This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer File: U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer (raw, json) Hash identifier: 4Rr33cCDTTV+0uBYodtQwaccA8vrnu0Dtjb49tPzuxg= Subject key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C21 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:12:54 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 25818 AS: 37072 IP: 41.202.32.0/19 IP: 102.64.96.0/20 IP: 102.177.112.0/20 IP: 196.1.144.0/20 IP: 196.32.8.0/21 IP: 197.231.160.0/21 IP: 2001:4210::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15393 (0x3c21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:12:54 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:04:05:94:70:26:00:51:ec:dc:f1:bb:35: c7:20:ef:f0:75:9f:9d:6a:8c:6d:08:43:f0:51:46: c1:f5:1b:59:3c:a1:f7:a3:53:be:d8:02:d9:03:ad: 96:34:27:67:05:34:1a:f7:27:07:8c:56:da:1c:00: 82:10:95:0f:d7:69:01:f7:9f:11:e1:1b:90:27:31: b8:ec:e2:49:31:0c:f4:9c:55:c2:32:b5:a7:57:38: 9a:74:e4:cc:f9:8c:c4:dd:e2:b2:a7:66:e0:b0:28: 46:aa:30:d8:0a:b2:8b:fe:b1:2e:27:05:26:86:bb: 58:1f:7b:fc:3a:71:47:bc:4f:78:55:e0:94:c6:af: b3:49:21:84:ff:7d:1c:f1:0b:d0:4d:5d:8e:97:91: d2:7b:b6:e7:ec:88:06:3e:50:73:75:ae:c1:fa:b3: 33:96:a8:9c:82:2e:b8:5d:64:47:9b:f9:3d:84:5d: 6b:12:89:26:aa:a8:df:cc:c1:05:3c:c5:7d:db:fa: 79:1c:44:51:c3:10:4e:8a:98:f3:30:b6:61:53:88: 68:0c:15:f9:9e:89:8c:6f:2a:63:10:1c:f6:56:30: 08:47:70:c5:48:9d:c2:6a:7a:bc:6d:2f:12:13:02: 04:18:b5:6d:65:16:d7:ff:4d:87:1b:cd:7f:05:2c: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 25818 37072 sbgp-ipAddrBlock: critical IPv4: 41.202.32.0/19 102.64.96.0/20 102.177.112.0/20 196.1.144.0/20 196.32.8.0/21 197.231.160.0/21 IPv6: 2001:4210::/32 Signature Algorithm: sha256WithRSAEncryption 6a:3b:94:98:f5:e7:50:38:94:d1:ec:ae:b8:22:f1:28:96:a6: 3c:11:fd:c4:4b:ad:7e:6e:c8:f9:38:41:63:9a:ef:34:5a:23: fb:60:f7:18:c9:82:01:fe:7c:9c:54:d4:59:54:03:c9:e7:2f: 33:98:6e:37:c0:62:e0:83:8d:2c:2b:d7:b3:79:48:0c:53:9a: af:96:ff:27:d7:9f:aa:1f:53:8c:76:84:95:06:a4:5c:c2:20: 73:60:1b:dd:e7:3e:65:1d:20:9a:24:db:e4:d7:8e:12:dc:31: ef:89:53:77:8a:40:d0:a8:84:ef:63:e1:19:f7:b8:de:03:c9: 7f:51:0e:7b:08:8c:a6:60:66:9c:83:8b:9e:ab:f4:fd:d5:6f: d4:9b:65:28:55:38:63:85:00:a6:4d:05:c3:a8:a6:83:f1:38: 8a:77:a0:1e:4d:95:a8:4f:dc:b9:4b:b3:d3:dc:27:64:d7:74: 87:5e:db:e0:fa:69:32:17:87:3e:de:c8:26:1b:9d:8c:02:a8: 1b:8d:91:ed:47:10:20:c3:3a:2c:65:84:25:7f:9b:61:03:60: 2f:6f:37:a7:46:1b:c3:15:5a:fa:39:72:0a:a9:bc:80:3a:33: 69:ef:81:ba:74:c1:ff:26:ce:a0:26:de:3c:54:80:6b:3f:01: 4c:5c:57:71 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgICPCEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzEyNTRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk2RTVGQUYxMTAvBgNVBAUTKDUzNzVDRjRDQTE2NDNCMDhDMzQxQkRB NzlEOEJFMTA1QkRDM0M0OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOzAQFlHAmAFHs3PG7Nccg7/B1n51qjG0IQ/BRRsH1G1k8ofejU77YAtkDrZY0 J2cFNBr3JweMVtocAIIQlQ/XaQH3nxHhG5AnMbjs4kkxDPScVcIytadXOJp05Mz5 jMTd4rKnZuCwKEaqMNgKsov+sS4nBSaGu1gfe/w6cUe8T3hV4JTGr7NJIYT/fRzx C9BNXY6XkdJ7tufsiAY+UHN1rsH6szOWqJyCLrhdZEeb+T2EXWsSiSaqqN/MwQU8 xX3b+nkcRFHDEE6KmPMwtmFTiGgMFfmeiYxvKmMQHPZWMAhHcMVIncJqerxtLxIT AgQYtW1lFtf/TYcbzX8FLKXtAgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUU3XPTKFk OwjDQb2nnYvhBb3DxIswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5NkU1Ri8zREEzRDMyMDE4OTcx MUVEOEM5MzZCRDJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTZFNUYvM0RBM0QzMjAxODk3MTFFRDhDOTM2QkQyRjEyMjI0NjgvVTNYUFRL RmtPd2pEUWIybm5ZdmhCYjNEeElzLm1mdDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ AgJk2gIDAJDQMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFKcogAwQEZkBg AwQEZrFwAwQExAGQAwQDxCAIAwQDxeegMA0EAgACMAcDBQAgAUIQMA0GCSqGSIb3 DQEBCwUAA4IBAQBqO5SY9edQOJTR7K64IvEolqY8Ef3ES61+bsj5OEFjmu80WiP7 YPcYyYIB/nycVNRZVAPJ5y8zmG43wGLgg40sK9ezeUgMU5qvlv8n15+qH1OMdoSV BqRcwiBzYBvd5z5lHSCaJNvk144S3DHviVN3ikDQqITvY+EZ97jeA8l/UQ57CIym YGacg4ueq/T91W/Um2UoVThjhQCmTQXDqKaD8TiKd6AeTZWoT9y5S7PT3Cdk13SH Xtvg+mkyF4c+3sgmG52MAqgbjZHtRxAgwzosZYQlf5thA2AvbzenRhvDFVr6OXIK qbyAOjNp74G6dMH/Js6gJt48VIBrPwFMXFdx -----END CERTIFICATE-----Generated at Sun Jan 11 20:36:46 2026 by rpki-client