMDE0Q0Uva1hNeWtf eGpVSzdmdW5XcEZ2XzBHMUZlejB3Lm1mdDA0BggrBgEFBQcBBwEB/wQlMCMwEgQC AAEwDAMEAmbPbAMEAmbabDANBAIAAjAHAwUALA89ADANBgkqhkiG9w0BAQsFAAOC AQEAGixex2HolQ7GJYBL1DTiDN/K58EhMHFLLgZqdhIWTxFBDr/uFSl3iFrOELF6 Tk4/GzbKLlW8Wmd6XW94VDWEd8DGioxYz9CSn8dle2RabVbQauEAIbj9UESOMAEW 4GxflqScCs2cLRwiNuaZ7bIoSwaLkCyQ7ja2g4T06vG8MDYclPGE7Wjgb8WvCUHZ sZr5evoYs/yRKfwop5exwkJl/yXXQFR3lCbPKZDahXLOtIQlWOIMr6aaOuTaehJr UkamcE2XPUVtDY5DHK4vqHhTmvWQeF1Ot+MHlvj9ZZMiic3gMkQ7jKT/Cyo4Qq5E lSNcY+FOfLDRtBv91uopFelmTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:19 2026 by rpki-client