This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer File: FecT_XtiDOPJk1SgfTe6g3Eym0c.cer (raw, json) Hash identifier: 9kdKriStoKabE2OAePrzqH8vsmwOT69XmHtBeM1S1lw= Subject key identifier: 15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C84 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:27:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37793 AS: 329145 IP: 196.49.90.0/24 IP: 196.60.104.0/24 IP: 2001:43f8:1690::/47 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 11 Jan 2026 00:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15492 (0x3c84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:27:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369EC27AF, serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fd:52:ae:05:8b:27:ab:3d:04:b8:ff:09:f6: b0:a0:c5:5c:6f:48:cc:8b:49:cf:31:d3:00:45:79: 0f:f9:38:a3:58:d6:50:68:ec:37:bc:67:a5:e0:70: 21:d4:a9:68:6b:97:00:47:31:ab:60:ce:09:34:84: 3e:97:7e:54:64:27:d0:13:b0:49:8a:65:26:da:18: f0:c8:2f:75:ab:56:4d:a8:e7:77:11:4b:89:dd:b3: 19:e6:31:00:39:0b:c1:d5:46:90:b8:25:71:b1:57: 15:e8:a0:6c:b1:06:71:ff:49:47:d8:50:4b:c9:ec: 8d:b1:e9:21:1e:c3:71:ca:7c:f8:eb:b7:b5:48:2e: e6:ef:4d:63:b9:f6:f8:3f:6d:f9:57:9f:1d:ea:e2: 8e:15:c9:a9:1e:32:b6:30:61:57:b3:2d:96:d8:37: f3:7c:19:2d:46:db:eb:1e:00:2f:2d:b5:d8:7d:c5: 6e:6c:d2:e3:c2:f7:d3:7e:83:82:ea:fe:45:67:c3: 76:f3:f0:da:2d:5c:89:48:74:98:cb:87:74:08:77: bc:f6:94:e6:ed:9d:9b:cf:6c:be:87:b8:a5:d5:9d: b9:72:14:a6:9a:3a:96:16:cb:20:d1:b1:9f:65:9a: 9b:14:7b:f9:90:73:4c:43:17:fb:1c:62:c5:6c:39: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37793 329145 sbgp-ipAddrBlock: critical IPv4: 196.49.90.0/24 196.60.104.0/24 IPv6: 2001:43f8:1690::/47 Signature Algorithm: sha256WithRSAEncryption 3a:ca:a0:fd:84:6d:a5:95:16:66:04:e9:4e:18:0d:3d:0d:d3: 48:5d:51:14:9e:8c:02:5f:ea:65:b9:ee:10:ed:6b:93:b9:00: f9:86:db:7b:3d:a8:ab:ae:59:94:fe:5c:30:63:a7:d7:05:6a: 8f:62:cb:14:1c:74:5d:8d:fb:00:e7:fb:40:f9:e3:c7:44:6d: 55:4a:80:59:3f:10:a3:8c:6e:0e:f1:84:29:fa:e2:68:50:c4: 25:0e:51:e8:5e:e6:d4:8c:a3:1a:a8:85:f0:40:7d:0c:a7:f2: a3:7f:f6:e9:9b:e1:88:a2:2b:df:00:29:f7:f4:31:10:df:03: 98:ed:b3:ed:64:e6:a3:4c:e0:85:3a:f0:a3:f5:8a:5a:79:e6: 0b:43:91:01:b1:58:78:5f:ca:4d:5e:1a:71:16:92:4a:d5:eb: fa:12:cb:ea:d5:1f:53:a4:17:7c:17:94:ea:40:ef:00:ab:0d: 73:1e:f1:67:f5:20:b6:7f:a9:ca:2d:34:7d:d1:d6:99:5f:05: cc:7e:75:3d:68:6c:47:dc:96:db:8c:ca:af:d2:72:77:a7:55: 2e:1b:aa:d0:a4:f9:05:61:f0:28:b6:b7:43:4e:79:bd:5e:d5: df:20:45:aa:c3:7e:2a:b7:96:96:8e:ff:b7:bc:3d:7a:1d:61: f3:a4:a3:dd -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgICPIQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzI3MTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjlFQzI3QUYxMTAvBgNVBAUTKDE1RTcxM0ZEN0I2MjBDRTNDOTkzNTRB MDdEMzdCQTgzNzEzMjlCNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw/VKuBYsnqz0EuP8J9rCgxVxvSMyLSc8x0wBFeQ/5OKNY1lBo7De8Z6XgcCHU qWhrlwBHMatgzgk0hD6XflRkJ9ATsEmKZSbaGPDIL3WrVk2o53cRS4ndsxnmMQA5 C8HVRpC4JXGxVxXooGyxBnH/SUfYUEvJ7I2x6SEew3HKfPjrt7VILubvTWO59vg/ bflXnx3q4o4VyakeMrYwYVezLZbYN/N8GS1G2+seAC8ttdh9xW5s0uPC99N+g4Lq /kVnw3bz8NotXIlIdJjLh3QId7z2lObtnZvPbL6HuKXVnblyFKaaOpYWyyDRsZ9l mpsUe/mQc0xDF/scYsVsOY+DAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUFecT/Xti DOPJk1SgfTe6g3Eym0cwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5RUMyNy9GODA0QTFBQUREMUMx MUVEOUQ3Q0VEQ0QyRjZEOEMxRC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OUVDMjcvRjgwNEExQUFERDFDMTFFRDlEN0NFRENEMkY2RDhDMUQvRmVjVF9Y dGlET1BKazFTZ2ZUZTZnM0V5bTBjLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAk6ECAwUFuTA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxWgMEAMQ8 aDAPBAIAAjAJAwcBIAFD+BaQMA0GCSqGSIb3DQEBCwUAA4IBAQA6yqD9hG2llRZm BOlOGA09DdNIXVEUnowCX+plue4Q7WuTuQD5htt7PairrlmU/lwwY6fXBWqPYssU HHRdjfsA5/tA+ePHRG1VSoBZPxCjjG4O8YQp+uJoUMQlDlHoXubUjKMaqIXwQH0M p/Kjf/bpm+GIoivfACn39DEQ3wOY7bPtZOajTOCFOvCj9YpaeeYLQ5EBsVh4X8pN XhpxFpJK1ev6Esvq1R9TpBd8F5TqQO8Aqw1zHvFn9SC2f6nKLTR90daZXwXMfnU9 aGxH3JbbjMqv0nJ3p1UuG6rQpPkFYfAotrdDTnm9XtXfIEWqw34qt5aWjv+3vD16 HWHzpKPd -----END CERTIFICATE-----Generated at Fri Jan 9 16:57:33 2026 by rpki-client