This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer File: 1wfkSz_UKAnv_gwP4_VABn04PVY.cer (raw, json) Hash identifier: glgPC/g+6dmYNx/EFGo3LQ0kW0EaafKO8ptBXGofGeE= Subject key identifier: D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BE2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:03:10 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37451 IP: 102.129.64.0/19 IP: 102.213.232.0/22 IP: 197.157.252.0/22 IP: 2c0f:f568::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15330 (0x3be2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:03:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3690C75AF, serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:bf:81:cc:e7:75:46:fa:b7:32:4a:fd:9f: 7c:41:05:e0:57:0b:89:89:a2:48:f3:35:55:a9:22: 76:38:11:14:b0:a3:38:3c:65:31:8f:ea:27:a7:bb: 0f:56:bb:41:f6:35:81:97:d7:cd:84:d3:04:96:90: 68:48:31:ed:37:cd:bc:b0:54:3e:4f:9b:44:51:b1: 53:4a:3b:65:bc:0d:51:b2:a0:11:33:4d:f1:40:8c: 81:8b:c8:75:63:0e:a3:1a:4d:1f:48:b3:78:1e:87: 09:af:9c:17:66:bd:8d:09:d2:4a:f1:c6:3f:a2:46: a5:a9:d1:f2:90:c0:5b:c9:36:64:f3:62:1b:17:20: ea:8d:66:6a:08:81:d1:15:6b:ec:c2:f3:73:fb:21: 61:8d:78:fb:49:30:ab:da:09:7c:14:ce:71:d0:7a: 4f:a6:5e:4f:3e:87:2c:76:ec:7d:c7:43:96:31:1e: c5:2e:54:3e:f1:14:eb:81:29:3c:0c:8e:8a:02:e3: 94:26:7a:d7:f0:1c:ef:bd:79:a3:42:b3:c5:c6:9e: d8:b2:45:33:7e:c0:8f:65:fd:9d:07:10:72:b2:dd: e0:9c:2b:28:de:6e:28:f0:15:cd:3a:19:30:ff:64: d4:13:4d:86:de:2b:10:42:b6:69:57:49:e1:6e:cd: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37451 sbgp-ipAddrBlock: critical IPv4: 102.129.64.0/19 102.213.232.0/22 197.157.252.0/22 IPv6: 2c0f:f568::/32 Signature Algorithm: sha256WithRSAEncryption 82:4d:97:13:51:08:c9:2f:3a:46:8c:ba:e4:44:17:87:e5:db: 1e:f1:28:f1:50:65:d7:c9:ec:ab:9e:1f:29:36:ad:92:45:bd: c0:a9:67:cf:ad:70:e3:82:d1:8c:c0:b0:cc:8a:22:e0:91:74: 75:3f:95:8b:ed:de:be:70:b8:13:59:6f:72:bb:94:cc:d0:35: 8d:8b:5d:91:20:20:b3:ad:24:c2:5d:55:64:19:d0:e6:00:a9: b4:df:22:4c:04:f1:e6:92:40:b6:15:27:97:6d:f3:cf:80:3d: eb:0b:4b:14:2f:5e:da:c4:6a:1c:56:aa:8b:65:26:78:49:89: 00:1d:bf:6b:5b:da:2a:cd:d3:7c:c3:28:2f:f8:9b:10:7f:b3: 95:98:5a:26:15:96:bf:de:a9:cb:60:0f:50:da:b9:f3:38:6b: a2:c0:12:29:23:14:63:15:60:cc:23:48:f3:00:39:85:7b:9b: a7:4c:f3:65:aa:22:74:5f:73:d3:4e:dd:f8:5c:7c:5f:64:70: a9:19:d0:d3:01:fc:d5:08:e1:b6:e5:56:da:71:f4:64:41:39: 56:95:78:02:54:2a:01:83:c5:e6:2c:51:a2:77:88:c0:af:e3: 6f:0d:4e:29:b4:1f:eb:9c:2f:00:27:00:ca:70:4a:0c:de:e6: 9e:6c:39:e6 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICO+IwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzAzMTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjkwQzc1QUYxMTAvBgNVBAUTKEQ3MDdFNDRCM0ZENDI4MDlFRkZFMEMw RkUzRjU0MDA2N0QzODNENTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLRb+BzOd1Rvq3Mkr9n3xBBeBXC4mJokjzNVWpInY4ERSwozg8ZTGP6ienuw9W u0H2NYGX182E0wSWkGhIMe03zbywVD5Pm0RRsVNKO2W8DVGyoBEzTfFAjIGLyHVj DqMaTR9Is3gehwmvnBdmvY0J0krxxj+iRqWp0fKQwFvJNmTzYhsXIOqNZmoIgdEV a+zC83P7IWGNePtJMKvaCXwUznHQek+mXk8+hyx27H3HQ5YxHsUuVD7xFOuBKTwM jooC45QmetfwHO+9eaNCs8XGntiyRTN+wI9l/Z0HEHKy3eCcKyjebijwFc06GTD/ ZNQTTYbeKxBCtmlXSeFuzcBXAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU1wfkSz/U KAnv/gwP4/VABn04PVYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5MEM3NS9GMzc5NjEzMDU1ODgx MUVGOUYwRjE3ODY3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTBDNzUvRjM3OTYxMzA1NTg4MTFFRjlGMEYxNzg2NzYyRTk1MUEvMXdma1N6 X1VLQW52X2d3UDRfVkFCbjA0UFZZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkkswOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAVmgUADBAJm1egDBALF nfwwDQQCAAIwBwMFACwP9WgwDQYJKoZIhvcNAQELBQADggEBAIJNlxNRCMkvOkaM uuREF4fl2x7xKPFQZdfJ7KueHyk2rZJFvcCpZ8+tcOOC0YzAsMyKIuCRdHU/lYvt 3r5wuBNZb3K7lMzQNY2LXZEgILOtJMJdVWQZ0OYAqbTfIkwE8eaSQLYVJ5dt88+A PesLSxQvXtrEahxWqotlJnhJiQAdv2tb2irN03zDKC/4mxB/s5WYWiYVlr/eqctg D1DaufM4a6LAEikjFGMVYMwjSPMAOYV7m6dM82WqInRfc9NO3fhcfF9kcKkZ0NMB /NUI4bblVtpx9GRBOVaVeAJUKgGDxeYsUaJ3iMCv428NTim0H+ucLwAnAMpwSgze 5p5sOeY= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:42 2026 by rpki-client