This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer File: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer (raw, json) Hash identifier: dhUXk/usJ4etUBbszVce37Dfj1He91Uu5jqp0GXalOM= Subject key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AC4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:22:37 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 2001:43f8:1430::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15044 (0x3ac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:22:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:70:6a:f5:68:94:f8:92:ea:de:c7:d4:ec: 76:c9:4b:8d:39:76:03:cf:f0:c8:09:be:af:89:1e: 7a:6a:67:5e:65:0a:d7:4a:57:3a:b9:a3:11:97:19: 08:db:62:2a:48:9f:49:a1:33:ee:53:24:db:f3:5e: 82:6a:bf:c3:8a:3c:d8:ba:87:f5:d3:85:08:5a:ec: 13:83:df:1c:d1:8a:9f:3a:60:4a:df:d5:58:e2:41: ae:10:3e:db:06:0e:c5:73:a5:2b:c0:43:0d:98:cc: 31:37:6a:51:fa:94:bc:19:ff:ec:30:e7:2f:f4:4e: e3:de:41:64:a3:cc:5c:2d:e1:7f:79:cc:2e:44:bb: 22:f4:35:1f:33:e2:4a:82:cf:42:33:b8:90:c7:59: cb:8b:82:ec:a6:b4:46:70:da:9b:7b:46:b3:3b:4f: d0:2a:9d:d0:e4:c3:87:22:59:63:c2:79:96:37:21: c9:31:44:50:71:cf:83:2b:1f:0c:68:5a:63:4b:b2: ce:de:d8:95:ad:0c:33:98:65:f4:00:6b:d5:b2:b6: 2f:3f:2b:2a:18:b2:40:cf:0e:49:42:3c:21:56:f9: 8d:b6:6a:27:09:cc:c2:51:c6:2f:03:f1:2f:dc:c3: 00:40:4f:5e:b6:6d:f9:41:64:db:b3:df:16:b1:f0: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft sbgp-ipAddrBlock: critical IPv6: 2001:43f8:1430::/48 Signature Algorithm: sha256WithRSAEncryption 21:65:93:aa:1a:c8:62:41:1e:45:df:c6:61:5c:db:86:6e:61: ac:b6:8a:01:90:56:55:2b:9b:76:3a:cc:f8:ba:3c:94:78:a4: 01:ae:60:48:dd:83:0b:47:1d:05:cf:9b:2d:9a:e3:a0:33:67: 86:70:a4:e9:73:01:cc:5e:83:d8:39:8a:1d:f3:70:71:42:dd: 77:fb:e8:73:f6:16:d3:3f:59:ec:f1:1d:28:bf:9b:5a:53:c6: 0b:e7:d8:89:b8:ce:15:fc:ab:27:df:e7:e2:62:f2:9f:f5:c3: 2b:84:a7:4a:27:aa:de:b7:b3:73:f5:d7:9e:45:a9:ab:4c:2c: 35:26:ea:3d:08:83:d7:b6:67:75:02:01:b3:f8:82:41:3a:34: ca:4a:19:0b:06:ff:cf:94:f4:c8:99:f0:ca:10:4f:f2:1b:7a: d3:23:6c:8c:bb:70:54:4d:67:db:9c:12:d0:da:36:3a:d9:28: e3:a2:6b:d9:55:fd:aa:14:ab:1d:09:57:ed:08:e5:f1:1c:c8: a1:a6:61:f7:5f:7f:4d:16:d0:42:ff:77:1a:2e:c5:8e:b8:1a: 38:cf:80:ee:12:77:f7:50:cb:ca:36:0a:55:99:a9:f2:89:8f: 3c:e5:cc:e2:eb:a3:78:ea:c8:cc:4d:a6:08:91:8f:5f:b5:c5: 7e:15:8f:64 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICOsQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjIyMzdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjcxQkI0QUYxMTAvBgNVBAUTKEY3MkFDNzZCQjA3RTQ0RERDN0FDNjBF NjYzMUYxQ0QyRURGMDM1REQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH23Bq9WiU+JLq3sfU7HbJS405dgPP8MgJvq+JHnpqZ15lCtdKVzq5oxGXGQjb YipIn0mhM+5TJNvzXoJqv8OKPNi6h/XThQha7BOD3xzRip86YErf1VjiQa4QPtsG DsVzpSvAQw2YzDE3alH6lLwZ/+ww5y/0TuPeQWSjzFwt4X95zC5EuyL0NR8z4kqC z0IzuJDHWcuLguymtEZw2pt7RrM7T9AqndDkw4ciWWPCeZY3IckxRFBxz4MrHwxo WmNLss7e2JWtDDOYZfQAa9Wyti8/KyoYskDPDklCPCFW+Y22aicJzMJRxi8D8S/c wwBAT162bflBZNuz3xax8K8dAgMBAAGjggLyMIIC7jAdBgNVHQ4EFgQU9yrHa7B+ RN3HrGDmYx8c0u3wNd0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3MUJCNC8wMkU2NDZGODA2MUQx MUVBQkMzODYyNTZGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzFCQjQvMDJFNjQ2RjgwNjFEMTFFQUJDMzg2MjU2RjhBRUEyMjgvOXlySGE3 Qi1STjNIckdEbVl4OGMwdTN3TmQwLm1mdDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACABQ/gUMDANBgkqhkiG9w0BAQsFAAOCAQEAIWWTqhrIYkEeRd/GYVzb hm5hrLaKAZBWVSubdjrM+Lo8lHikAa5gSN2DC0cdBc+bLZrjoDNnhnCk6XMBzF6D 2DmKHfNwcULdd/voc/YW0z9Z7PEdKL+bWlPGC+fYibjOFfyrJ9/n4mLyn/XDK4Sn Sieq3rezc/XXnkWpq0wsNSbqPQiD17ZndQIBs/iCQTo0ykoZCwb/z5T0yJnwyhBP 8ht60yNsjLtwVE1n25wS0No2Otko46Jr2VX9qhSrHQlX7Qjl8RzIoaZh919/TRbQ Qv93Gi7FjrgaOM+A7hJ391DLyjYKVZmp8omPPOXM4uujeOrIzE2mCJGPX7XFfhWP ZA== -----END CERTIFICATE-----Generated at Fri Feb 6 22:49:19 2026 by rpki-client