This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer File: xj3vPkSJRRRCc6POcAST0qDFrZo.cer (raw, json) Hash identifier: xBbCDv+MH1F7PbqknS9WdVv1jc+/+w/WEE9qIs9ADnQ= Subject key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38FD Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:13:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37629 IP: 154.65.4.0/22 IP: 196.1.176.0/20 IP: 2c0f:f128::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14589 (0x38fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:13:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:36:2e:1b:a7:87:95:96:7d:c3:25:b5:90: 12:48:0c:44:e9:91:29:3d:b8:15:a8:15:f4:87:dc: fe:4a:7c:e1:52:a5:35:83:84:a9:5b:e1:46:44:46: ae:4f:81:07:de:49:fc:17:cb:b4:da:a4:e5:e6:82: 65:22:48:46:e7:73:d1:e6:79:fe:9f:23:65:96:c8: 34:d9:a9:cf:8a:8d:d0:f9:a1:57:f1:6d:42:f7:e2: 39:22:73:dd:ec:2f:0b:a6:f7:55:8f:8c:af:ca:d6: 6e:7b:57:b1:9f:f5:c7:0e:39:30:2f:1e:8c:43:81: 8b:4c:de:f0:80:80:c8:da:d9:be:62:6c:e2:31:2b: 10:5a:2b:65:6f:87:7a:b4:d0:e4:15:e8:4d:54:6e: dc:02:6c:de:31:46:5e:83:1b:dc:b4:49:14:d6:c2: 9e:db:50:cf:37:f8:1e:8c:ed:16:f5:50:28:f4:4e: d7:88:ff:1f:57:30:b8:c5:5a:8a:e4:c5:3e:f6:09: 12:d3:e8:71:72:d9:6f:fd:e2:00:6e:dc:b1:4c:22: 29:f5:49:2a:8c:47:22:30:ff:ef:7d:3f:07:20:26: 24:4f:dd:cb:21:1d:c3:f3:1b:95:1b:87:32:35:ac: a6:03:3a:56:26:df:66:46:61:75:42:7f:eb:a8:f0: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37629 sbgp-ipAddrBlock: critical IPv4: 154.65.4.0/22 196.1.176.0/20 IPv6: 2c0f:f128::/32 Signature Algorithm: sha256WithRSAEncryption 12:59:29:f9:7f:d8:af:75:82:65:28:04:ca:21:41:16:9d:f5: 54:00:76:dd:8b:a2:17:85:36:82:cd:5b:7f:39:eb:69:07:df: 7d:7c:7a:a2:29:f3:9a:0e:c3:25:e7:2c:43:a9:cc:05:eb:6f: 8f:6f:f3:d7:d2:4a:f9:8f:56:32:e9:e4:7b:50:b2:1a:91:c8: cb:e6:f9:f2:b5:32:a0:9d:bb:d6:5d:02:a0:15:5c:d8:6b:d3: e2:84:18:70:da:7f:4b:37:e0:f7:07:9c:d4:42:08:ad:96:04: db:cf:78:74:e6:0e:22:63:43:82:92:0c:8e:cf:16:0f:eb:68: 35:59:8a:57:9c:41:05:20:33:3c:5e:46:3a:de:30:3f:70:fa: 19:59:b7:c0:6c:7d:0c:9d:5a:c1:b6:0b:7a:31:14:f2:da:44: e7:96:3a:58:45:c7:bb:94:07:73:14:44:9c:2e:03:48:28:5b: 64:09:33:4c:18:56:2d:fb:45:6a:2b:dc:25:3f:76:38:d2:38: 9c:3b:a1:a0:44:62:3d:be:1b:39:77:51:2c:14:ad:f8:0d:6e: 61:2c:bf:d3:a4:8b:32:f8:c0:4a:bd:55:c2:bb:40:52:62:a8: b2:26:3c:ea:ff:a5:1f:96:cd:01:6a:6a:39:ae:98:db:c9:fb: 6a:60:16:4d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOP0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTEzMjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQwREZEQUYxMTAvBgNVBAUTKEM2M0RFRjNFNDQ4OTQ1MTQ0MjczQTND RTcwMDQ5M0QyQTBDNUFEOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB4TYuG6eHlZZ9wyW1kBJIDETpkSk9uBWoFfSH3P5KfOFSpTWDhKlb4UZERq5P gQfeSfwXy7TapOXmgmUiSEbnc9Hmef6fI2WWyDTZqc+KjdD5oVfxbUL34jkic93s Lwum91WPjK/K1m57V7Gf9ccOOTAvHoxDgYtM3vCAgMja2b5ibOIxKxBaK2Vvh3q0 0OQV6E1UbtwCbN4xRl6DG9y0SRTWwp7bUM83+B6M7Rb1UCj0TteI/x9XMLjFWork xT72CRLT6HFy2W/94gBu3LFMIin1SSqMRyIw/+99PwcgJiRP3cshHcPzG5UbhzI1 rKYDOlYm32ZGYXVCf+uo8EcbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUxj3vPkSJ RRRCc6POcAST0qDFrZowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MERGRC9CMjMzQkIyRTkwOUEx MUVGQjk0OTY0NkI3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDBERkQvQjIzM0JCMkU5MDlBMTFFRkI5NDk2NDZCNzYyRTk1MUEveGozdlBr U0pSUlJDYzZQT2NBU1QwcURGclpvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkv0wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKaQQQDBATEAbAwDQQC AAIwBwMFACwP8SgwDQYJKoZIhvcNAQELBQADggEBABJZKfl/2K91gmUoBMohQRad 9VQAdt2LoheFNoLNW38562kH3318eqIp85oOwyXnLEOpzAXrb49v89fSSvmPVjLp 5HtQshqRyMvm+fK1MqCdu9ZdAqAVXNhr0+KEGHDaf0s34PcHnNRCCK2WBNvPeHTm DiJjQ4KSDI7PFg/raDVZilecQQUgMzxeRjreMD9w+hlZt8BsfQydWsG2C3oxFPLa ROeWOlhFx7uUB3MURJwuA0goW2QJM0wYVi37RWor3CU/djjSOJw7oaBEYj2+Gzl3 USwUrfgNbmEsv9OkizL4wEq9VcK7QFJiqLImPOr/pR+WzQFqajmumNvJ+2pgFk0= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:42 2026 by rpki-client