This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer File: shxmbZvNmMAZWRBxeUg3JoQDINk.cer (raw, json) Hash identifier: KeMdKgkMekwoWw1KtuuUMWomqAn0LFjGadDwgtbtvu8= Subject key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AF1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:28:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329360 IP: 102.210.48.0/22 IP: 2c0f:6940::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15089 (0x3af1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:28:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:9f:9d:cb:42:20:cd:71:50:62:6f:3d:a9: 11:c6:98:7e:3d:5c:00:a6:5f:94:3b:d4:3a:3f:80: a5:b6:8f:c4:ff:03:fb:1b:46:8e:9b:98:f1:f3:e6: 5e:91:89:40:42:72:95:d8:2f:a4:bc:6d:29:b2:b6: be:1a:28:7b:14:d8:79:0f:0d:1b:a2:e7:ff:52:ee: 33:50:9f:09:c8:b0:77:4d:a5:26:73:1a:8e:de:f9: 4d:3b:bf:2b:16:b1:d4:94:6a:9c:ce:32:a8:1d:44: fc:b1:6b:70:b7:18:74:b9:41:95:cc:da:14:ec:0e: 4c:c7:d9:4e:41:9f:6a:36:2f:fd:36:a4:9e:6d:58: 89:30:95:9c:0f:d6:ae:74:1d:1d:b1:e3:e7:1b:a9: 18:eb:bc:00:bb:4e:55:15:d2:c5:e5:28:94:60:1a: 6f:3e:64:4d:55:93:68:f1:89:bf:e9:ae:0b:97:e5: f3:aa:c8:f8:83:f1:62:f2:e7:76:d3:1a:36:fa:11: d0:42:af:26:d7:30:db:8b:0d:84:b7:ff:13:38:d1: 68:0e:51:77:90:58:11:db:c4:a1:89:85:11:12:7e: f1:26:b1:83:3b:53:b8:6e:9e:f1:69:a7:b1:63:43: 59:34:f6:5f:9e:21:58:e1:34:8f:69:99:26:37:cd: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329360 sbgp-ipAddrBlock: critical IPv4: 102.210.48.0/22 IPv6: 2c0f:6940::/32 Signature Algorithm: sha256WithRSAEncryption 2c:8f:42:4b:1d:39:f4:ce:6b:60:21:84:80:b3:ec:d6:df:3d: 51:86:75:ba:07:94:8c:23:7d:2d:73:1e:52:b7:3a:d5:64:c2: 29:82:4e:10:8e:b2:ba:1b:5e:82:c7:00:ff:fa:4a:00:19:b9: 65:3b:ec:01:ad:d4:86:fb:70:1e:0b:90:ad:47:ec:31:ec:00: 29:a1:e8:bf:e8:d2:1a:c5:5d:0e:38:b2:ef:f4:5e:f8:ba:15: 00:ce:7b:87:b7:ec:ac:2c:7e:5e:b3:ea:37:f3:5d:97:56:25: e0:61:9e:cc:c6:c3:6b:6c:a2:51:ab:15:82:46:1e:0f:5b:6a: 6c:75:f2:ca:06:b4:8f:8b:59:cf:4c:5c:2a:da:b7:70:95:29: 8b:58:99:6a:74:73:2d:0f:9c:a5:50:94:86:07:e6:fb:31:9f: f9:4b:6c:56:c9:ea:a1:00:07:4a:b4:c4:aa:7c:bb:70:e7:5e: 3e:6d:5b:05:3d:0e:45:c5:a6:b3:b9:26:30:71:fa:22:0a:4e: da:ae:60:ae:15:f2:7d:79:6b:23:ab:b7:d6:c1:ef:32:c4:c3: a1:85:68:07:fe:28:9d:3a:27:38:d1:d0:33:61:0f:69:12:eb: 78:07:da:47:b2:19:38:81:c4:5f:40:21:df:b7:64:33:3c:4f: 96:18:e7:f0 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOvEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjI4NDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc1NjgxQUYxMTAvBgNVBAUTKEIyMUM2NjZEOUJDRDk4QzAxOTU5MTA3 MTc5NDgzNzI2ODQwMzIwRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtvZ+dy0IgzXFQYm89qRHGmH49XACmX5Q71Do/gKW2j8T/A/sbRo6bmPHz5l6R iUBCcpXYL6S8bSmytr4aKHsU2HkPDRui5/9S7jNQnwnIsHdNpSZzGo7e+U07vysW sdSUapzOMqgdRPyxa3C3GHS5QZXM2hTsDkzH2U5Bn2o2L/02pJ5tWIkwlZwP1q50 HR2x4+cbqRjrvAC7TlUV0sXlKJRgGm8+ZE1Vk2jxib/prguX5fOqyPiD8WLy53bT Gjb6EdBCrybXMNuLDYS3/xM40WgOUXeQWBHbxKGJhRESfvEmsYM7U7hunvFpp7Fj Q1k09l+eIVjhNI9pmSY3zTE1AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUshxmbZvN mMAZWRBxeUg3JoQDINkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NTY4MS8zQTgxMUEwNkIzNzEx MUVFOTkyRDIzQzU3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzU2ODEvM0E4MTFBMDZCMzcxMTFFRTk5MkQyM0M1Nzc1NDEyRTYvc2h4bWJa dk5tTUFaV1JCeGVVZzNKb1FESU5rLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBpAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0jAwDQQCAAIwBwMF ACwPaUAwDQYJKoZIhvcNAQELBQADggEBACyPQksdOfTOa2AhhICz7NbfPVGGdboH lIwjfS1zHlK3OtVkwimCThCOsrobXoLHAP/6SgAZuWU77AGt1Ib7cB4LkK1H7DHs ACmh6L/o0hrFXQ44su/0Xvi6FQDOe4e37Kwsfl6z6jfzXZdWJeBhnszGw2tsolGr FYJGHg9bamx18soGtI+LWc9MXCrat3CVKYtYmWp0cy0PnKVQlIYH5vsxn/lLbFbJ 6qEAB0q0xKp8u3DnXj5tWwU9DkXFprO5JjBx+iIKTtquYK4V8n15ayOrt9bB7zLE w6GFaAf+KJ06JzjR0DNhD2kS63gH2keyGTiBxF9AId+3ZDM8T5YY5/A= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:22 2026 by rpki-client