This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer File: -HlTHl-cqfSLcTODpQCBDVDy0kQ.cer (raw, json) Hash identifier: /+AI5WsBl7GL751IzRY9kGl5Jpg6wuTXlP14XU+quq4= Subject key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37B2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329183 IP: 102.213.92.0/22 IP: 2c0f:6980::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14258 (0x37b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:17:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:04:1d:66:77:82:01:c3:48:3c:6a:fd:4c: 0d:5e:06:4e:ac:21:3c:c6:5e:3c:e8:a8:e9:f4:c1: 26:48:70:ed:c1:66:29:6b:e4:e9:67:53:b6:b1:4b: 3c:16:46:36:c7:35:e3:cf:a1:c4:eb:53:bb:70:80: 02:59:94:11:5e:86:d4:a2:0c:89:97:00:1c:e4:c1: e7:42:11:17:f2:44:c1:be:ac:6d:d6:b3:b8:8c:9a: 1c:0d:27:15:fd:06:f4:62:97:29:9a:a6:28:9d:f7: a1:8e:3a:b6:58:2f:e1:31:70:1b:e9:47:35:96:91: a7:61:41:40:ef:f7:6b:a9:b6:17:00:a3:e0:a0:e5: 32:05:50:bc:8c:f3:ac:42:5c:5c:b9:90:b5:d0:12: c2:eb:6e:1c:ee:4e:92:7a:ac:29:21:ff:65:ee:a5: cf:29:59:0f:5d:cc:e5:b3:98:57:23:91:c9:f4:70: ce:2e:cd:08:a0:59:17:43:f2:cd:a4:cf:9b:af:dd: f7:fc:b4:57:4c:f2:98:99:e2:81:c8:39:fb:3b:3f: 37:ec:c4:89:20:3a:bd:05:05:c5:ec:55:83:e5:e7: 47:41:2e:69:95:9d:b1:47:65:8c:16:bc:f2:1e:ff: b2:9a:df:ad:a2:03:ec:87:35:71:d8:1b:42:c3:05: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329183 sbgp-ipAddrBlock: critical IPv4: 102.213.92.0/22 IPv6: 2c0f:6980::/32 Signature Algorithm: sha256WithRSAEncryption 10:d4:76:cf:23:1b:72:70:1c:5e:85:ee:76:de:f7:0e:65:b1: 67:e8:4b:55:3f:40:ff:f7:fa:62:49:5f:cb:9e:ec:10:ea:94: 4f:0d:bb:f3:f4:f7:c4:24:ed:c8:4d:ff:c7:2e:be:77:ac:82: 05:1b:da:5f:55:db:70:58:f4:fd:e0:e0:9c:e9:fc:33:08:a7: ea:a6:f1:fa:27:ca:aa:f2:a8:bc:d0:81:45:2a:35:9e:c2:b3: 6a:6d:0c:40:46:80:73:cb:e3:7f:60:11:71:f9:ce:a4:e7:84: 9d:6a:22:a1:4a:29:e6:f6:4c:ab:ff:90:9d:c2:ce:83:f2:8d: ef:c0:03:95:fd:20:35:ab:44:9e:b4:7e:c6:74:d3:5c:60:c4: 10:a8:7c:e6:a4:9a:24:0c:9e:c0:ef:e9:3d:38:00:42:dd:7f: fc:4d:fd:23:c7:d7:e0:0d:ff:c8:14:4c:44:2f:70:a5:7b:9d: 29:77:0b:4d:a4:45:81:a1:6e:ee:e1:12:55:61:3c:00:53:75: cc:e9:ae:28:fb:c1:ad:a3:f1:26:eb:05:f9:0a:c4:64:72:ee: 35:94:98:9d:d2:73:e6:9f:31:b8:21:59:d8:04:05:bc:f0:76: 90:36:dd:25:ff:34:7f:71:6e:49:fa:1e:ad:0e:d2:1b:54:56: d9:bf:33:f4 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICN7IwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDE3MTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE5NTBBQUYxMTAvBgNVBAUTKEY4Nzk1MzFFNUY5Q0E5RjQ4QjcxMzM4 M0E1MDA4MTBENTBGMkQyNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXcgQdZneCAcNIPGr9TA1eBk6sITzGXjzoqOn0wSZIcO3BZilr5OlnU7axSzwW RjbHNePPocTrU7twgAJZlBFehtSiDImXABzkwedCERfyRMG+rG3Ws7iMmhwNJxX9 BvRilymapiid96GOOrZYL+ExcBvpRzWWkadhQUDv92upthcAo+Cg5TIFULyM86xC XFy5kLXQEsLrbhzuTpJ6rCkh/2Xupc8pWQ9dzOWzmFcjkcn0cM4uzQigWRdD8s2k z5uv3ff8tFdM8piZ4oHIOfs7PzfsxIkgOr0FBcXsVYPl50dBLmmVnbFHZYwWvPIe /7Ka362iA+yHNXHYG0LDBVLRAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU+HlTHl+c qfSLcTODpQCBDVDy0kQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxOTUwQS85NjVCQkU0ODQ3ODIx MUYwQTk5REJCQ0REQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTk1MEEvOTY1QkJFNDg0NzgyMTFGMEE5OURCQkNEREFFNEVDOUMvLUhsVEhs LWNxZlNMY1RPRHBRQ0JEVkR5MGtRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBd8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1VwwDQQCAAIwBwMF ACwPaYAwDQYJKoZIhvcNAQELBQADggEBABDUds8jG3JwHF6F7nbe9w5lsWfoS1U/ QP/3+mJJX8ue7BDqlE8Nu/P098Qk7chN/8cuvnesggUb2l9V23BY9P3g4Jzp/DMI p+qm8fonyqryqLzQgUUqNZ7Cs2ptDEBGgHPL439gEXH5zqTnhJ1qIqFKKeb2TKv/ kJ3CzoPyje/AA5X9IDWrRJ60fsZ001xgxBCofOakmiQMnsDv6T04AELdf/xN/SPH 1+AN/8gUTEQvcKV7nSl3C02kRYGhbu7hElVhPABTdczprij7wa2j8SbrBfkKxGRy 7jWUmJ3Sc+afMbghWdgEBbzwdpA23SX/NH9xbkn6Hq0O0htUVtm/M/Q= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:16 2026 by rpki-client