This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer File: 4qOmjo-ihl0uVH2MskMPqyH8oG0.cer (raw, json) Hash identifier: qw7Cmz9adM/AiTBb5F2ldAhKFOUEHKFvv0rURItajfU= Subject key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 383B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:40:59 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328925 IP: 102.218.152.0/22 IP: 2c0f:3500::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14395 (0x383b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:40:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:67:6f:33:e8:05:a2:bf:70:3b:f9:fd:4d: 2b:d0:fa:e3:b6:ab:b3:0b:a4:ab:79:98:74:21:3e: 2c:34:04:5c:0b:57:03:c3:34:33:16:66:40:74:91: 79:85:20:9d:53:59:ee:d6:e4:90:87:ca:f7:d7:d6: ff:61:da:d0:e0:ae:b8:f2:ba:bf:df:4e:6d:f7:b3: c7:de:39:c8:b8:37:fc:42:d0:cd:49:70:b2:cc:82: ed:b8:73:d0:30:81:bd:cd:80:d0:74:2f:14:c5:80: de:b4:cb:a9:e4:7b:e5:0e:3f:7d:fc:4c:af:11:c7: 58:88:e7:48:5e:81:fd:60:a4:ee:2f:03:f0:01:ff: 55:72:51:0f:5b:7a:e4:92:51:bd:55:74:d7:b6:48: cf:b4:62:a8:06:75:0f:ca:53:1e:c0:7a:80:af:90: f2:19:ac:09:3d:ac:dc:b4:9f:41:2c:43:9f:28:e7: 8d:9f:71:ec:c4:81:9e:eb:0e:48:b3:bb:f6:b2:47: 28:70:b7:f4:c7:31:d5:d4:d0:a8:1e:b0:ee:0f:2a: 8e:7e:13:66:a0:79:65:db:12:9a:80:38:35:6e:8b: 0e:da:d3:bf:7f:a5:94:69:df:5e:e1:37:08:1e:4b: f1:82:8f:a9:7e:b4:e7:2b:94:5c:0a:41:84:19:9d: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328925 sbgp-ipAddrBlock: critical IPv4: 102.218.152.0/22 IPv6: 2c0f:3500::/32 Signature Algorithm: sha256WithRSAEncryption 40:5e:e6:3b:4b:72:cc:6c:e7:6b:b0:ab:29:66:b8:d1:ef:cd: 1a:0f:c0:f1:77:79:76:15:68:4f:9d:f1:2f:40:ef:54:79:bb: 3a:56:22:58:a0:3f:9e:27:0a:d4:fc:31:e3:a9:4b:3b:a3:8f: 3a:16:2d:3e:b3:b8:83:cf:15:21:71:dd:32:90:9a:f5:20:ea: 9a:05:bf:2a:2e:33:ba:64:15:91:ff:0b:89:70:5d:91:54:2e: 90:cc:8b:25:c4:11:9b:8c:93:70:f9:3f:70:9d:f7:32:17:8a: 2c:57:cd:ef:22:cb:73:c8:2a:38:40:90:fa:f8:74:e0:ca:93: 78:ee:75:13:dd:41:ba:c1:80:cc:40:ca:aa:e6:e8:41:9e:fc: 3c:e6:f1:07:6e:75:88:31:c0:c7:eb:ef:31:7c:6c:40:cd:6e: 29:bf:bb:de:7e:a7:e1:6b:61:d4:88:8c:47:1e:df:3b:f1:fe: cf:a4:e8:ee:ba:7e:af:92:f1:69:e8:db:a1:24:2a:b0:ad:12: 9d:64:0f:a7:27:15:a5:e7:03:3a:0f:4e:d5:34:2f:28:9b:33: 22:4c:73:41:c8:0a:5a:a9:97:17:ee:49:10:e4:bc:23:24:fb: c8:66:2f:3e:25:ec:75:d1:bf:7d:fe:a9:f2:07:1e:93:c7:aa: af:45:df:e0 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICODswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDQwNTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjJBMkUxQUYxMTAvBgNVBAUTKEUyQTNBNjhFOEZBMjg2NUQyRTU0N0Q4 Q0IyNDMwRkFCMjFGQ0EwNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMbGdvM+gFor9wO/n9TSvQ+uO2q7MLpKt5mHQhPiw0BFwLVwPDNDMWZkB0kXmF IJ1TWe7W5JCHyvfX1v9h2tDgrrjyur/fTm33s8feOci4N/xC0M1JcLLMgu24c9Aw gb3NgNB0LxTFgN60y6nke+UOP338TK8Rx1iI50hegf1gpO4vA/AB/1VyUQ9beuSS Ub1VdNe2SM+0YqgGdQ/KUx7AeoCvkPIZrAk9rNy0n0EsQ58o542fcezEgZ7rDkiz u/ayRyhwt/THMdXU0KgesO4PKo5+E2ageWXbEpqAODVuiw7a079/pZRp317hNwge S/GCj6l+tOcrlFwKQYQZnSJzAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU4qOmjo+i hl0uVH2MskMPqyH8oG0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyQTJFMS8wMUM0QUQ1RUY2MTcx MUVDODE5NzU0QUFGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MkEyRTEvMDFDNEFENUVGNjE3MTFFQzgxOTc1NEFBRjEyMjI0NjgvNHFPbWpv LWlobDB1VkgyTXNrTVBxeUg4b0cwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBN0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2pgwDQQCAAIwBwMF ACwPNQAwDQYJKoZIhvcNAQELBQADggEBAEBe5jtLcsxs52uwqylmuNHvzRoPwPF3 eXYVaE+d8S9A71R5uzpWIligP54nCtT8MeOpSzujjzoWLT6zuIPPFSFx3TKQmvUg 6poFvyouM7pkFZH/C4lwXZFULpDMiyXEEZuMk3D5P3Cd9zIXiixXze8iy3PIKjhA kPr4dODKk3judRPdQbrBgMxAyqrm6EGe/Dzm8QdudYgxwMfr7zF8bEDNbim/u95+ p+FrYdSIjEce3zvx/s+k6O66fq+S8Wno26EkKrCtEp1kD6cnFaXnAzoPTtU0Lyib MyJMc0HIClqplxfuSRDkvCMk+8hmLz4l7HXRv33+qfIHHpPHqq9F3+A= -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:39 2026 by rpki-client