This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer File: X-MxcqYILFSryRHxn1edSf2AmBQ.cer (raw, json) Hash identifier: hEIIwc9If+YB4wBMiRtOpWPpRK2+xGV/Uuz1KlNfELM= Subject key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BDD Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:02:28 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328839 IP: 102.220.68.0/22 IP: 2c0f:4600::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15325 (0x3bdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:02:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3690793AF, serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:ea:e6:29:dd:da:cf:e3:8c:24:8d:2e:9b: fa:a8:f0:82:0b:e5:6e:5f:87:cc:fe:ac:70:a3:aa: 8f:88:cb:d7:70:08:c2:45:81:52:2c:65:29:58:78: bd:c9:5f:d8:c6:b1:1a:be:39:0d:2f:6f:9f:3c:c3: 0c:8a:6b:a2:67:a3:5d:3a:bc:53:5b:eb:51:27:86: 01:b1:a4:0a:b3:b8:39:05:39:99:b9:bf:ee:ab:1c: 5b:09:ef:23:20:12:2c:d4:08:ae:d6:af:3a:cc:3f: 04:c4:60:59:03:fc:08:65:82:76:6c:c6:3d:2a:5d: 08:40:37:ad:df:6a:a4:bb:d7:35:ac:df:29:ea:c8: e8:60:76:d0:08:11:77:d6:27:3b:01:38:ba:81:8c: 5c:c5:7a:27:09:84:55:55:d2:b3:34:c7:d7:7a:d4: 5b:92:5a:d5:e3:fc:ac:9a:cf:ca:57:a5:30:99:fe: e1:6c:65:1a:29:82:26:da:1f:a9:20:87:95:ed:e7: 68:99:b6:6f:b9:6a:50:9b:b8:96:53:ab:8c:be:59: 8e:6b:15:97:4f:99:c3:36:81:1f:9f:d1:a2:e1:d9: 72:1d:cb:15:e4:ab:21:ff:49:ec:0d:59:8f:0b:93: e0:b1:3f:29:d7:4b:ba:19:ed:83:45:9f:34:de:c3: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328839 sbgp-ipAddrBlock: critical IPv4: 102.220.68.0/22 IPv6: 2c0f:4600::/32 Signature Algorithm: sha256WithRSAEncryption 6c:e2:8f:57:be:1e:a0:14:8e:b4:01:fd:10:5e:a8:1e:a4:9a: 71:56:c6:f2:a4:c5:21:b7:09:41:85:b0:a9:86:22:e9:d1:cd: 46:a9:8b:12:4c:e5:8d:66:18:36:bf:8a:40:8d:2a:75:a4:9c: 54:61:3e:74:f7:46:dd:93:a1:9a:37:a3:49:c5:d6:f2:f2:7a: 29:c7:af:38:58:fc:a2:67:8a:9f:60:a8:82:36:92:cf:b3:5c: b1:df:65:8a:94:78:69:e9:d0:9b:8b:3f:4a:b4:9f:8e:4d:00: fb:b6:6b:cd:fe:53:f6:1b:9b:25:23:a3:b9:aa:68:d2:ff:bc: 8c:34:42:6d:67:67:76:90:fb:a1:37:fe:89:a8:ea:79:b9:36: 86:2e:83:79:87:74:24:7c:57:da:85:ad:de:06:fa:c4:0d:a2: fe:cd:60:b3:e5:b3:06:33:a0:ed:6a:98:cd:bb:ff:60:cc:03: d8:e7:62:66:8a:7d:06:27:71:6e:fe:3f:b9:93:3d:39:c0:d2: b7:fc:5f:c0:e3:77:02:44:ff:cb:06:4c:89:4a:4a:87:4a:3c: 89:71:bb:ac:24:1a:be:7e:bb:6a:f2:98:37:c9:3e:c2:fb:66: 73:15:d0:b7:16:70:5e:8b:cb:ff:cc:09:86:a9:46:45:82:cd: 36:67:bf:ea -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO90wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzAyMjhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjkwNzkzQUYxMTAvBgNVBAUTKDVGRTMzMTcyQTYwODJDNTRBQkM5MTFG MTlGNTc5RDQ5RkQ4MDk4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjE+rmKd3az+OMJI0um/qo8IIL5W5fh8z+rHCjqo+Iy9dwCMJFgVIsZSlYeL3J X9jGsRq+OQ0vb588wwyKa6Jno106vFNb61EnhgGxpAqzuDkFOZm5v+6rHFsJ7yMg EizUCK7WrzrMPwTEYFkD/AhlgnZsxj0qXQhAN63faqS71zWs3ynqyOhgdtAIEXfW JzsBOLqBjFzFeicJhFVV0rM0x9d61FuSWtXj/Kyaz8pXpTCZ/uFsZRopgibaH6kg h5Xt52iZtm+5alCbuJZTq4y+WY5rFZdPmcM2gR+f0aLh2XIdyxXkqyH/SewNWY8L k+CxPynXS7oZ7YNFnzTew1xXAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUX+MxcqYI LFSryRHxn1edSf2AmBQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5MDc5My9BMjUyQUFDOEE0MjQx MUVCQTEzNUQyNkVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTA3OTMvQTI1MkFBQzhBNDI0MTFFQkExMzVEMjZFRjhBRUEyMjgvWC1NeGNx WUlMRlNyeVJIeG4xZWRTZjJBbUJRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBIcwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3EQwDQQCAAIwBwMF ACwPRgAwDQYJKoZIhvcNAQELBQADggEBAGzij1e+HqAUjrQB/RBeqB6kmnFWxvKk xSG3CUGFsKmGIunRzUapixJM5Y1mGDa/ikCNKnWknFRhPnT3Rt2ToZo3o0nF1vLy einHrzhY/KJnip9gqII2ks+zXLHfZYqUeGnp0JuLP0q0n45NAPu2a83+U/YbmyUj o7mqaNL/vIw0Qm1nZ3aQ+6E3/omo6nm5NoYug3mHdCR8V9qFrd4G+sQNov7NYLPl swYzoO1qmM27/2DMA9jnYmaKfQYncW7+P7mTPTnA0rf8X8DjdwJE/8sGTIlKSodK PIlxu6wkGr5+u2rymDfJPsL7ZnMV0LcWcF6Ly//MCYapRkWCzTZnv+o= -----END CERTIFICATE-----Generated at Mon Jan 12 01:46:33 2026 by rpki-client