This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer File: xwJ5nqS9Xbo-09BppxkblBtad5o.cer (raw, json) Hash identifier: IYMjk3cMOIXMp1ZMtGCnO9kLxktc0Nx7t38tstNj0L4= Subject key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F05 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:09:18 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37518 IP: 196.48.0.0/16 IP: 196.56.0.0/14 IP: 196.196.0.0/14 IP: 196.240.0.0 -- 196.245.255.255 IP: 196.247.0.0/16 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16133 (0x3f05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:09:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:75:b6:ce:8d:4f:1a:7b:e1:d8:8b:17:f0: 3b:d0:5c:9b:5a:62:20:47:cf:76:8b:c4:c8:91:d2: 03:d8:4e:be:b7:a5:15:2f:89:0a:f8:88:8d:e5:c5: b6:2d:68:61:a5:74:d8:07:11:0f:0b:85:0a:4b:46: 06:0f:6c:c0:7b:be:98:86:7a:de:56:22:c7:e7:7f: 3b:42:7b:8f:4f:cf:bf:eb:57:bc:17:8a:1d:74:4b: 86:3e:81:1f:af:0d:ce:ec:6a:cd:30:be:70:ae:bd: 01:47:5c:32:e0:d6:aa:24:37:0f:77:a2:33:6b:e3: e0:7b:2a:30:47:f6:ec:2c:49:a4:08:f0:9f:9a:56: 7c:58:7a:31:ec:32:d9:83:77:b1:ac:8e:04:1b:ee: 5c:05:01:50:f2:e8:aa:3c:40:c6:b1:2e:bd:b0:46: 45:cb:41:db:97:ea:19:ae:4d:3d:16:b8:52:68:ed: 88:10:f6:4e:3c:d6:48:76:d5:59:72:2d:43:b6:ac: 26:d4:56:27:a0:da:a8:49:f6:5c:0f:36:80:a3:85: 35:40:5f:41:e0:4c:45:98:34:8c:0b:9d:8e:b5:07: 97:8a:6a:8b:d8:b3:ac:45:d7:19:fa:6d:f2:a2:e6: fd:f0:1a:31:fd:40:52:d7:5f:82:c9:ce:89:e7:e8: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37518 sbgp-ipAddrBlock: critical IPv4: 196.48.0.0/16 196.56.0.0/14 196.196.0.0/14 196.240.0.0-196.245.255.255 196.247.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:3f:f7:e1:71:5b:fd:68:39:f0:1b:ee:31:bb:0a:23:70:09: 9b:d4:8e:6b:2d:54:18:03:97:d4:40:38:cd:b4:71:cf:ed:1c: e3:a4:fa:f5:8f:af:16:40:b1:9c:b4:05:e4:41:34:ec:b1:a6: f6:a4:98:56:69:f2:86:ac:42:99:e9:8b:b9:dd:2b:1e:14:e3: 46:a1:42:ba:26:e9:70:b2:4d:8d:50:01:0e:5c:f9:88:76:4e: 9d:49:49:78:3a:4c:62:f5:22:12:d5:01:e3:e1:4a:ef:c0:52: c2:9f:1f:6e:6f:94:b2:3a:93:e1:6e:16:ef:b8:3c:29:a5:d0: 0c:06:62:10:28:2c:97:c9:83:1b:de:65:2f:90:96:41:27:e9: 26:87:ba:42:72:29:54:34:90:58:9a:d1:97:21:f8:78:17:4d: 29:c2:c4:f3:81:03:a6:1b:7d:03:9e:67:35:cc:dd:b5:3c:40: 43:56:96:38:36:7f:7e:c7:a5:73:c3:ab:bf:65:b3:9a:0c:82: 28:9d:9b:40:a5:ba:ba:9d:2d:6a:64:49:54:4e:ee:72:85:fb: e1:83:bd:98:1f:d2:80:9d:ad:98:49:a1:1e:75:e8:2b:6f:cb: 8f:d9:05:f1:52:50:3f:ab:22:63:e2:3c:c0:6c:03:96:99:8b: 64:6a:94:df -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICPwUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTA5MThaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY2MDM0QUYxMTAvBgNVBAUTKEM3MDI3OTlFQTRCRDVEQkEzRUQzRDA2 OUE3MTkxQjk0MUI1QTc3OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA1HW2zo1PGnvh2IsX8DvQXJtaYiBHz3aLxMiR0gPYTr63pRUviQr4iI3lxbYt aGGldNgHEQ8LhQpLRgYPbMB7vpiGet5WIsfnfztCe49Pz7/rV7wXih10S4Y+gR+v Dc7sas0wvnCuvQFHXDLg1qokNw93ojNr4+B7KjBH9uwsSaQI8J+aVnxYejHsMtmD d7GsjgQb7lwFAVDy6Ko8QMaxLr2wRkXLQduX6hmuTT0WuFJo7YgQ9k481kh21Vly LUO2rCbUVieg2qhJ9lwPNoCjhTVAX0HgTEWYNIwLnY61B5eKaovYs6xF1xn6bfKi 5v3wGjH9QFLXX4LJzonn6KL3AgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUxwJ5nqS9 Xbo+09BppxkblBtad5owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNjAzNC9EOTE2NzU4QTkwRkMx MUVBOUQ4MTMwNkVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjYwMzQvRDkxNjc1OEE5MEZDMTFFQTlEODEzMDZFRjhBRUEyMjgveHdKNW5x UzlYYm8tMDlCcHB4a2JsQnRhZDVvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAko4wOQYIKwYBBQUHAQcBAf8EKjAoMCYEAgABMCADAwDEMAMDAsQ4AwMCxMQw CgMDBMTwAwMBxPQDAwDE9zANBgkqhkiG9w0BAQsFAAOCAQEAnz/34XFb/Wg58Bvu MbsKI3AJm9SOay1UGAOX1EA4zbRxz+0c46T69Y+vFkCxnLQF5EE07LGm9qSYVmny hqxCmemLud0rHhTjRqFCuibpcLJNjVABDlz5iHZOnUlJeDpMYvUiEtUB4+FK78BS wp8fbm+UsjqT4W4W77g8KaXQDAZiECgsl8mDG95lL5CWQSfpJoe6QnIpVDSQWJrR lyH4eBdNKcLE84EDpht9A55nNczdtTxAQ1aWODZ/fselc8Orv2WzmgyCKJ2bQKW6 up0tamRJVE7ucoX74YO9mB/SgJ2tmEmhHnXoK2/Lj9kF8VJQP6siY+I8wGwDlpmL ZGqU3w== -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:03 2026 by rpki-client