This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer File: xel4rPl9qfSdxLKEr_AldPEDGH8.cer (raw, json) Hash identifier: GVDhT9fASANOEqAOb1e5jlWMt3N/3bnjo8U3PHGYqhM= Subject key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E9F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:51:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.222.200.0/22 IP: 2c0f:e890::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16031 (0x3e9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:51:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:cf:8e:c1:75:16:12:74:37:7f:62:59:68: 13:95:ae:ca:96:f8:8c:aa:67:cf:74:83:01:b2:bc: 41:bf:de:cc:36:c2:db:5f:78:2b:f3:85:1d:43:3f: 73:14:60:c4:22:6f:df:98:99:22:18:90:a7:a5:5b: b6:32:b0:3b:8d:36:85:e5:2c:ce:c8:e5:4b:ce:f7: eb:e5:cd:82:47:b1:a9:0e:37:a8:49:63:96:fc:87: 4f:f0:49:c5:3e:10:07:ce:4d:89:d6:8f:7a:2e:af: 60:2e:3f:e6:05:9b:3c:15:d7:cf:32:55:4f:5a:ab: 07:68:5d:71:d1:fa:62:b2:cf:53:bb:c2:26:33:4f: 5b:12:d9:d8:c2:aa:e2:70:f3:db:c3:56:95:5b:96: 8e:b3:ef:a8:11:e7:21:e8:09:24:60:f3:09:c6:d3: 17:25:a2:e7:fb:a8:7c:27:a6:68:b8:bb:93:c2:92: 8c:a0:b8:ab:29:45:41:be:f6:c3:f8:cd:da:a0:4a: e0:49:be:77:78:f7:12:1e:fa:21:bd:e2:1f:8a:69: e1:67:fb:61:ae:0d:c8:24:c9:a5:eb:a6:da:26:86: 51:21:39:ed:7e:fb:9b:af:8d:e7:42:5e:d6:21:ee: d5:72:6b:6b:2f:71:4f:d9:0b:a5:fc:20:58:75:94: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft sbgp-ipAddrBlock: critical IPv4: 102.222.200.0/22 IPv6: 2c0f:e890::/32 Signature Algorithm: sha256WithRSAEncryption 2c:ed:51:f6:4d:e4:f4:f3:13:e7:69:b2:ac:fe:74:62:da:78: 7b:62:34:9c:ee:6d:0c:94:eb:85:cb:43:97:fa:58:d8:ae:a0: 38:f7:28:7d:7d:a4:f1:ae:98:f0:96:15:c5:87:2b:a0:e0:9e: 70:af:8a:ee:ca:2a:da:35:0b:8a:9e:c0:41:f2:58:64:bb:20: 8a:c0:02:7d:36:50:14:f4:b5:e5:1b:55:ad:97:46:b0:f6:2d: 78:3c:63:1b:b9:fc:9d:19:b4:1a:be:62:5a:d7:d4:e6:e1:0e: 0e:4f:57:b8:b9:88:fa:8c:e0:db:3d:97:80:f4:2f:dd:17:76: 73:a7:44:aa:35:74:c2:16:77:96:37:93:b6:5b:7e:41:69:61: c7:84:ac:be:fe:9c:93:36:af:57:3d:ca:c6:3f:86:c0:d3:26: 89:0f:b5:85:76:e6:3c:77:39:ff:0a:58:df:54:f8:d2:c3:61: 2c:fa:db:49:9d:a1:71:5c:68:d6:b9:f2:80:2c:0e:81:3d:86: 18:01:9b:4d:bb:94:1d:d7:9e:77:29:f3:f5:d5:4b:1e:4f:a0: 88:b3:6c:9a:c4:02:40:e5:cd:82:37:35:a5:85:de:2a:d1:7f: 29:31:37:50:16:85:da:0d:f5:12:5b:41:cb:91:30:a2:c8:2e: 0a:09:6c:93 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICPp8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDUxNDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU2QUI4QUYxMTAvBgNVBAUTKEM1RTk3OEFDRjk3REE5RjQ5REM0QjI4 NEFGRjAyNTc0RjEwMzE4N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrFs+OwXUWEnQ3f2JZaBOVrsqW+IyqZ890gwGyvEG/3sw2wttfeCvzhR1DP3MU YMQib9+YmSIYkKelW7YysDuNNoXlLM7I5UvO9+vlzYJHsakON6hJY5b8h0/wScU+ EAfOTYnWj3our2AuP+YFmzwV188yVU9aqwdoXXHR+mKyz1O7wiYzT1sS2djCquJw 89vDVpVblo6z76gR5yHoCSRg8wnG0xclouf7qHwnpmi4u5PCkoyguKspRUG+9sP4 zdqgSuBJvnd49xIe+iG94h+KaeFn+2GuDcgkyaXrptomhlEhOe1++5uvjedCXtYh 7tVya2svcU/ZC6X8IFh1lEn9AgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUxel4rPl9 qfSdxLKEr/AldPEDGH8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNkFCOC9EOEZFMjhGNjFCREMx MUVDQjE2OUE0NjdEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTZBQjgvRDhGRTI4RjYxQkRDMTFFQ0IxNjlBNDY3RDhBMDE0Q0UveGVsNHJQ bDlxZlNkeExLRXJfQWxkUEVER0g4Lm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbeyDANBAIAAjAHAwUALA/okDANBgkqhkiG9w0BAQsFAAOCAQEALO1R 9k3k9PMT52myrP50Ytp4e2I0nO5tDJTrhctDl/pY2K6gOPcofX2k8a6Y8JYVxYcr oOCecK+K7soq2jULip7AQfJYZLsgisACfTZQFPS15RtVrZdGsPYteDxjG7n8nRm0 Gr5iWtfU5uEODk9XuLmI+ozg2z2XgPQv3Rd2c6dEqjV0whZ3ljeTtlt+QWlhx4Ss vv6ckzavVz3Kxj+GwNMmiQ+1hXbmPHc5/wpY31T40sNhLPrbSZ2hcVxo1rnygCwO gT2GGAGbTbuUHdeedynz9dVLHk+giLNsmsQCQOXNgjc1pYXeKtF/KTE3UBaF2g31 EltBy5EwosguCglskw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:15 2026 by rpki-client