This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer File: BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer (raw, json) Hash identifier: ZVxOhRHFlvSn3YUfn1Fu6bl68j8qVVVE34STgU/5n58= Subject key identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3972 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:31:46 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328965 IP: 102.208.241.0/24 IP: 102.218.129.0/24 IP: 2c0f:5300::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14706 (0x3972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:31:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364DD25AF, serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:eb:88:17:54:01:be:0e:11:57:b0:62:4a: fa:68:59:5a:dc:92:e9:71:7b:ff:4c:6f:d4:54:75: 37:e6:66:d6:1d:fd:e9:36:ef:b7:68:c5:56:54:c6: 8a:70:58:f8:fd:7c:86:76:ff:b3:16:f4:44:ff:c6: df:89:2b:29:c0:40:27:c6:cb:0f:33:14:4d:0e:68: 2d:f4:2d:d0:fc:0b:71:1b:0b:fe:b6:a9:2f:db:22: a4:f7:92:98:11:0b:05:56:17:23:86:ae:a6:f5:3d: df:50:55:1e:25:d0:29:24:d7:7e:09:6f:f1:2f:3b: 4f:4e:0e:ef:8a:06:bd:da:db:69:02:37:b9:b3:63: 53:87:f0:4e:6e:57:f2:55:ff:8f:3a:fd:c6:8c:03: dc:e9:64:bd:46:4e:37:19:80:62:c8:da:21:62:5e: 37:3b:17:42:65:22:51:63:55:78:9f:a3:5d:1e:dc: 13:e9:1e:e3:f7:ae:40:44:b3:9e:71:4f:c2:2c:42: ee:9e:33:88:91:38:e1:4a:d9:36:bc:d0:57:46:61: 0c:e0:45:2a:a7:28:c6:cd:1b:43:3e:15:42:b0:ae: e9:0a:91:4e:18:cc:a3:96:e4:c9:bb:f2:9e:69:26: 07:6a:21:14:49:47:99:6f:9a:07:84:46:4b:68:6a: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328965 sbgp-ipAddrBlock: critical IPv4: 102.208.241.0/24 102.218.129.0/24 IPv6: 2c0f:5300::/32 Signature Algorithm: sha256WithRSAEncryption 70:5d:38:67:ac:ef:fd:a7:67:3e:78:91:4b:e0:6d:2a:e1:e5: 3f:6a:ba:19:6e:4d:0c:c0:fb:63:be:f3:8c:4b:c3:58:19:fe: ff:0a:70:4e:58:cc:c6:5d:02:b1:88:cb:8e:a0:b6:51:32:d5: c5:62:f8:3a:7e:7d:df:e1:3c:8d:8c:09:9a:b1:a8:f2:4e:76: d3:58:07:12:98:27:85:2e:4e:de:91:ab:ec:2c:2f:9c:82:2e: f7:67:b7:2e:b9:3c:dd:73:45:21:40:67:56:fd:9b:88:dc:b0: c1:3d:53:4c:21:51:85:93:51:2d:19:0c:ec:38:cb:6c:4a:08: 83:de:33:46:04:64:6a:1e:41:a9:d8:04:60:c2:e4:89:77:86: ac:cd:6b:84:9b:60:01:7a:ab:45:ac:39:f9:a1:99:90:73:32: a6:92:1d:07:cb:04:7f:49:92:80:b1:06:e4:5f:5b:1f:8f:03: b7:17:87:3a:3f:9d:71:82:24:5e:8b:14:f4:3a:48:73:d8:4e: 6d:13:2b:12:84:e5:00:ae:1c:35:9a:14:83:1a:fb:fd:19:0e: 63:7f:d4:51:a5:1d:3e:ca:1a:b0:38:97:ed:90:71:ef:e8:c1: 53:a8:c3:21:45:71:e7:d9:4e:4a:32:91:1e:93:79:00:0a:0e: 35:83:be:f6 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOXIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTMxNDZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjRERDI1QUYxMTAvBgNVBAUTKDA0RDZDQUMyM0IxNDVCNjZFRDY4QkVE NjdGMkMxRDg3NjY1Q0Y1QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9XeuIF1QBvg4RV7BiSvpoWVrckulxe/9Mb9RUdTfmZtYd/ek277doxVZUxopw WPj9fIZ2/7MW9ET/xt+JKynAQCfGyw8zFE0OaC30LdD8C3EbC/62qS/bIqT3kpgR CwVWFyOGrqb1Pd9QVR4l0Ckk134Jb/EvO09ODu+KBr3a22kCN7mzY1OH8E5uV/JV /486/caMA9zpZL1GTjcZgGLI2iFiXjc7F0JlIlFjVXifo10e3BPpHuP3rkBEs55x T8IsQu6eM4iROOFK2Ta80FdGYQzgRSqnKMbNG0M+FUKwrukKkU4YzKOW5Mm78p5p JgdqIRRJR5lvmgeERktoagjnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUBNbKwjsU W2btaL7Wfywdh2Zc9bIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0REQyNS9GMzAyNzNGQTUyOUQx MUYwOTU1ODJFQUFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NEREMjUvRjMwMjczRkE1MjlEMTFGMDk1NTgyRUFBREFFNEVDOUMvQk5iS3dq c1VXMmJ0YUw3V2Z5d2RoMlpjOWJJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBQUwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBABm0PEDBABm2oEwDQQC AAIwBwMFACwPUwAwDQYJKoZIhvcNAQELBQADggEBAHBdOGes7/2nZz54kUvgbSrh 5T9quhluTQzA+2O+84xLw1gZ/v8KcE5YzMZdArGIy46gtlEy1cVi+Dp+fd/hPI2M CZqxqPJOdtNYBxKYJ4UuTt6Rq+wsL5yCLvdnty65PN1zRSFAZ1b9m4jcsME9U0wh UYWTUS0ZDOw4y2xKCIPeM0YEZGoeQanYBGDC5Il3hqzNa4SbYAF6q0WsOfmhmZBz MqaSHQfLBH9JkoCxBuRfWx+PA7cXhzo/nXGCJF6LFPQ6SHPYTm0TKxKE5QCuHDWa FIMa+/0ZDmN/1FGlHT7KGrA4l+2Qce/owVOowyFFcefZTkoykR6TeQAKDjWDvvY= -----END CERTIFICATE-----Generated at Sun Jan 25 13:44:13 2026 by rpki-client