This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer File: nxc4PrZn5Ue6AM-3-RT0KExYScw.cer (raw, json) Hash identifier: sK67ZOwBCLqm5DGOhL524AU5iaj376ekBkfH6v8Ls0o= Subject key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38B5 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:03:00 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37474 AS: 37663 AS: 37668 AS: 37699 -- 37701 AS: 37735 AS: 329234 IP: 196.10.52.0/22 IP: 196.49.100.0/24 IP: 196.49.114.0/23 IP: 196.60.96.0/23 IP: 196.60.120.0/24 IP: 196.223.15.0/24 IP: 196.223.22.0/23 IP: 196.223.30.0/23 IP: 2001:43f8:1f0:: -- 2001:43f8:1f5:ffff:ffff:ffff:ffff:ffff IP: 2001:43f8:690::/47 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 10 Jan 2026 15:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14517 (0x38b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:03:00 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:b8:1a:ed:a7:50:64:c8:07:3d:19:71:32: 28:64:be:89:20:17:80:b5:73:f6:8b:d5:66:80:8c: 67:ce:36:86:2b:e0:80:d5:90:18:cb:7a:e5:49:3b: 53:db:97:f4:52:4c:31:22:2e:94:5b:40:53:ae:25: 61:15:45:5e:15:fe:ce:8b:f3:e5:46:90:1c:fd:4b: 2e:de:bd:0a:97:20:e8:73:fc:1e:63:da:93:35:35: a4:16:45:58:d3:62:46:e5:8e:6f:48:be:fe:77:c5: 4d:0a:f8:9a:b4:63:a2:8e:f4:73:1c:63:ca:5e:6e: bf:e7:16:03:dc:95:2d:ec:0b:3c:63:5e:7c:7d:b2: 68:41:d3:35:b0:8e:04:20:d2:46:ce:f0:81:6f:e6: 42:72:ea:53:89:4a:be:cb:89:aa:19:5b:7e:fe:4e: ac:c5:35:a4:55:48:f0:55:37:f0:04:01:d9:0b:7d: 4c:ca:f6:8d:fa:e7:95:27:4f:6d:15:4e:02:23:4a: 0d:2c:27:d9:8d:e2:8a:9b:c8:97:6d:b0:a7:4f:71: 06:25:e7:62:ba:7c:b4:a1:74:ac:88:c2:e4:e7:e8: c2:9c:70:42:54:99:86:cd:67:69:73:aa:c9:02:6c: 92:03:8a:9a:ea:15:41:19:72:7d:81:01:8b:72:cb: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37474 37663 37668 37699-37701 37735 329234 sbgp-ipAddrBlock: critical IPv4: 196.10.52.0/22 196.49.100.0/24 196.49.114.0/23 196.60.96.0/23 196.60.120.0/24 196.223.15.0/24 196.223.22.0/23 196.223.30.0/23 IPv6: 2001:43f8:1f0::-2001:43f8:1f5:ffff:ffff:ffff:ffff:ffff 2001:43f8:690::/47 Signature Algorithm: sha256WithRSAEncryption 57:8e:be:0d:97:ee:b6:f6:32:a1:71:c4:b4:e2:91:16:ab:05: 45:61:8b:20:61:e4:97:66:59:81:df:f8:15:0b:72:c4:f5:4c: e2:48:84:4f:64:54:c4:10:f0:74:24:6f:d8:76:54:70:40:e1: 40:cd:de:71:16:86:f8:b0:dd:41:c4:28:53:a3:f1:2c:bd:04: 6b:22:2a:f8:3d:ed:e8:27:66:e4:97:32:75:d6:82:61:31:04: 28:b7:7b:80:6a:76:ca:47:2c:35:a5:e6:82:e3:e5:23:94:5c: 9a:80:ed:ec:34:66:7c:a5:ed:4e:99:1b:c8:0e:41:4e:44:6c: 61:47:81:4f:0a:3a:57:c0:64:77:7a:bd:45:cc:1c:e3:9f:57: c1:fb:f5:b1:91:ed:c0:66:8a:76:f7:50:33:5f:d3:9c:f7:d0: 61:c2:cf:8f:50:cb:2b:26:f2:6c:0a:6b:c0:ce:28:6d:50:a7: c2:d9:bd:f5:68:ed:0c:00:15:6f:a7:c7:95:2b:ff:48:55:69: 07:12:b3:ec:d7:39:51:d2:61:05:71:a3:51:73:1a:7c:b7:a0: 7c:a7:1b:6a:ba:4a:bd:5c:fd:ad:c2:eb:29:fb:74:32:64:15: 2b:bb:92:04:24:62:ee:93:3e:c7:e4:38:46:f0:e3:48:c9:e9: 65:1c:7e:04 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgICOLUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTAzMDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU0OUIxQUYxMTAvBgNVBAUTKDlGMTczODNFQjY2N0U1NDdCQTAwQ0ZC N0Y5MTRGNDI4NEM1ODQ5Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2tLga7adQZMgHPRlxMihkvokgF4C1c/aL1WaAjGfONoYr4IDVkBjLeuVJO1Pb l/RSTDEiLpRbQFOuJWEVRV4V/s6L8+VGkBz9Sy7evQqXIOhz/B5j2pM1NaQWRVjT Ykbljm9Ivv53xU0K+Jq0Y6KO9HMcY8pebr/nFgPclS3sCzxjXnx9smhB0zWwjgQg 0kbO8IFv5kJy6lOJSr7LiaoZW37+TqzFNaRVSPBVN/AEAdkLfUzK9o3655UnT20V TgIjSg0sJ9mN4oqbyJdtsKdPcQYl52K6fLShdKyIwuTn6MKccEJUmYbNZ2lzqskC bJIDiprqFUEZcn2BAYtyyx1RAgMBAAGjggN6MIIDdjAdBgNVHQ4EFgQUnxc4PrZn 5Ue6AM+3+RT0KExYScwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NDlCMS9ERjc4OEM5ODU2MTMx MUU1QjFBMEUzNjBGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhBRUEyMjgvbnhjNFBy Wm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA6BggrBgEFBQcBCAEB/wQrMCmgJzAl AgMAkmICAwCTHwIDAJMkMAoCAwCTQwIDAJNFAgMAk2cCAwUGEjBuBggrBgEFBQcB BwEB/wRfMF0wNgQCAAEwMAMEAsQKNAMEAMQxZAMEAcQxcgMEAcQ8YAMEAMQ8eAME AMTfDwMEAcTfFgMEAcTfHjAjBAIAAjAdMBIDBwQgAUP4AfADBwEgAUP4AfQDBwEg AUP4BpAwDQYJKoZIhvcNAQELBQADggEBAFeOvg2X7rb2MqFxxLTikRarBUVhiyBh 5JdmWYHf+BULcsT1TOJIhE9kVMQQ8HQkb9h2VHBA4UDN3nEWhviw3UHEKFOj8Sy9 BGsiKvg97egnZuSXMnXWgmExBCi3e4BqdspHLDWl5oLj5SOUXJqA7ew0Znyl7U6Z G8gOQU5EbGFHgU8KOlfAZHd6vUXMHOOfV8H79bGR7cBminb3UDNf05z30GHCz49Q yysm8mwKa8DOKG1Qp8LZvfVo7QwAFW+nx5Ur/0hVaQcSs+zXOVHSYQVxo1FzGny3 oHynG2q6Sr1c/a3C6yn7dDJkFSu7kgQkYu6TPsfkOEbw40jJ6WUcfgQ= -----END CERTIFICATE-----Generated at Fri Jan 9 00:51:41 2026 by rpki-client