This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer File: mCHIciHScLQv-d2CYEi5ksDg4_g.cer (raw, json) Hash identifier: 2gV9eb8wGCRDYxLn89M6d/vr11Q7yqkFLKS0PK9cUmM= Subject key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AA7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 1228 -- 1232 AS: 2018 AS: 6149 IP: 154.114.0.0/17 IP: 154.115.0.0/17 IP: 196.21.0.0/16 IP: 196.24.0.0/16 IP: 2001:4200::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15015 (0x3aa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:18:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B9F4BAF, serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d0:05:b1:12:c2:0c:30:84:cb:fe:a4:03:1d: ea:6b:db:93:df:f3:ff:c2:a9:e0:c3:f6:b7:ce:e9: 0c:e0:1b:6f:e8:1d:19:47:d6:41:44:34:b0:44:ee: 86:92:33:f1:f2:d4:24:4c:a4:f7:24:c2:a2:e1:79: 08:aa:11:09:19:f7:14:ad:79:d5:5d:05:93:4f:29: 21:c0:ae:e6:aa:9b:3c:a7:51:3a:0b:4d:6b:95:92: a2:31:be:2d:87:3f:5e:76:bd:6d:0f:5b:8e:3c:cf: 30:92:f0:ea:a4:62:9a:b5:41:ae:14:25:6c:c2:94: 0c:93:79:70:10:9d:31:03:fc:a3:32:5a:47:e7:90: c8:7a:19:1f:44:da:26:0b:5e:78:29:ba:29:7d:65: e3:14:01:76:b7:96:3d:74:24:23:1b:b4:e4:26:68: 3e:82:35:04:2b:cf:93:79:ed:73:66:62:d2:5c:d3: c8:4c:f8:e6:b2:2a:dd:08:60:9c:f6:fd:a4:b2:44: ff:24:d2:45:ad:29:4a:fb:b1:ea:f4:43:86:3b:03: 45:f4:05:f1:3b:24:92:fa:5f:e5:59:cc:13:40:8e: 47:cd:f1:44:69:51:61:04:30:63:c9:94:a4:9c:08: ac:c0:7a:bd:a9:4b:8b:73:5b:ca:eb:98:58:d6:61: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 1228-1232 2018 6149 sbgp-ipAddrBlock: critical IPv4: 154.114.0.0/17 154.115.0.0/17 196.21.0.0/16 196.24.0.0/16 IPv6: 2001:4200::/32 Signature Algorithm: sha256WithRSAEncryption b7:8d:c1:9f:d2:81:39:3f:11:f4:8e:dd:e4:13:c5:92:dd:52: 20:ac:81:ca:f6:91:84:a5:1a:70:0d:79:53:5a:98:da:13:9f: ac:f2:9a:f9:dd:b1:6b:5c:b5:2e:9b:62:01:c6:6f:05:c8:c1: bb:05:ab:a9:c5:56:13:3d:d9:2f:2a:f9:54:c0:21:e9:db:5a: b6:1f:39:7b:be:4b:ff:fe:2d:7a:de:5a:0f:eb:b9:c5:8b:1a: 75:44:65:fa:de:58:33:c2:f3:1f:dd:18:c8:a7:e3:b9:b6:7c: 30:db:ec:85:6a:8c:11:f8:81:a6:68:4f:12:55:8d:5c:df:5a: fc:53:ca:82:43:b7:30:73:c6:02:d3:df:94:bf:dc:ac:55:c2: 56:03:bf:be:49:91:7e:f2:5c:ab:10:e5:c4:d9:ac:de:64:cf: bf:78:c3:ef:70:c1:24:4d:ba:cb:e8:a8:91:c5:98:b2:c2:cb: 11:03:dd:6a:e1:74:77:d7:d3:60:09:69:d5:28:30:9b:cb:96: 22:cb:ef:9f:65:d1:8d:03:30:92:12:66:ca:8b:5c:f6:c8:13: 61:21:d1:f6:0c:62:48:7d:91:43:e8:e4:1b:09:62:24:ef:32: 45:c8:e8:75:ce:13:2b:34:58:85:8a:75:52:4f:32:1a:22:dd: 04:79:d5:0c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgICOqcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjE4NDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI5RjRCQUYxMTAvBgNVBAUTKDk4MjFDODcyMjFEMjcwQjQyRkY5REQ4 MjYwNDhCOTkyQzBFMEUzRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCT0AWxEsIMMITL/qQDHepr25Pf8//CqeDD9rfO6QzgG2/oHRlH1kFENLBE7oaS M/Hy1CRMpPckwqLheQiqEQkZ9xStedVdBZNPKSHAruaqmzynUToLTWuVkqIxvi2H P152vW0PW448zzCS8OqkYpq1Qa4UJWzClAyTeXAQnTED/KMyWkfnkMh6GR9E2iYL Xngpuil9ZeMUAXa3lj10JCMbtOQmaD6CNQQrz5N57XNmYtJc08hM+OayKt0IYJz2 /aSyRP8k0kWtKUr7ser0Q4Y7A0X0BfE7JJL6X+VZzBNAjkfN8URpUWEEMGPJlKSc CKzAer2pS4tzW8rrmFjWYZURAgMBAAGjggM3MIIDMzAdBgNVHQ4EFgQUmCHIciHS cLQv+d2CYEi5ksDg4/gwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCOUY0Qi82MUEyRTFBMjhERTAx MUU5QUMxNEY2MzJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjlGNEIvNjFBMkUxQTI4REUwMTFFOUFDMTRGNjMyRjhBRUEyMjgvbUNISWNp SFNjTFF2LWQyQ1lFaTVrc0RnNF9nLm1mdDAnBggrBgEFBQcBCAEB/wQYMBagFDAS MAgCAgTMAgIE0AICB+ICAhgFMD4GCCsGAQUFBwEHAQH/BC8wLTAcBAIAATAWAwQH mnIAAwQHmnMAAwMAxBUDAwDEGDANBAIAAjAHAwUAIAFCADANBgkqhkiG9w0BAQsF AAOCAQEAt43Bn9KBOT8R9I7d5BPFkt1SIKyByvaRhKUacA15U1qY2hOfrPKa+d2x a1y1LptiAcZvBcjBuwWrqcVWEz3ZLyr5VMAh6dtath85e75L//4tet5aD+u5xYsa dURl+t5YM8LzH90YyKfjubZ8MNvshWqMEfiBpmhPElWNXN9a/FPKgkO3MHPGAtPf lL/crFXCVgO/vkmRfvJcqxDlxNms3mTPv3jD73DBJE26y+iokcWYssLLEQPdauF0 d9fTYAlp1Sgwm8uWIsvvn2XRjQMwkhJmyotc9sgTYSHR9gxiSH2RQ+jkGwliJO8y Rcjodc4TKzRYhYp1Uk8yGiLdBHnVDA== -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:56 2026 by rpki-client