This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer File: 2cDlwkl6yIv_-87Z9V1goiiYkn8.cer (raw, json) Hash identifier: RYf6XANmYxSUgjbO+XP36rZ7icHYyHRvDLOnECu5o4E= Subject key identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3921 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:19:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329419 IP: 102.209.237.0/24 IP: 2c0f:3340::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14625 (0x3921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:19:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:b4:d2:9e:67:93:b4:b1:79:e1:03:14:60: f9:fa:8d:ff:28:bb:6c:c2:1e:95:a6:eb:7e:fd:b3: 16:b4:95:26:9f:b8:e0:a6:24:08:21:84:05:f1:61: 95:e9:97:eb:35:2c:40:5d:63:d1:10:1b:55:5a:fc: 5a:9e:4c:a7:bf:29:79:21:e2:c7:05:1f:39:d8:ca: 1a:2f:04:32:b8:cd:5c:d6:0a:42:85:a9:82:59:7b: 5d:b8:42:9f:17:d3:40:90:40:72:ff:ac:25:32:ff: e0:e8:32:df:40:d5:4b:cc:21:ed:70:47:9f:bc:f3: 89:a6:fb:86:8a:57:be:26:6a:00:5b:22:ae:96:dc: 9e:9a:16:de:d3:91:de:ab:ed:71:98:67:33:20:8d: 97:0a:ce:74:49:4d:33:f6:2a:76:a2:2e:38:46:64: b4:35:7d:de:4a:3a:7e:b6:b8:0e:cb:d5:dd:8e:1d: ea:6e:43:b2:42:77:59:00:34:58:a1:cd:29:53:76: b8:15:d7:3d:76:0a:38:6e:97:72:98:28:bd:4e:c3: b6:8e:94:89:fd:10:3c:89:e6:80:47:91:28:45:9f: d3:b0:97:55:f1:c0:85:ff:1b:0c:c3:a0:a5:b7:5c: fd:33:20:8c:9b:98:46:45:09:18:38:fc:aa:d8:39: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329419 sbgp-ipAddrBlock: critical IPv4: 102.209.237.0/24 IPv6: 2c0f:3340::/32 Signature Algorithm: sha256WithRSAEncryption 43:c3:86:46:59:3a:a5:c4:1b:db:c2:a3:d2:fb:49:99:6f:41: 49:b1:91:77:8f:55:3d:d0:c4:b9:a8:11:68:b6:3b:5a:5c:3c: 5c:8a:1b:21:17:41:f0:5f:18:0c:b6:f8:e7:55:ec:fe:90:15: f9:25:0a:43:41:37:c7:48:b8:d8:a6:03:74:ee:20:a6:d0:90: 0c:6a:9d:79:e0:16:06:15:ef:2b:5c:ea:3b:f9:22:39:c1:19: 85:04:1e:56:28:fc:d5:77:64:76:de:0e:4b:af:18:84:d1:84: 62:17:bf:d6:e1:26:be:26:ce:f5:66:62:4f:8d:18:88:8c:c7: b9:2e:0e:fd:7f:d9:55:bd:48:d6:15:7a:d9:7a:fb:1e:6b:81: dc:13:07:1a:2a:50:12:8f:76:59:ee:84:ad:7b:64:eb:0e:69: 06:72:2b:14:70:5a:e4:c0:53:16:fb:a7:7f:8b:39:b8:e9:3a: b7:d3:f5:45:d0:2c:69:15:23:7a:58:1f:6a:9a:72:06:e6:14: e9:0a:8a:bf:46:a1:ed:f4:01:18:b3:f7:00:6d:22:13:fc:42: 75:64:54:a6:bf:84:54:00:6d:e6:e3:81:83:61:ff:df:16:a0: 98:a0:5d:83:2b:5b:27:38:77:61:fd:83:ae:18:c0:39:91:9d: fe:4b:13:9e -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOSEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTE5MjFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ0RUE4QUYxMTAvBgNVBAUTKEQ5QzBFNUMyNDk3QUM4OEJGRkZCQ0VE OUY1NUQ2MEEyMjg5ODkyN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+n7TSnmeTtLF54QMUYPn6jf8ou2zCHpWm6379sxa0lSafuOCmJAghhAXxYZXp l+s1LEBdY9EQG1Va/FqeTKe/KXkh4scFHznYyhovBDK4zVzWCkKFqYJZe124Qp8X 00CQQHL/rCUy/+DoMt9A1UvMIe1wR5+884mm+4aKV74magBbIq6W3J6aFt7Tkd6r 7XGYZzMgjZcKznRJTTP2KnaiLjhGZLQ1fd5KOn62uA7L1d2OHepuQ7JCd1kANFih zSlTdrgV1z12Cjhul3KYKL1Ow7aOlIn9EDyJ5oBHkShFn9Owl1XxwIX/GwzDoKW3 XP0zIIybmEZFCRg4/KrYOTxPAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU2cDlwkl6 yIv/+87Z9V1goiiYkn8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NEVBOC9DMzk2QUNFRTYwQTgx MUYwQjQ4OTkxRTVEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDRFQTgvQzM5NkFDRUU2MEE4MTFGMEI0ODk5MUU1REFFNEVDOUMvMmNEbHdr bDZ5SXZfLTg3WjlWMWdvaWlZa244Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBsswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABm0e0wDQQCAAIwBwMF ACwPM0AwDQYJKoZIhvcNAQELBQADggEBAEPDhkZZOqXEG9vCo9L7SZlvQUmxkXeP VT3QxLmoEWi2O1pcPFyKGyEXQfBfGAy2+OdV7P6QFfklCkNBN8dIuNimA3TuIKbQ kAxqnXngFgYV7ytc6jv5IjnBGYUEHlYo/NV3ZHbeDkuvGITRhGIXv9bhJr4mzvVm Yk+NGIiMx7kuDv1/2VW9SNYVetl6+x5rgdwTBxoqUBKPdlnuhK17ZOsOaQZyKxRw WuTAUxb7p3+LObjpOrfT9UXQLGkVI3pYH2qacgbmFOkKir9Goe30ARiz9wBtIhP8 QnVkVKa/hFQAbebjgYNh/98WoJigXYMrWyc4d2H9g64YwDmRnf5LE54= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:14 2026 by rpki-client