This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer File: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer (raw, json) Hash identifier: wN8JRqrlielHYa6hkPzdFJVxKUjMW8e4yBiU8xNzP4k= Subject key identifier: 0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3819 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:34:36 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328227 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 11:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14361 (0x3819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:34:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3626CB6AF, serialNumber=0F595081812DF1597E84EC11464E64C187EE3808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:5a:84:85:90:80:f2:44:7b:0e:68:20:39: 0a:bc:95:d5:e3:8a:c7:ce:7b:db:9d:e2:31:be:16: 9a:8a:f4:21:b9:01:b1:ee:cd:5a:70:73:bc:49:cc: 9b:3e:c2:33:a2:d7:55:1d:15:87:59:13:38:87:c1: a3:27:73:d4:7b:4e:4c:c3:fd:0d:e5:56:6c:6d:d7: 29:a2:5a:fb:12:79:1c:83:de:03:70:5f:60:1e:0e: fa:81:90:21:33:e7:47:3e:76:50:2f:eb:28:20:c5: 2e:32:52:d3:ef:9f:cf:89:10:71:9a:ad:7e:ca:7c: ee:c3:33:2e:d8:66:59:a2:a8:e6:6e:d0:5d:a3:24: e1:01:d9:c7:c8:2c:e2:8e:1c:f1:c9:ed:85:57:92: 5c:4f:3b:bf:d8:1b:8b:5d:26:3c:bb:ce:d4:0b:8f: 1b:dc:fa:b3:5d:11:9e:c0:0c:82:97:91:b4:95:f3: 0f:f2:e4:af:0b:f8:b5:fe:77:b5:98:4b:b2:30:e5: c4:3b:83:21:49:00:f7:bb:90:df:e4:f3:1e:29:3f: ee:f5:12:57:9e:d0:f3:66:5c:0b:2b:6b:07:1c:38: ed:c0:78:05:52:97:88:36:2f:07:7b:0f:f5:b0:ae: 06:f2:9c:cd:3e:ee:29:a7:3b:de:04:eb:93:e0:07: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328227 Signature Algorithm: sha256WithRSAEncryption ad:99:82:e1:98:25:2c:1b:0a:aa:bf:54:8e:6d:af:29:5d:41: 4b:14:8b:13:cb:65:26:8e:14:e4:dd:fa:82:5f:8b:08:3f:0e: 0c:13:b8:6b:43:cb:77:25:13:fd:10:17:70:23:eb:1c:05:7e: f6:cc:6c:ab:e3:3c:aa:25:74:e8:97:55:d8:af:0a:d6:39:f7: e4:35:92:65:be:db:aa:be:dd:cf:02:8e:96:14:dd:83:3f:c1: 8c:89:9f:ab:ce:a7:d3:90:53:5c:3f:cd:4a:41:8a:d9:ad:2f: 5b:ed:e9:23:59:92:c2:fe:0b:d3:e5:d7:2a:6a:9d:03:61:49: 71:e0:3e:9d:83:4f:d4:c8:35:8e:88:0b:40:f6:b0:49:59:f1: 63:aa:61:e8:c7:b6:b8:9a:0a:00:ff:bd:4a:97:be:f2:0e:ef: bd:9b:e7:91:ff:92:e1:09:78:47:bb:14:fe:6c:17:f3:25:9d: 34:28:4d:38:23:db:b4:1e:41:aa:50:6f:96:4a:72:74:3d:6c: 26:e5:cc:5e:e3:49:8a:8e:0e:b1:a9:cf:b5:e5:f4:b9:9b:14: 6f:df:05:e5:ad:38:19:f3:84:08:a5:6e:48:e8:f8:f4:84:d8: 89:a2:c3:9f:31:5b:e1:d0:78:f5:b4:0b:dd:58:63:96:9e:d5: c0:1c:5b:e3 -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgICOBkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDM0MzZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjI2Q0I2QUYxMTAvBgNVBAUTKDBGNTk1MDgxODEyREYxNTk3RTg0RUMx MTQ2NEU2NEMxODdFRTM4MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1xlqEhZCA8kR7DmggOQq8ldXjisfOe9ud4jG+FpqK9CG5AbHuzVpwc7xJzJs+ wjOi11UdFYdZEziHwaMnc9R7TkzD/Q3lVmxt1ymiWvsSeRyD3gNwX2AeDvqBkCEz 50c+dlAv6yggxS4yUtPvn8+JEHGarX7KfO7DMy7YZlmiqOZu0F2jJOEB2cfILOKO HPHJ7YVXklxPO7/YG4tdJjy7ztQLjxvc+rNdEZ7ADIKXkbSV8w/y5K8L+LX+d7WY S7Iw5cQ7gyFJAPe7kN/k8x4pP+71Elee0PNmXAsrawccOO3AeAVSl4g2Lwd7D/Ww rgbynM0+7imnO94E65PgB3DvAgMBAAGjggLqMIIC5jAdBgNVHQ4EFgQUD1lQgYEt 8Vl+hOwRRk5kwYfuOAgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNkNCNi9GNTEyMzk2ODhCRDgx MUVCQUVFMjhBMzdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjZDQjYvRjUxMjM5Njg4QkQ4MTFFQkFFRTI4QTM3RjhBRUEyMjgvRDFsUWdZ RXQ4VmwtaE93UlJrNWt3WWZ1T0FnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAiMwDQYJKoZIhvcNAQELBQADggEBAK2ZguGYJSwbCqq/VI5tryldQUsUixPL ZSaOFOTd+oJfiwg/DgwTuGtDy3clE/0QF3Aj6xwFfvbMbKvjPKoldOiXVdivCtY5 9+Q1kmW+26q+3c8CjpYU3YM/wYyJn6vOp9OQU1w/zUpBitmtL1vt6SNZksL+C9Pl 1ypqnQNhSXHgPp2DT9TINY6IC0D2sElZ8WOqYejHtriaCgD/vUqXvvIO772b55H/ kuEJeEe7FP5sF/MlnTQoTTgj27QeQapQb5ZKcnQ9bCblzF7jSYqODrGpz7Xl9Lmb FG/fBeWtOBnzhAilbkjo+PSE2Imiw58xW+HQePW0C91YY5ae1cAcW+M= -----END CERTIFICATE-----Generated at Mon Jan 12 15:13:38 2026 by rpki-client