This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer File: ki0mxmsPTvhSNY472eGm8bVde4c.cer (raw, json) Hash identifier: o+HNbomG26MvkwcIx2QigppbmaBP/RXT4rOQbujRlzA= Subject key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B16 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:33:52 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 24757 IP: 102.218.0.0/22 IP: 196.188.0.0/14 IP: 197.156.64.0/18 IP: 2c0f:f348::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15126 (0x3b16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:33:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f3:a0:0e:ff:4c:80:a6:fd:9e:cf:25:85:28: 09:dd:af:3f:b8:87:c0:02:a7:81:78:cc:b7:6b:9f: 9e:6b:d5:f2:84:46:76:cd:16:eb:73:71:a1:80:d3: 14:95:28:4a:35:1c:a2:b9:c4:11:3e:88:cd:c1:a2: 41:d9:3e:3b:e3:0a:cf:8d:aa:ce:ed:fb:94:6d:e1: f2:e9:00:ad:2f:f7:18:7b:e0:79:63:14:4a:6e:1a: ca:cc:4c:14:aa:1c:5d:99:99:4f:ac:b2:23:a9:12: 0c:58:12:7e:7d:c7:9d:09:08:5e:e5:5e:d3:4b:c0: 74:30:29:ac:1a:f8:f2:84:44:c3:06:18:ed:5c:ba: 0a:d3:6b:86:a3:c8:40:34:0e:eb:9b:bd:4c:dd:21: 17:25:46:0d:3a:d0:12:4b:6a:bf:1e:76:c4:91:fa: ef:96:40:a0:4a:ed:d0:71:0f:42:21:35:e3:b2:43: 61:82:82:07:0f:0d:10:2c:b9:29:ca:e0:6d:6c:cc: 80:9d:a2:1d:84:7c:f7:bf:82:66:a9:94:7f:b5:c5: 14:68:d0:0d:3d:44:9b:cd:b9:49:1e:70:86:28:e7: e8:83:c1:3c:5d:06:23:2d:d4:ca:a1:48:cf:eb:2e: bd:42:ee:c5:a4:7f:5f:cb:64:44:1e:ad:30:d9:2f: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 24757 sbgp-ipAddrBlock: critical IPv4: 102.218.0.0/22 196.188.0.0/14 197.156.64.0/18 IPv6: 2c0f:f348::/32 Signature Algorithm: sha256WithRSAEncryption 27:50:5c:7a:95:6b:34:c3:0a:fb:d6:be:ca:d6:14:14:d3:83: ac:e0:fd:1e:ec:af:92:ae:86:a3:6f:0f:20:11:76:41:8d:78: 6a:bd:02:90:77:b1:8c:c5:f6:5d:74:0b:b8:a6:54:c6:d5:d3: 95:bd:7d:c5:ee:f7:fc:d8:cc:54:0c:63:7e:20:52:8f:fa:a7: d3:6b:96:21:7d:aa:fb:b1:04:88:f9:ae:70:c7:63:07:c0:4c: dd:86:44:a6:11:b7:6a:35:cf:8f:ac:e3:bc:c9:ea:01:68:f1: 1e:d2:75:88:95:10:e3:59:47:7e:f3:ae:e9:f0:af:d6:e1:ec: 45:49:68:5a:21:12:d9:94:c2:36:c8:29:f8:e1:e3:98:5b:00: b1:44:0e:ad:e2:d8:f8:ee:af:15:c9:74:b6:9f:77:6f:bb:56: be:bf:08:f2:93:78:6e:05:2e:e1:80:c6:93:3e:00:2c:27:91: 71:8c:c1:b7:a8:75:e3:e6:ee:db:80:9e:f2:e5:3a:95:e8:00: 30:de:65:2a:9c:75:8d:e9:de:45:6c:b0:37:e4:0e:ca:a2:0d: 4b:32:2e:2c:b0:e4:2f:b6:a9:73:0e:62:b3:9c:5d:ef:88:42: 0d:95:73:51:24:83:d2:28:e7:3e:b1:20:18:1c:98:00:29:ad: 43:b3:66:79 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgICOxYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjMzNTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc5NzJGQUYxMTAvBgNVBAUTKDkyMkQyNkM2NkIwRjRFRjg1MjM1OEUz QkQ5RTFBNkYxQjU1RDdCODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm86AO/0yApv2ezyWFKAndrz+4h8ACp4F4zLdrn55r1fKERnbNFutzcaGA0xSV KEo1HKK5xBE+iM3BokHZPjvjCs+Nqs7t+5Rt4fLpAK0v9xh74HljFEpuGsrMTBSq HF2ZmU+ssiOpEgxYEn59x50JCF7lXtNLwHQwKawa+PKERMMGGO1cugrTa4ajyEA0 DuubvUzdIRclRg060BJLar8edsSR+u+WQKBK7dBxD0IhNeOyQ2GCggcPDRAsuSnK 4G1szICdoh2EfPe/gmaplH+1xRRo0A09RJvNuUkecIYo5+iDwTxdBiMt1MqhSM/r Lr1C7sWkf1/LZEQerTDZLwt/AgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUki0mxmsP TvhSNY472eGm8bVde4cwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3OTcyRi82MTEwNzA1QzkwMTAx MUVEOTQ3NTM5OUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Nzk3MkYvNjExMDcwNUM5MDEwMTFFRDk0NzUzOTlCRjEyMjI0Njgva2kwbXht c1BUdmhTTlk0NzJlR204YlZkZTRjLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJgtTA5BggrBgEFBQcBBwEB/wQqMCgwFwQCAAEwEQMEAmbaAAMDAsS8AwQGxZxA MA0EAgACMAcDBQAsD/NIMA0GCSqGSIb3DQEBCwUAA4IBAQAnUFx6lWs0wwr71r7K 1hQU04Os4P0e7K+Sroajbw8gEXZBjXhqvQKQd7GMxfZddAu4plTG1dOVvX3F7vf8 2MxUDGN+IFKP+qfTa5Yhfar7sQSI+a5wx2MHwEzdhkSmEbdqNc+PrOO8yeoBaPEe 0nWIlRDjWUd+867p8K/W4exFSWhaIRLZlMI2yCn44eOYWwCxRA6t4tj47q8VyXS2 n3dvu1a+vwjyk3huBS7hgMaTPgAsJ5FxjMG3qHXj5u7bgJ7y5TqV6AAw3mUqnHWN 6d5FbLA35A7Kog1LMi4ssOQvtqlzDmKznF3viEINlXNRJIPSKOc+sSAYHJgAKa1D s2Z5 -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:57 2026 by rpki-client