This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer File: 7PbzU5pP4IyibRf5jcsVmgR8v-g.cer (raw, json) Hash identifier: hCaE2TQQe4hSkHUznGTpB1hBruwk4E5e2KMmtF3Ixe8= Subject key identifier: EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A3C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:03:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328501 IP: 102.64.112.0/23 IP: 102.216.36.0/23 IP: 2001:43f8:13b0::/47 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14908 (0x3a3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:03:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3662F58AF, serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:98:41:fc:e6:6c:48:22:f3:36:d1:b1:8f:d4: c7:30:f6:40:f3:d4:2e:d4:87:11:1b:d5:fa:c5:87: 12:c9:ca:8d:54:07:a7:66:08:a9:6e:10:d1:3b:61: 25:0b:4e:60:c1:32:dc:0f:34:1a:ae:c8:cf:1d:08: 33:56:42:50:1d:ae:40:2b:12:29:6e:e0:f0:30:04: 36:69:66:30:65:b4:a4:83:c6:68:86:4b:8f:c4:6a: dc:0f:de:02:97:8f:85:6a:87:ab:f0:a8:27:73:bc: 18:cc:0c:d7:c3:68:43:24:b2:d4:84:d0:1f:68:26: e3:f0:96:65:5e:30:ba:90:f5:fb:71:13:46:4c:d9: d6:c4:68:92:61:cb:3d:d2:32:69:d7:53:98:68:68: 85:9c:6f:51:21:29:97:2a:6b:3a:4a:ea:ed:74:95: 11:3b:a6:47:7c:c2:ec:75:cf:70:08:2f:7d:b2:78: 80:71:c6:d2:f0:77:37:f8:9e:e4:a0:2c:41:dc:64: 27:aa:a9:1c:9b:37:ae:f6:29:a1:ec:e7:64:7c:19: 62:84:8e:0a:45:8f:37:4d:09:96:26:62:13:30:48: c1:2b:cf:7d:ad:5c:4c:5a:dc:19:32:db:17:22:79: ad:d7:b2:54:fb:d7:d2:47:5d:c1:63:b3:6e:11:81: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328501 sbgp-ipAddrBlock: critical IPv4: 102.64.112.0/23 102.216.36.0/23 IPv6: 2001:43f8:13b0::/47 Signature Algorithm: sha256WithRSAEncryption b9:8b:33:b0:34:a2:36:3b:a1:07:d3:81:25:fd:27:1f:df:8f: 8a:6c:ff:b6:ad:10:f7:70:e3:c6:fe:9b:c1:e6:1b:c6:8b:66: 7e:5f:d0:58:82:ab:2b:82:9d:63:bf:46:df:ae:8b:05:7c:78: c1:2a:6b:6c:a5:08:6b:a2:89:a8:6f:1f:a6:10:e6:a6:5e:25: d2:68:71:d2:5f:18:d9:e9:68:82:e9:fd:75:78:7b:46:5a:91: 59:fd:7a:75:c4:1d:da:df:93:bd:c3:61:29:47:9a:56:a6:35: 08:d4:a2:e6:02:8b:ee:b7:19:49:2f:47:bf:b7:30:6d:62:13: 92:f1:18:04:a1:fa:fa:96:1c:69:71:3f:9a:ff:f9:9f:e9:4f: 7d:99:82:00:6c:49:f2:1d:cb:60:20:d3:18:7d:ee:cc:29:ae: 42:2d:73:36:76:28:e4:15:30:22:24:8a:b7:5a:26:8c:ee:72: a5:84:ec:66:4f:f9:9f:34:8f:05:1f:a7:44:46:3e:25:a1:1a: 16:a4:f2:38:61:cb:a5:c9:9e:c1:80:c6:a4:d5:ed:91:6d:a0: 4c:ef:75:3c:f8:47:1f:fa:85:97:1a:a7:8f:9c:b6:d3:5a:20: cc:99:4a:5c:d8:30:5f:ec:62:39:09:d3:12:bb:c0:1e:ac:df: 9d:50:88:4a -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgICOjwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjAzMTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjYyRjU4QUYxMTAvBgNVBAUTKEVDRjZGMzUzOUE0RkUwOENBMjZEMTdG OThEQ0IxNTlBMDQ3Q0JGRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjmEH85mxIIvM20bGP1Mcw9kDz1C7UhxEb1frFhxLJyo1UB6dmCKluENE7YSUL TmDBMtwPNBquyM8dCDNWQlAdrkArEilu4PAwBDZpZjBltKSDxmiGS4/EatwP3gKX j4Vqh6vwqCdzvBjMDNfDaEMkstSE0B9oJuPwlmVeMLqQ9ftxE0ZM2dbEaJJhyz3S MmnXU5hoaIWcb1EhKZcqazpK6u10lRE7pkd8wux1z3AIL32yeIBxxtLwdzf4nuSg LEHcZCeqqRybN672KaHs52R8GWKEjgpFjzdNCZYmYhMwSMErz32tXExa3Bky2xci ea3XslT719JHXcFjs24RgbIpAgMBAAGjggMiMIIDHjAdBgNVHQ4EFgQU7PbzU5pP 4IyibRf5jcsVmgR8v+gwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2MkY1OC83NTk0RUJGMjQ5ODcx MUVBOTY5Qzk0NTRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjJGNTgvNzU5NEVCRjI0OTg3MTFFQTk2OUM5NDU0RjhBRUEyMjgvN1BielU1 cFA0SXlpYlJmNWpjc1ZtZ1I4di1nLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAzUwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBAFmQHADBAFm2CQwDwQC AAIwCQMHASABQ/gTsDANBgkqhkiG9w0BAQsFAAOCAQEAuYszsDSiNjuhB9OBJf0n H9+Pimz/tq0Q93Djxv6bweYbxotmfl/QWIKrK4KdY79G366LBXx4wSprbKUIa6KJ qG8fphDmpl4l0mhx0l8Y2elogun9dXh7RlqRWf16dcQd2t+TvcNhKUeaVqY1CNSi 5gKL7rcZSS9Hv7cwbWITkvEYBKH6+pYcaXE/mv/5n+lPfZmCAGxJ8h3LYCDTGH3u zCmuQi1zNnYo5BUwIiSKt1omjO5ypYTsZk/5nzSPBR+nREY+JaEaFqTyOGHLpcme wYDGpNXtkW2gTO91PPhHH/qFlxqnj5y201ogzJlKXNgwX+xiOQnTErvAHqzfnVCI Sg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:55 2026 by rpki-client