This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer File: e5XIh1o9qSB6rcxUQDFzjYpiLas.cer (raw, json) Hash identifier: xpmN76VVLFPk/ouVz5fpymHYDa+yrO2SnmeguQk008g= Subject key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E81 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:46:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.67.164.0/22 IP: 102.213.152.0/22 IP: 2c0f:edb0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16001 (0x3e81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:46:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:5d:1d:9d:30:70:78:0e:ce:b4:f4:64:a6: 47:51:83:eb:db:62:34:46:40:11:6b:aa:77:09:6e: 90:11:7b:3e:ba:35:1e:0d:bb:19:b0:4c:37:e3:b0: cd:a4:c0:53:1b:9f:3b:e3:27:68:40:45:90:41:da: fa:1d:79:be:cd:ff:ea:5e:9b:0e:b1:68:2e:76:95: 33:54:c7:f1:2e:a1:39:f6:20:72:0f:41:cb:3f:60: 4c:27:d3:d7:c3:0a:99:2b:ba:2d:e9:c7:14:5a:87: 72:ab:73:79:54:0f:45:a3:cd:29:12:fc:ff:40:1b: b1:36:19:4a:d5:3a:ae:a6:c2:65:6e:9a:10:b3:65: 0c:68:36:54:11:ff:b1:de:05:c1:40:d9:94:34:36: 24:df:70:fc:5b:95:65:da:0f:d7:03:d4:33:89:b0: db:3a:2f:69:89:e4:d4:88:7e:09:7c:18:41:12:3c: 99:26:36:03:b5:03:3d:83:3a:4e:86:5b:f0:10:8f: e7:29:b6:c7:3f:c7:da:2d:47:18:ee:aa:08:ff:df: 8a:22:80:a6:1d:f3:af:8f:6e:d8:01:2b:1e:8c:ba: a8:4f:d3:d1:ed:a7:5e:c5:b2:88:91:5d:b9:93:4b: 5e:3d:19:b6:f8:75:c1:cc:ac:0f:d2:f1:53:8a:2d: dc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft sbgp-ipAddrBlock: critical IPv4: 102.67.164.0/22 102.213.152.0/22 IPv6: 2c0f:edb0::/32 Signature Algorithm: sha256WithRSAEncryption 75:b7:e3:dd:d3:5d:b2:a5:bf:ce:68:b0:b0:d7:c9:5f:8d:97: 22:ff:7d:e4:e7:33:b7:ab:23:85:4e:a1:c8:24:98:c5:f0:3b: 99:e6:27:81:2f:f8:b5:36:30:7d:32:0f:72:a6:60:77:0b:53: 0a:ac:f7:b5:c8:48:7a:fa:4b:e0:d4:c0:b6:38:fe:6b:5e:c6: 98:a8:60:7d:a1:a0:cc:40:48:e0:5a:7f:0d:d4:6c:ff:39:1b: 3c:92:6c:9b:7a:ec:19:1e:35:51:60:15:bf:7b:4d:4c:d7:71: 88:c5:75:69:f2:40:88:f1:51:84:57:61:35:d0:17:d6:93:e0: 61:6a:4b:62:f9:72:95:f8:05:d9:18:c5:e5:aa:95:95:6d:37: 9e:a0:53:60:d5:80:40:c8:b0:eb:9d:8c:44:2e:a7:38:d2:ab: 62:86:ee:88:73:7d:e2:bf:22:62:1c:91:5d:50:ea:54:ca:e8: 7a:1b:21:3a:63:9b:65:c3:95:42:01:0d:e1:6e:0d:d1:4c:90: 65:7e:0b:2a:58:a2:1d:0d:57:9c:3a:86:9e:77:a0:fc:77:84: c7:b3:8d:a2:94:5d:7d:c9:e4:a0:4e:0d:02:db:e0:15:ce:bd: df:6b:15:99:b6:0e:1c:13:75:fa:5f:1f:d7:9f:f3:19:2c:30: 6b:6b:1d:42 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgICPoEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDQ2NDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkUzOEU1QUYxMTAvBgNVBAUTKDdCOTVDODg3NUEzREE5MjA3QUFEQ0M1 NDQwMzE3MzhEOEE2MjJEQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoD10dnTBweA7OtPRkpkdRg+vbYjRGQBFrqncJbpARez66NR4NuxmwTDfjsM2k wFMbnzvjJ2hARZBB2vodeb7N/+pemw6xaC52lTNUx/EuoTn2IHIPQcs/YEwn09fD Cpkrui3pxxRah3Krc3lUD0WjzSkS/P9AG7E2GUrVOq6mwmVumhCzZQxoNlQR/7He BcFA2ZQ0NiTfcPxblWXaD9cD1DOJsNs6L2mJ5NSIfgl8GEESPJkmNgO1Az2DOk6G W/AQj+cptsc/x9otRxjuqgj/34oigKYd86+PbtgBKx6MuqhP09Htp17FsoiRXbmT S149Gbb4dcHMrA/S8VOKLdyZAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUe5XIh1o9 qSB6rcxUQDFzjYpiLaswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFMzhFNS9DODlGOUU5NDU1M0Ux MUVEOEUyMjMwQ0FGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTM4RTUvQzg5RjlFOTQ1NTNFMTFFRDhFMjIzMENBRjEyMjI0NjgvZTVYSWgx bzlxU0I2cmN4VVFERnpqWXBpTGFzLm1mdDA0BggrBgEFBQcBBwEB/wQlMCMwEgQC AAEwDAMEAmZDpAMEAmbVmDANBAIAAjAHAwUALA/tsDANBgkqhkiG9w0BAQsFAAOC AQEAdbfj3dNdsqW/zmiwsNfJX42XIv995Oczt6sjhU6hyCSYxfA7meYngS/4tTYw fTIPcqZgdwtTCqz3tchIevpL4NTAtjj+a17GmKhgfaGgzEBI4Fp/DdRs/zkbPJJs m3rsGR41UWAVv3tNTNdxiMV1afJAiPFRhFdhNdAX1pPgYWpLYvlylfgF2RjF5aqV lW03nqBTYNWAQMiw652MRC6nONKrYobuiHN94r8iYhyRXVDqVMroehshOmObZcOV QgEN4W4N0UyQZX4LKliiHQ1XnDqGnneg/HeEx7ONopRdfcnkoE4NAtvgFc6932sV mbYOHBN1+l8f15/zGSwwa2sdQg== -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:23 2026 by rpki-client