This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer File: x2kBfEr3fF65-LyEaI2IawFQMjo.cer (raw, json) Hash identifier: 76pRqMtrTGWK3+OqdxoCb33XfUVnsluRjl7M5ua9zX4= Subject key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C7C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:26:10 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329174 IP: 102.206.204.0/22 IP: 102.213.241.0/24 IP: 2c0f:2d80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15484 (0x3c7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:26:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:55:03:1b:fa:e7:c4:04:d2:61:ea:23:f6:17: ea:67:80:e6:67:a5:2f:93:13:f7:c4:57:2d:59:14: b8:3a:2a:4c:46:53:1c:e8:ae:a0:64:93:e5:ed:32: 13:6c:4b:3d:12:03:6e:bb:50:1d:c7:cf:d0:13:4d: 67:2d:c3:ab:f1:11:4d:13:77:9d:67:f1:88:49:0e: be:e4:42:9c:d9:28:88:02:7b:81:39:dc:8f:63:42: 21:98:a1:3d:6e:0a:0c:50:22:84:72:68:8f:ab:fa: be:48:35:9e:b6:da:24:3e:de:2e:79:18:8a:d3:95: 10:62:00:43:d8:07:27:90:1c:7a:51:9e:46:2d:12: 96:38:68:13:a7:a3:28:40:da:76:a7:89:6a:ad:18: 60:6a:53:51:a7:bb:ae:f5:bf:08:40:da:a4:6b:4d: 9c:ef:00:43:04:e5:40:a2:3f:36:34:d6:ab:02:a4: b2:26:a0:58:7b:ad:b5:dc:de:3e:9c:7c:c5:e3:59: ca:a8:9a:c7:c3:08:a6:cb:72:ca:db:b9:ec:ec:e6: 8f:d1:b4:ca:0b:cf:91:99:e6:61:c2:9a:e3:11:cd: 38:40:df:03:bf:85:07:05:59:76:16:99:59:6a:ef: fc:b9:df:dd:a0:5b:e6:5d:46:e5:06:d8:29:92:58: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329174 sbgp-ipAddrBlock: critical IPv4: 102.206.204.0/22 102.213.241.0/24 IPv6: 2c0f:2d80::/32 Signature Algorithm: sha256WithRSAEncryption 11:93:11:be:a1:9a:da:e2:04:3b:55:a9:fe:71:e9:2b:4c:0e: 28:03:3d:2d:72:6c:ef:5b:29:8f:00:5d:48:ff:8a:6a:89:f3: ea:55:c9:49:a9:43:c5:17:32:98:b1:3b:8e:75:77:82:50:76: 0b:76:66:81:16:2a:97:b7:09:cd:17:06:58:62:8f:8e:39:f9: c0:0a:91:13:c6:7e:ef:8e:f3:27:10:5d:5a:8f:49:ab:aa:a2: 84:08:7b:b0:f5:96:f8:ba:00:b5:c0:dd:0a:b5:9e:91:6f:ac: 8e:51:5d:77:e6:1b:72:07:06:ef:4c:5e:53:71:23:75:95:a7: 0b:a2:1f:10:71:28:f6:74:66:c3:a5:6a:d9:31:68:fb:b6:00: 89:fb:38:75:29:a6:08:cf:e9:4f:5c:8d:73:1b:73:ff:1d:a8: dc:1d:6d:a6:72:66:ae:02:48:a2:2b:04:b4:94:1a:10:f2:52: d3:e6:0e:37:b0:ac:42:1e:e0:06:c3:48:37:2e:7f:27:e9:47: 25:d4:15:32:46:00:a3:69:98:02:48:21:19:1d:0a:a6:23:d4: b3:a8:ce:56:44:01:57:65:8e:60:52:c0:05:c9:6e:e5:09:36: e6:9b:ef:e6:be:d3:5b:19:26:4b:f4:9b:d9:c7:65:41:07:70: f6:de:b0:5d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICPHwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzI2MTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjlFNEM4QUYxMTAvBgNVBAUTKEM3NjkwMTdDNEFGNzdDNUVCOUY4QkM4 NDY4OEQ4ODZCMDE1MDMyM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpVQMb+ufEBNJh6iP2F+pngOZnpS+TE/fEVy1ZFLg6KkxGUxzorqBkk+XtMhNs Sz0SA267UB3Hz9ATTWctw6vxEU0Td51n8YhJDr7kQpzZKIgCe4E53I9jQiGYoT1u CgxQIoRyaI+r+r5INZ622iQ+3i55GIrTlRBiAEPYByeQHHpRnkYtEpY4aBOnoyhA 2naniWqtGGBqU1Gnu671vwhA2qRrTZzvAEME5UCiPzY01qsCpLImoFh7rbXc3j6c fMXjWcqomsfDCKbLcsrbuezs5o/RtMoLz5GZ5mHCmuMRzThA3wO/hQcFWXYWmVlq 7/y5392gW+ZdRuUG2CmSWEHbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUx2kBfEr3 fF65+LyEaI2IawFQMjowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5RTRDOC9CREYwNUQ3QzdEMzgx MUVEOEM5RDA2QzdGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OUU0QzgvQkRGMDVEN0M3RDM4MTFFRDhDOUQwNkM3RjEyMjI0NjgveDJrQmZF cjNmRjY1LUx5RWFJMklhd0ZRTWpvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBdYwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmzswDBABm1fEwDQQC AAIwBwMFACwPLYAwDQYJKoZIhvcNAQELBQADggEBABGTEb6hmtriBDtVqf5x6StM DigDPS1ybO9bKY8AXUj/imqJ8+pVyUmpQ8UXMpixO451d4JQdgt2ZoEWKpe3Cc0X Blhij445+cAKkRPGfu+O8ycQXVqPSauqooQIe7D1lvi6ALXA3Qq1npFvrI5RXXfm G3IHBu9MXlNxI3WVpwuiHxBxKPZ0ZsOlatkxaPu2AIn7OHUppgjP6U9cjXMbc/8d qNwdbaZyZq4CSKIrBLSUGhDyUtPmDjewrEIe4AbDSDcufyfpRyXUFTJGAKNpmAJI IRkdCqYj1LOozlZEAVdljmBSwAXJbuUJNuab7+a+01sZJkv0m9nHZUEHcPbesF0= -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:27 2026 by rpki-client