This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer File: xYb26TczxMU16L1GqjLQQkgHmvs.cer (raw, json) Hash identifier: eakNlktHPuapttFNaJCIq1X0F/x4WFZS03q1MkMu0NM= Subject key identifier: C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F54 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:22:35 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.205.24.0/22 IP: 2c0f:2fc0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16212 (0x3f54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:22:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FE07FAF, serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8f:33:8e:08:4a:54:c5:4d:2d:ec:d9:00:50: ee:90:61:29:5d:6f:0f:65:39:44:67:fe:38:75:ba: be:52:30:df:71:e6:a3:a4:a3:50:21:73:a2:6b:98: b7:72:e9:1c:bb:44:46:f2:d7:e0:6f:9c:55:ba:48: a2:cc:16:7e:0c:ab:04:8a:c5:09:4d:1a:56:34:0f: c6:5c:9e:52:47:e2:cc:e8:c8:66:e9:92:43:c0:82: 65:4a:b8:e0:7d:b0:d1:4c:6e:7e:d0:70:7e:a0:76: 26:29:6d:a9:18:72:61:ad:54:11:1e:07:b2:21:6a: 44:86:09:0c:8c:2e:fc:d2:3c:0d:38:d6:c1:7d:b3: 9e:b7:b0:34:76:a3:97:e8:93:8f:f4:a3:9f:77:2e: b4:ab:1e:a5:f9:db:05:7c:d7:8c:75:47:7e:21:75: a6:71:9b:07:0b:bb:8a:34:e4:08:f7:58:17:25:d3: fc:91:45:48:59:24:ee:f6:25:7d:4f:46:3b:81:3c: 66:31:2c:b7:70:0e:0d:c9:1c:22:93:d0:9f:1f:99: 23:fd:52:f5:15:5b:d4:19:65:f7:a3:be:11:f0:fe: 5b:6d:91:42:a7:16:33:82:87:3e:43:91:da:ba:77: 12:4c:92:69:25:21:1e:29:3d:84:c8:81:59:b3:4e: 54:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft sbgp-ipAddrBlock: critical IPv4: 102.205.24.0/22 IPv6: 2c0f:2fc0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:8b:75:45:56:31:81:4e:f4:46:ae:12:f8:17:af:bd:e0:66: e5:ab:49:3f:38:57:3a:ff:84:23:33:fc:c9:6f:65:29:5a:fe: 39:51:47:40:76:c0:07:f9:f9:2a:87:35:16:b7:8f:94:20:c8: 22:fb:98:ef:bc:05:77:c1:27:b7:31:f6:c6:ea:7a:82:3b:fe: 00:5c:f3:79:70:50:69:21:1c:c9:1f:74:d0:af:40:29:ad:44: 0a:56:17:06:d6:51:6a:fb:58:ee:e6:e4:43:c1:0c:02:2d:8f: 7c:cd:13:1e:c0:b4:8d:7e:21:35:c7:8d:14:97:1e:18:7b:b1: 72:9d:a6:be:15:e7:60:66:b0:ef:dd:a9:8e:a7:f3:81:f8:99: f5:23:c5:c8:aa:0e:16:a1:84:b7:f1:f0:66:9c:80:7e:55:a9: f7:6a:e6:eb:b8:25:2c:0c:a4:2f:3b:79:8f:19:72:54:ab:d7: 22:4f:dd:5b:f4:49:83:b6:9f:cc:37:4b:b9:00:dc:f8:e8:b7: 2d:5a:96:c1:1f:4d:7c:c5:fc:4e:12:fb:63:a6:09:a2:54:15: a1:58:35:ec:84:27:a8:50:74:6b:2e:92:e0:4a:da:57:cf:11: ea:67:85:64:49:03:40:e1:e4:b4:db:87:69:a6:1c:23:5d:71: 17:d5:61:1b -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICP1QwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTIyMzVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZFMDdGQUYxMTAvBgNVBAUTKEM1ODZGNkU5MzczM0M0QzUzNUU4QkQ0 NkFBMzJEMDQyNDgwNzlBRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtjzOOCEpUxU0t7NkAUO6QYSldbw9lOURn/jh1ur5SMN9x5qOko1Ahc6JrmLdy 6Ry7REby1+BvnFW6SKLMFn4MqwSKxQlNGlY0D8ZcnlJH4szoyGbpkkPAgmVKuOB9 sNFMbn7QcH6gdiYpbakYcmGtVBEeB7IhakSGCQyMLvzSPA041sF9s563sDR2o5fo k4/0o593LrSrHqX52wV814x1R34hdaZxmwcLu4o05Aj3WBcl0/yRRUhZJO72JX1P RjuBPGYxLLdwDg3JHCKT0J8fmSP9UvUVW9QZZfejvhHw/lttkUKnFjOChz5Dkdq6 dxJMkmklIR4pPYTIgVmzTlS/AgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUxYb26Tcz xMU16L1GqjLQQkgHmvswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGRTA3Ri82RTkxQkE1NDc3NkUx MUYwOTVGNjlEQ0REQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkUwN0YvNkU5MUJBNTQ3NzZFMTFGMDk1RjY5RENEREFFNEVDOUMveFliMjZU Y3p4TVUxNkwxR3FqTFFRa2dIbXZzLm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbNGDANBAIAAjAHAwUALA8vwDANBgkqhkiG9w0BAQsFAAOCAQEAj4t1 RVYxgU70Rq4S+BevveBm5atJPzhXOv+EIzP8yW9lKVr+OVFHQHbAB/n5Koc1FreP lCDIIvuY77wFd8EntzH2xup6gjv+AFzzeXBQaSEcyR900K9AKa1EClYXBtZRavtY 7ubkQ8EMAi2PfM0THsC0jX4hNceNFJceGHuxcp2mvhXnYGaw792pjqfzgfiZ9SPF yKoOFqGEt/HwZpyAflWp92rm67glLAykLzt5jxlyVKvXIk/dW/RJg7afzDdLuQDc +Oi3LVqWwR9NfMX8ThL7Y6YJolQVoVg17IQnqFB0ay6S4EraV88R6meFZEkDQOHk tNuHaaYcI11xF9VhGw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:54 2026 by rpki-client