This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer File: KxftsiWoqa1OodSC-tfzt4JwvaQ.cer (raw, json) Hash identifier: hVagcdu1v+T/KQnfFHbH0JwYCNd9hXAepXtDjAZK5cM= Subject key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AE3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:26:48 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328978 IP: 102.219.23.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 15 Jan 2026 00:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15075 (0x3ae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:26:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:2c:ca:ab:d4:80:1e:2a:62:4e:af:42:b1: 75:25:5b:c6:23:d6:5a:04:59:cf:f5:5c:2c:c1:53: f2:e0:5c:6d:10:b6:3b:1c:22:dc:5c:21:fc:02:66: 2b:c1:49:71:57:5b:36:64:17:da:01:06:c2:f9:70: f3:c0:b1:95:d8:95:cd:d4:fd:d5:75:2b:a5:57:05: 55:90:b1:de:3a:e2:3b:c0:2a:3a:c1:73:b9:b8:fb: 2f:76:37:bf:f7:f3:f9:7a:a2:fe:de:6d:c7:b4:31: d4:1a:60:51:6e:87:43:aa:58:32:d5:f9:a5:33:cc: c9:94:16:de:c8:c1:33:e3:3e:3c:79:a0:ce:30:9c: 62:4d:9e:18:44:c4:11:6b:ce:a8:db:32:0b:d6:60: b6:06:aa:e3:5e:32:e7:a8:4e:59:c1:00:ad:0d:af: a9:6a:44:8a:51:30:55:99:64:15:26:9f:8b:37:0b: e7:17:e9:08:76:e7:d8:e7:19:db:4e:40:c2:6e:9b: 8d:47:4a:72:ee:84:10:05:70:cb:04:c1:f1:8c:a9: 56:37:b5:7b:9a:3c:5d:98:5c:86:19:39:5b:e3:a2: c4:df:a8:d8:30:8d:e2:c5:97:1d:4b:3b:62:0a:b9: 0c:50:b0:e1:16:6c:6e:7b:8a:7b:10:f2:cd:5a:0f: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328978 sbgp-ipAddrBlock: critical IPv4: 102.219.23.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e5:83:93:37:e8:94:2e:e0:54:5a:03:22:96:2e:9c:15:81: 08:27:ce:fa:9f:3e:f9:6a:0f:51:c3:7c:ce:a4:dd:f9:27:87: 97:e0:23:4d:1c:12:77:2d:d9:c7:9d:1f:09:b6:b9:23:0b:59: b3:9a:83:de:76:7e:92:d7:db:20:15:c3:a1:c6:74:ef:04:5d: f2:73:20:85:56:9a:88:07:dd:31:c5:b4:0f:f9:10:d6:b1:6b: d2:65:18:cc:36:dd:37:4f:cd:d2:1b:05:de:df:e6:f0:40:d5: 2c:17:bf:04:e0:d3:cc:f0:72:3f:dd:ba:0f:5c:fc:28:5c:56: c5:90:b9:01:7e:57:43:2d:72:be:9e:bc:67:df:35:bd:a6:b5: 8d:14:12:59:20:25:3d:f9:8c:f6:7e:a2:4d:28:85:73:b1:c2: 07:72:be:11:21:54:38:90:4e:79:1c:a1:7a:d6:c8:3f:37:1f: 0f:fe:63:7d:d3:7e:53:4b:3c:60:1d:a8:da:49:c4:ca:61:d1: af:cb:e8:e3:76:77:44:a9:e4:d3:e3:06:6c:1c:cb:54:6f:ec: 2f:4e:f8:6a:19:3b:cc:55:78:a4:e2:ac:c4:c6:97:b2:75:b4: 9c:eb:79:8f:17:fe:2d:8d:b5:7d:e6:07:df:de:f2:fc:18:3d: 90:0a:d2:67 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICOuMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjI2NDhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc0NkVCQUYxMTAvBgNVBAUTKDJCMTdFREIyMjVBOEE5QUQ0RUExRDQ4 MkZBRDdGM0I3ODI3MEJEQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC87izKq9SAHipiTq9CsXUlW8Yj1loEWc/1XCzBU/LgXG0QtjscItxcIfwCZivB SXFXWzZkF9oBBsL5cPPAsZXYlc3U/dV1K6VXBVWQsd464jvAKjrBc7m4+y92N7/3 8/l6ov7ebce0MdQaYFFuh0OqWDLV+aUzzMmUFt7IwTPjPjx5oM4wnGJNnhhExBFr zqjbMgvWYLYGquNeMueoTlnBAK0Nr6lqRIpRMFWZZBUmn4s3C+cX6Qh259jnGdtO QMJum41HSnLuhBAFcMsEwfGMqVY3tXuaPF2YXIYZOVvjosTfqNgwjeLFlx1LO2IK uQxQsOEWbG57insQ8s1aD2z7AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUKxftsiWo qa1OodSC+tfzt4JwvaQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NDZFQi8wQzU2NEM1RTVFNDcx MUVDQjlBMUFFRDk1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzQ2RUIvMEM1NjRDNUU1RTQ3MTFFQ0I5QTFBRUQ5NUE0MEQ1NzcvS3hmdHNp V29xYTFPb2RTQy10Znp0NEp3dmFRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBRIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2xcwDQYJKoZIhvcN AQELBQADggEBAJPlg5M36JQu4FRaAyKWLpwVgQgnzvqfPvlqD1HDfM6k3fknh5fg I00cEnct2cedHwm2uSMLWbOag952fpLX2yAVw6HGdO8EXfJzIIVWmogH3THFtA/5 ENaxa9JlGMw23TdPzdIbBd7f5vBA1SwXvwTg08zwcj/dug9c/ChcVsWQuQF+V0Mt cr6evGffNb2mtY0UElkgJT35jPZ+ok0ohXOxwgdyvhEhVDiQTnkcoXrWyD83Hw/+ Y33TflNLPGAdqNpJxMph0a/L6ON2d0Sp5NPjBmwcy1Rv7C9O+GoZO8xVeKTirMTG l7J1tJzreY8X/i2NtX3mB9/e8vwYPZAK0mc= -----END CERTIFICATE-----Generated at Tue Jan 13 05:51:58 2026 by rpki-client