This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer File: 2qhy_5oERGtxio2fR1VL-lgbOg4.cer (raw, json) Hash identifier: BLuSVFr2CgfXvJrWUv9QUySjYVaVF5HkebiS2r9+V2g= Subject key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 381F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:35:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328467 IP: 102.67.128.0/21 IP: 2c0f:ed48::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14367 (0x381f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:35:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362793FAF, serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:92:71:62:6d:96:39:69:68:93:d5:83:61: f3:0e:85:de:3e:0b:ab:5a:9d:71:fb:eb:75:51:02: 0d:3b:c4:14:61:09:1d:e0:a8:fc:2f:bc:38:0e:d2: 7e:f3:c3:6a:9f:05:de:90:37:c2:5c:ab:84:26:61: b2:ef:bb:0e:3d:92:f0:7b:23:98:9e:61:90:e2:37: f0:45:3b:e9:ce:54:e5:ac:b4:46:a9:42:08:4e:08: ef:69:f4:4d:e5:00:90:5a:3d:cf:c7:81:15:8c:e9: c9:eb:37:fe:b6:c1:de:a4:0b:4b:bc:db:aa:ec:19: 15:b4:ce:56:dd:dd:39:83:94:6c:1a:01:5a:73:85: 07:60:6a:7f:03:dc:61:62:4f:12:36:11:73:11:1a: 37:03:7a:fe:e9:fe:30:ee:8e:42:be:33:36:5c:42: 5d:ef:ce:58:e6:6c:e8:99:e7:99:7e:6d:60:72:08: 8a:3c:cf:41:46:e4:4b:b4:de:a4:04:b4:5f:d9:de: 69:0a:f6:39:43:f7:54:32:d4:d9:1e:4b:39:9c:c2: ef:2b:96:0f:2f:57:d9:9b:fc:ea:6f:a2:fe:3f:68: 3b:26:86:93:bd:ea:89:5c:a8:c9:ce:60:2b:9a:4e: 20:96:00:68:be:93:89:bd:24:ce:1a:23:c1:48:04: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328467 sbgp-ipAddrBlock: critical IPv4: 102.67.128.0/21 IPv6: 2c0f:ed48::/32 Signature Algorithm: sha256WithRSAEncryption 74:57:ce:7f:9c:6f:ee:54:95:d5:18:61:f4:76:1d:ce:63:db: 49:43:88:0a:8a:3d:2d:a5:83:7e:eb:5c:e7:7e:2d:0a:84:ac: 97:73:72:81:34:cf:3c:7f:5b:e1:a2:82:39:df:c6:cb:43:e7: a2:33:6a:4a:f2:7a:8b:b9:23:39:15:07:6f:b6:5a:77:72:9a: a5:44:2f:f0:bb:55:3f:d1:fa:69:b6:f1:fa:c7:6c:06:3b:6c: c9:51:0c:79:71:a1:3d:79:0e:2a:2a:f1:fb:99:df:2c:53:dd: 72:2a:8a:c1:fb:b0:5a:94:42:16:6f:dd:98:89:28:d1:a1:ef: 32:fd:74:86:00:ed:57:66:e1:6f:90:99:c6:80:32:1c:64:44: 48:7c:78:c3:06:65:c3:1a:78:19:68:ed:9a:97:1b:f5:b5:2d: 35:44:0e:3f:ec:3d:40:0a:77:76:36:41:af:e5:23:04:8d:a5: 00:5a:ca:86:cb:87:31:18:42:ba:58:ac:ae:d6:e1:98:4d:48: dc:10:f1:b9:db:3e:9e:d1:a1:bc:13:57:38:88:6a:0c:6b:36: 11:23:97:60:7e:eb:96:ad:ce:c5:68:af:8b:94:6d:2e:b5:30: ca:f1:2f:c3:53:9f:2b:ca:07:f2:05:8b:17:cc:5d:70:8d:f1: c7:65:30:5b -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOB8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDM1NDJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjI3OTNGQUYxMTAvBgNVBAUTKERBQTg3MkZGOUEwNDQ0NkI3MThBOEQ5 RjQ3NTU0QkZBNTgxQjNBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGv5JxYm2WOWlok9WDYfMOhd4+C6tanXH763VRAg07xBRhCR3gqPwvvDgO0n7z w2qfBd6QN8Jcq4QmYbLvuw49kvB7I5ieYZDiN/BFO+nOVOWstEapQghOCO9p9E3l AJBaPc/HgRWM6cnrN/62wd6kC0u826rsGRW0zlbd3TmDlGwaAVpzhQdgan8D3GFi TxI2EXMRGjcDev7p/jDujkK+MzZcQl3vzljmbOiZ55l+bWByCIo8z0FG5Eu03qQE tF/Z3mkK9jlD91Qy1NkeSzmcwu8rlg8vV9mb/Opvov4/aDsmhpO96olcqMnOYCua TiCWAGi+k4m9JM4aI8FIBJKnAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU2qhy/5oE RGtxio2fR1VL+lgbOg4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNzkzRi8wNjVENERCQUE2NDMx MUVGOEI0RDNFOEI3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYyRTk1MUEvMnFoeV81 b0VSR3R4aW8yZlIxVkwtbGdiT2c0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAxMwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmQ4AwDQQCAAIwBwMF ACwP7UgwDQYJKoZIhvcNAQELBQADggEBAHRXzn+cb+5UldUYYfR2Hc5j20lDiAqK PS2lg37rXOd+LQqErJdzcoE0zzx/W+GigjnfxstD56Izakryeou5IzkVB2+2Wndy mqVEL/C7VT/R+mm28frHbAY7bMlRDHlxoT15Dioq8fuZ3yxT3XIqisH7sFqUQhZv 3ZiJKNGh7zL9dIYA7Vdm4W+QmcaAMhxkREh8eMMGZcMaeBlo7ZqXG/W1LTVEDj/s PUAKd3Y2Qa/lIwSNpQBayobLhzEYQrpYrK7W4ZhNSNwQ8bnbPp7RobwTVziIagxr NhEjl2B+65atzsVor4uUbS61MMrxL8NTnyvKB/IFixfMXXCN8cdlMFs= -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:41 2026 by rpki-client