This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer File: 2_aMnFwB1o68DJDe5MB0naI6L9Y.cer (raw, json) Hash identifier: ddAq//s2p70UI2sFPRkSwdXBMvl7YluIXzk7AAgW/4c= Subject key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39BF Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:43:34 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327991 IP: 102.64.32.0/20 IP: 102.129.48.0/20 IP: 102.206.216.0/22 IP: 102.211.188.0/22 IP: 2c0f:ec48::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14783 (0x39bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:43:34 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:fe:c4:6d:ff:df:54:c4:ba:61:7c:78:a6: a9:62:c4:40:c7:cf:cb:8c:f4:1d:d4:69:18:ce:1e: 80:dd:bc:dd:d0:c8:fc:ac:3e:52:3f:f0:1d:31:d3: 1d:39:26:a6:83:67:60:aa:0f:8e:79:f6:27:6c:3f: 2a:db:c2:b9:ff:85:54:af:ca:08:1f:2e:2f:86:e4: 4b:28:08:f8:08:eb:b4:51:03:49:69:ac:88:c0:9e: be:2c:d7:9b:fd:6e:e3:c4:bd:9a:94:3b:30:48:a0: 13:a8:51:bf:f7:5f:63:58:04:4d:b6:ef:f1:10:c1: a8:12:7f:3c:15:71:fe:a7:d2:dc:13:8a:b4:c2:82: 41:63:a1:ce:5e:5a:66:8d:41:3c:09:c6:45:86:6c: fb:57:20:7b:61:f9:09:d6:eb:ae:72:f6:b5:35:36: b3:f3:be:e2:ef:6a:35:17:81:50:5e:ae:96:74:ef: 34:b5:21:33:68:23:e5:30:94:c0:81:48:65:3b:ed: fc:a6:29:62:25:28:c4:13:ac:63:41:a6:68:3f:66: 9d:5c:e0:09:1a:f8:ba:20:60:fa:4c:69:41:dc:b5: 07:13:f0:6e:f6:6a:dc:25:f1:73:39:44:a3:6a:82: 68:83:df:31:57:77:3c:57:8a:89:55:c3:b7:98:19: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327991 sbgp-ipAddrBlock: critical IPv4: 102.64.32.0/20 102.129.48.0/20 102.206.216.0/22 102.211.188.0/22 IPv6: 2c0f:ec48::/32 Signature Algorithm: sha256WithRSAEncryption 5d:e1:18:71:db:30:24:a0:28:65:7c:f2:f9:1f:23:bc:c3:fc: 86:5b:e3:4f:78:7a:23:f0:7d:40:44:52:e7:3d:af:03:ec:a8: 71:87:70:a2:a9:e3:f5:0f:ad:2f:f9:fd:6f:f9:d5:79:aa:8f: 47:60:c0:e7:eb:a2:99:cb:e7:f4:60:8e:ba:c7:37:83:a2:bf: 91:d7:ce:5f:04:af:7f:7c:f2:8f:57:6d:19:b4:3d:71:2e:a8: 95:f8:9a:6d:aa:6c:17:42:df:3e:05:a4:ee:cd:bb:92:65:dc: 9b:8b:7b:83:9e:e0:e7:cc:09:a6:8f:7a:e2:04:32:19:9e:a7: 09:80:90:6c:c5:2b:2e:5d:09:b1:8b:99:de:a5:99:51:73:fe: 18:d1:5f:ae:f1:ad:9e:23:84:48:91:33:0b:36:8a:c4:b0:45: 63:71:9d:a7:e1:c9:1c:2b:5f:5b:b2:76:fd:c9:f5:ce:a2:46: 24:75:c0:01:12:9f:91:51:c6:0e:01:50:80:38:b4:2d:05:ec: 18:4a:66:6b:15:f3:82:26:0e:8e:ca:99:df:83:41:93:bf:12: 72:06:b6:ca:e9:00:ca:ce:15:3b:b2:1e:81:a1:ce:5a:08:21: b2:ee:13:98:5e:9a:ec:bb:7b:d9:ce:70:03:78:2d:7f:b9:ff: b5:41:06:d3 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICOb8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQzMzRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU3NkU4QUYxMTAvBgNVBAUTKERCRjY4QzlDNUMwMUQ2OEVCQzBDOTBE RUU0QzA3NDlEQTIzQTJGRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtwf7Ebf/fVMS6YXx4pqlixEDHz8uM9B3UaRjOHoDdvN3QyPysPlI/8B0x0x05 JqaDZ2CqD4559idsPyrbwrn/hVSvyggfLi+G5EsoCPgI67RRA0lprIjAnr4s15v9 buPEvZqUOzBIoBOoUb/3X2NYBE227/EQwagSfzwVcf6n0twTirTCgkFjoc5eWmaN QTwJxkWGbPtXIHth+QnW665y9rU1NrPzvuLvajUXgVBerpZ07zS1ITNoI+UwlMCB SGU77fymKWIlKMQTrGNBpmg/Zp1c4Aka+LogYPpMaUHctQcT8G72atwl8XM5RKNq gmiD3zFXdzxXiolVw7eYGfefAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQU2/aMnFwB 1o68DJDe5MB0naI6L9YwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NzZFOC9DMzgwODk4NkZDNjEx MUVDQjE3RTIyQUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTc2RTgvQzM4MDg5ODZGQzYxMTFFQ0IxN0UyMkFCRjEyMjI0NjgvMl9hTW5G d0IxbzY4REpEZTVNQjBuYUk2TDlZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFATcwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBARmQCADBARmgTADBAJm ztgDBAJm07wwDQQCAAIwBwMFACwP7EgwDQYJKoZIhvcNAQELBQADggEBAF3hGHHb MCSgKGV88vkfI7zD/IZb4094eiPwfUBEUuc9rwPsqHGHcKKp4/UPrS/5/W/51Xmq j0dgwOfropnL5/RgjrrHN4Oiv5HXzl8Er3988o9XbRm0PXEuqJX4mm2qbBdC3z4F pO7Nu5Jl3JuLe4Oe4OfMCaaPeuIEMhmepwmAkGzFKy5dCbGLmd6lmVFz/hjRX67x rZ4jhEiRMws2isSwRWNxnafhyRwrX1uydv3J9c6iRiR1wAESn5FRxg4BUIA4tC0F 7BhKZmsV84ImDo7Kmd+DQZO/EnIGtsrpAMrOFTuyHoGhzloIIbLuE5hemuy7e9nO cAN4LX+5/7VBBtM= -----END CERTIFICATE-----Generated at Sun Jan 25 21:36:06 2026 by rpki-client