This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4CHIx8UoCk9ahEY7VfB-of5s1qU.cer File: 4CHIx8UoCk9ahEY7VfB-of5s1qU.cer (raw, json) Hash identifier: m8yssiS/r7No9LM9m0jMYsPmHKUYV1AQ/fnynZywIgQ= Subject key identifier: E0:21:C8:C7:C5:28:0A:4F:5A:84:46:3B:55:F0:7E:A1:FE:6C:D6:A5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F8A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Wed 14 Jan 2026 19:25:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329651 IP: 102.204.24.0/22 IP: 2c0f:7ec0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16266 (0x3f8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 14 19:25:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362A277AF, serialNumber=E021C8C7C5280A4F5A84463B55F07EA1FE6CD6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:05:be:32:2e:58:b4:04:80:94:8f:f4:7f: ab:95:ef:1b:67:e9:2b:ec:67:df:8f:a4:92:ee:f2: d2:1e:cd:b6:64:de:fb:30:8b:df:05:96:96:fe:7d: bd:5f:f6:84:f3:d3:a1:d0:1f:64:37:2b:c7:6e:89: 68:13:78:b8:ef:0b:bb:1e:d4:b2:a8:a0:5c:14:d2: b8:ea:25:00:d6:a4:5f:5e:b3:53:59:32:f0:5c:d4: 73:4a:10:30:83:71:59:a6:dd:45:cb:62:f0:f2:4e: e8:3c:cb:8b:80:c7:20:0b:9a:96:5d:1b:10:ea:a8: 2c:76:82:73:a4:5e:c7:77:87:4a:f8:d4:38:4a:87: e6:c0:ef:8f:e0:f7:6b:4f:c0:ab:e2:29:ea:c0:c7: 6e:ae:c3:98:ab:e8:cf:88:eb:2b:57:f6:b1:e0:a0: bd:ec:1d:80:3c:f3:78:0c:f5:68:df:54:4e:a0:77: a6:ca:57:5c:40:17:f6:3c:b6:a3:ec:f3:05:60:ec: 13:c4:4a:52:ae:0f:e5:eb:5d:01:b3:5a:f6:5b:b7: 96:55:0d:8a:ed:f8:66:2d:4f:44:51:63:28:a9:da: 03:c7:c7:ba:90:ce:cd:0b:18:80:13:59:73:5b:0e: 27:60:44:35:8c:3d:b3:f2:ad:73:66:13:73:20:14: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:C8:C7:C5:28:0A:4F:5A:84:46:3B:55:F0:7E:A1:FE:6C:D6:A5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329651 sbgp-ipAddrBlock: critical IPv4: 102.204.24.0/22 IPv6: 2c0f:7ec0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:18:4f:8e:c2:06:ef:25:5a:a7:35:21:6c:9c:19:e8:db:0e: f6:e4:e1:d0:43:4b:ed:1c:56:95:08:a6:d3:2e:54:ea:90:d8: b1:f2:14:ce:c2:df:4d:2c:8f:8d:13:9f:03:16:08:2b:e2:bc: b6:72:52:44:94:31:45:b6:e2:ad:21:7d:4d:a2:b1:da:ba:e4: a6:93:74:fc:ac:65:63:09:4d:73:ac:4a:0f:b1:b7:90:59:ff: 88:ce:ee:9f:4a:02:35:67:7a:f1:34:a7:33:80:3a:51:ec:73: c2:0b:74:83:8f:62:e0:a1:7e:29:5e:2a:76:cc:38:d2:fd:b7: b4:ff:88:36:d6:da:fb:a5:ab:ba:7e:53:81:83:90:ed:9a:54: 2e:9a:e5:f6:43:4c:f1:55:5e:93:cc:8b:91:67:5a:42:b1:e2: fe:5e:86:a1:04:aa:66:61:d4:b1:01:2a:34:38:d1:28:d2:8c: 7d:9a:06:e6:59:29:3f:5c:0c:14:dd:94:9c:9f:a7:f9:f7:99: f2:dd:4c:d0:d2:9a:68:7c:6d:d5:6c:18:b5:91:0d:7a:68:87: 59:cf:de:d4:3d:21:cb:f0:36:2d:63:5d:a8:9c:03:de:88:7d: a7:1b:0e:ba:50:86:d7:d8:f0:8f:28:1f:60:72:46:84:d7:b1: a6:90:dc:14 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICP4owDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMTQxOTI1MjVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjJBMjc3QUYxMTAvBgNVBAUTKEUwMjFDOEM3QzUyODBBNEY1QTg0NDYz QjU1RjA3RUExRkU2Q0Q2QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo6wW+Mi5YtASAlI/0f6uV7xtn6SvsZ9+PpJLu8tIezbZk3vswi98Flpb+fb1f 9oTz06HQH2Q3K8duiWgTeLjvC7se1LKooFwU0rjqJQDWpF9es1NZMvBc1HNKEDCD cVmm3UXLYvDyTug8y4uAxyALmpZdGxDqqCx2gnOkXsd3h0r41DhKh+bA74/g92tP wKviKerAx26uw5ir6M+I6ytX9rHgoL3sHYA883gM9WjfVE6gd6bKV1xAF/Y8tqPs 8wVg7BPESlKuD+XrXQGzWvZbt5ZVDYrt+GYtT0RRYyip2gPHx7qQzs0LGIATWXNb DidgRDWMPbPyrXNmE3MgFMn5AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU4CHIx8Uo Ck9ahEY7VfB+of5s1qUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyQTI3Ny9DMjU5Mzg5RUYxN0Ux MUYwQTdDRUY1N0VEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MkEyNzcvQzI1OTM4OUVGMTdFMTFGMEE3Q0VGNTdFREFFNEVDOUMvNENISXg4 VW9DazlhaEVZN1ZmQi1vZjVzMXFVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB7MwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzBgwDQQCAAIwBwMF ACwPfsAwDQYJKoZIhvcNAQELBQADggEBAC8YT47CBu8lWqc1IWycGejbDvbk4dBD S+0cVpUIptMuVOqQ2LHyFM7C300sj40TnwMWCCvivLZyUkSUMUW24q0hfU2isdq6 5KaTdPysZWMJTXOsSg+xt5BZ/4jO7p9KAjVnevE0pzOAOlHsc8ILdIOPYuChfile KnbMONL9t7T/iDbW2vulq7p+U4GDkO2aVC6a5fZDTPFVXpPMi5FnWkKx4v5ehqEE qmZh1LEBKjQ40SjSjH2aBuZZKT9cDBTdlJyfp/n3mfLdTNDSmmh8bdVsGLWRDXpo h1nP3tQ9IcvwNi1jXaicA96IfacbDrpQhtfY8I8oH2ByRoTXsaaQ3BQ= -----END CERTIFICATE-----Generated at Sun Jan 25 04:16:44 2026 by rpki-client