This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer File: udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer (raw, json) Hash identifier: 22HVCr1pNoMKN8WVzkNyT5I7tkkWKHrGVqf7S3xVveE= Subject key identifier: B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E1F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:30:56 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37333 IP: 41.76.32.0/21 IP: 41.77.200.0/21 IP: 41.138.64.0/21 IP: 102.67.48.0/21 IP: 154.73.240.0/21 IP: 2c0f:fba0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15903 (0x3e1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:30:56 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36D4684AF, serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:0c:fa:fc:88:23:18:45:14:c8:1f:21:86: 61:31:16:f1:fd:90:03:9c:48:7b:0f:e8:f6:d0:93: 8b:5c:e6:77:10:24:ca:bc:d3:23:b4:3e:5c:43:37: 51:77:f8:a2:e4:78:71:04:e0:92:c1:1b:5e:8f:29: 78:e0:62:cb:be:6c:73:ba:1e:fb:27:10:3c:b8:c7: a9:6c:14:29:a8:0f:85:f6:2b:ae:4c:78:d0:54:c2: 8d:85:78:aa:ab:b7:da:40:13:ba:d9:db:6e:2f:a0: 36:13:a8:32:1a:ac:2e:26:f1:ba:0b:fd:93:58:ba: 96:f8:1f:c0:42:36:1b:5a:f6:2a:77:b4:d4:4e:bd: 29:8a:b0:44:8c:51:e0:db:b4:42:a5:42:3e:bc:32: 67:5b:9a:af:dc:2d:8e:e9:e5:68:5f:1f:d9:f9:88: da:4e:36:14:88:56:80:46:63:00:2c:79:66:e1:09: 56:e0:a9:c8:e2:7a:73:8c:92:c4:63:3e:e3:7d:f7: bd:a6:b3:75:97:f9:48:8b:ef:dd:f1:aa:8a:81:49: b4:5c:b0:3e:33:f0:e9:07:4a:78:04:82:8c:49:a5: 32:c7:e1:9c:d1:be:ca:71:64:51:e3:c2:74:fd:67: 7c:a5:78:14:27:6e:e6:d3:c6:ea:89:d6:91:77:2d: 6a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37333 sbgp-ipAddrBlock: critical IPv4: 41.76.32.0/21 41.77.200.0/21 41.138.64.0/21 102.67.48.0/21 154.73.240.0/21 IPv6: 2c0f:fba0::/32 Signature Algorithm: sha256WithRSAEncryption 48:b0:e6:5c:34:44:a8:da:ca:5a:76:ad:61:be:84:85:6b:ad: 99:9c:fd:e8:f2:46:ba:a8:27:4d:b8:f8:73:8b:2e:9c:2f:6f: 7a:26:61:55:9e:12:d1:58:5e:3c:3f:ee:5b:20:85:02:67:92: 87:c6:b7:a1:05:04:68:bf:d2:b8:a8:d7:a2:46:a4:20:d5:1b: 6b:9c:56:b9:bb:61:fc:19:40:b1:2b:36:48:f9:cc:ec:1e:20: 6d:a4:80:77:2a:87:d0:0f:be:08:2a:39:e0:ff:dc:d8:f3:a9: e8:74:6e:3b:35:cd:11:d8:ca:50:67:e6:fc:2c:12:57:30:03: af:4e:a2:3e:51:b0:bb:ab:c9:3b:c7:77:f5:77:57:64:43:9f: d3:aa:c5:b8:23:9a:5d:6b:90:9d:38:a7:c2:11:94:cc:36:80: ea:29:7c:7f:f5:49:e2:c5:4a:c8:e1:f4:94:24:7c:57:a8:1a: e4:51:3e:dc:d3:0d:1f:d9:f1:a5:1f:3c:16:4c:d1:9a:c9:5a: 3e:46:f7:dc:02:91:9b:74:7e:ad:81:03:1c:d4:ce:88:c5:bc: 62:98:72:85:23:79:3b:f2:3c:e5:b6:a3:8f:f7:26:60:80:71: 11:a7:e6:68:33:d6:9d:a5:1b:d8:22:48:60:ef:f5:ae:8f:a8: cb:16:6e:ef -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgICPh8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDMwNTZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkQ0Njg0QUYxMTAvBgNVBAUTKEI5RDczOTE0NzcwRjVGMzhFMkYxNzhC NTc0RjY5NTYyMTk0RThCMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+wQz6/IgjGEUUyB8hhmExFvH9kAOcSHsP6PbQk4tc5ncQJMq80yO0PlxDN1F3 +KLkeHEE4JLBG16PKXjgYsu+bHO6HvsnEDy4x6lsFCmoD4X2K65MeNBUwo2FeKqr t9pAE7rZ224voDYTqDIarC4m8boL/ZNYupb4H8BCNhta9ip3tNROvSmKsESMUeDb tEKlQj68Mmdbmq/cLY7p5WhfH9n5iNpONhSIVoBGYwAseWbhCVbgqcjienOMksRj PuN9972ms3WX+UiL793xqoqBSbRcsD4z8OkHSngEgoxJpTLH4ZzRvspxZFHjwnT9 Z3yleBQnbubTxuqJ1pF3LWp3AgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUudc5FHcP Xzji8Xi1dPaVYhlOiwQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZENDY4NC84RTg5MDI4QUNEQTUx MUVCOTJEQkNGM0NGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RDQ2ODQvOEU4OTAyOEFDREE1MTFFQjkyREJDRjNDRjhBRUEyMjgvdWRjNUZI Y1BYemppOFhpMWRQYVZZaGxPaXdRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkdUwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAMpTCADBAMpTcgDBAMp ikADBANmQzADBAOaSfAwDQQCAAIwBwMFACwP+6AwDQYJKoZIhvcNAQELBQADggEB AEiw5lw0RKjaylp2rWG+hIVrrZmc/ejyRrqoJ024+HOLLpwvb3omYVWeEtFYXjw/ 7lsghQJnkofGt6EFBGi/0rio16JGpCDVG2ucVrm7YfwZQLErNkj5zOweIG2kgHcq h9APvggqOeD/3Njzqeh0bjs1zRHYylBn5vwsElcwA69Ooj5RsLuryTvHd/V3V2RD n9Oqxbgjml1rkJ04p8IRlMw2gOopfH/1SeLFSsjh9JQkfFeoGuRRPtzTDR/Z8aUf PBZM0ZrJWj5G99wCkZt0fq2BAxzUzojFvGKYcoUjeTvyPOW2o4/3JmCAcRGn5mgz 1p2lG9giSGDv9a6PqMsWbu8= -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:06 2026 by rpki-client