This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer File: ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer (raw, json) Hash identifier: j/M3i/rSiGCcuwSijs2Z0NYtOTeBRuMcegQtZ2FCtCs= Subject key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B48 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:41:19 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37697 IP: 102.210.72.0/22 IP: 196.10.148.0/24 IP: 2c0f:ea68::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15176 (0x3b48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:41:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367EEA2AF, serialNumber=92D15924230909F29C024B8D5F62D658974A28C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:1b:14:45:14:fd:37:1a:29:14:23:29:f7: 85:28:4f:86:6d:2a:e3:56:69:2a:27:16:fd:6a:6d: 44:6b:cc:14:19:5c:ab:3b:0f:50:ad:6e:bf:f7:d1: 0a:bb:2f:b9:f2:66:d4:fc:01:88:26:b3:9d:dd:ec: f0:3d:8d:3a:ae:2b:61:ba:3b:53:a6:0b:85:cb:17: 8d:8f:2d:b3:82:c0:c5:5e:75:2f:dd:0b:dd:90:79: ec:e0:91:37:54:8d:7f:c6:84:95:c6:56:aa:a6:29: 97:10:02:6a:39:ce:6d:3d:53:f0:9d:6f:3b:4c:f8: 15:a7:b1:99:53:b6:ad:a7:cc:1b:39:41:93:a8:5c: 60:92:8a:8f:7a:8d:53:e8:fa:5e:1b:0c:c4:81:71: 1f:8c:13:5a:06:d0:4e:a5:59:82:82:ec:32:98:c7: 7a:b3:82:27:2d:41:24:a8:69:7c:09:0e:b2:42:73: ba:7b:46:ea:40:60:97:1e:79:0f:94:51:5a:0f:e0: 40:34:28:f2:e5:6b:7c:7b:21:23:7c:28:0c:a6:34: 42:16:7c:b8:ef:69:8b:60:34:73:33:e0:e5:de:7f: a9:db:55:c3:67:cb:06:fe:ea:02:48:7e:84:f7:3c: 30:ad:44:83:17:fe:e6:cb:0f:1f:dd:5c:90:47:48: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37697 sbgp-ipAddrBlock: critical IPv4: 102.210.72.0/22 196.10.148.0/24 IPv6: 2c0f:ea68::/32 Signature Algorithm: sha256WithRSAEncryption ad:84:2a:c6:d3:6c:1a:71:82:9f:cd:ec:63:8f:29:1e:20:5f: c1:cb:e5:91:00:37:b5:21:dd:74:68:f2:b0:aa:75:15:f5:46: 45:aa:71:2b:98:53:70:ff:45:f3:69:03:f3:06:8b:de:02:79: 33:f3:6f:99:36:61:48:a9:da:36:d7:8a:a3:71:fe:df:b6:f3: 32:ce:fe:3b:76:14:21:38:c7:04:5e:4d:29:a9:37:3c:bf:e6: 3b:99:1e:b9:13:d8:bc:29:fd:be:bb:96:31:58:e4:c9:a3:01: a6:6c:39:ae:ad:a9:b8:a0:ed:ee:30:e2:45:39:a9:a2:4a:97: 6e:ea:7c:be:32:95:2a:43:ae:88:6c:03:a7:b8:33:3a:fb:d7: 0d:45:85:18:3a:bf:2b:34:93:a2:80:21:39:8a:bd:c2:67:64: 40:92:06:3c:aa:f3:f3:4a:15:fa:32:cb:d6:e7:40:ed:0e:a7: 7a:3e:e4:f4:c6:a5:8a:84:89:16:7d:a2:fc:78:ea:78:2d:32: f6:70:32:51:e7:2d:e4:ce:a3:81:64:fc:b2:c7:54:94:e1:7d: 12:d7:f4:3c:e2:01:cf:9f:9e:2f:61:d1:22:48:b3:6c:98:29: ae:7e:a0:37:4f:80:f5:bc:d6:69:ca:c6:14:cc:d3:d7:77:41: 0e:df:f4:53 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICO0gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjQxMTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjdFRUEyQUYxMTAvBgNVBAUTKDkyRDE1OTI0MjMwOTA5RjI5QzAyNEI4 RDVGNjJENjU4OTc0QTI4QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqtxsURRT9NxopFCMp94UoT4ZtKuNWaSonFv1qbURrzBQZXKs7D1Ctbr/30Qq7 L7nyZtT8AYgms53d7PA9jTquK2G6O1OmC4XLF42PLbOCwMVedS/dC92QeezgkTdU jX/GhJXGVqqmKZcQAmo5zm09U/CdbztM+BWnsZlTtq2nzBs5QZOoXGCSio96jVPo +l4bDMSBcR+ME1oG0E6lWYKC7DKYx3qzgictQSSoaXwJDrJCc7p7RupAYJceeQ+U UVoP4EA0KPLla3x7ISN8KAymNEIWfLjvaYtgNHMz4OXef6nbVcNnywb+6gJIfoT3 PDCtRIMX/ubLDx/dXJBHSCRZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUktFZJCMJ CfKcAkuNX2LWWJdKKMYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3RUVBMi85MDhGMjZCNDJFQjQx MUVFODI4NjlENzg0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2N0VFQTIvOTA4RjI2QjQyRUI0MTFFRTgyODY5RDc4NEFEOUU2RkMva3RGWkpD TUpDZktjQWt1TlgyTFdXSmRLS01ZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAk0EwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm0kgDBADECpQwDQQC AAIwBwMFACwP6mgwDQYJKoZIhvcNAQELBQADggEBAK2EKsbTbBpxgp/N7GOPKR4g X8HL5ZEAN7Uh3XRo8rCqdRX1RkWqcSuYU3D/RfNpA/MGi94CeTPzb5k2YUip2jbX iqNx/t+28zLO/jt2FCE4xwReTSmpNzy/5juZHrkT2Lwp/b67ljFY5MmjAaZsOa6t qbig7e4w4kU5qaJKl27qfL4ylSpDrohsA6e4Mzr71w1FhRg6vys0k6KAITmKvcJn ZECSBjyq8/NKFfoyy9bnQO0Op3o+5PTGpYqEiRZ9ovx46ngtMvZwMlHnLeTOo4Fk /LLHVJThfRLX9DziAc+fni9h0SJIs2yYKa5+oDdPgPW81mnKxhTM09d3QQ7f9FM= -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:54 2026 by rpki-client