This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer File: Bal449VH9Vk-SwMZcDhZhpRQWMY.cer (raw, json) Hash identifier: +9c8bkTdCmA67weNyPuKHsw6ayxQm34StJegxSpoZwA= Subject key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3883 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:55:12 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328716 IP: 102.222.120.0/22 IP: 2c0f:e948::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14467 (0x3883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:55:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:e3:32:83:a2:3d:4c:f0:c5:ab:ee:c2:f6: 0a:d1:5b:18:06:71:0c:32:79:ea:e5:f6:a9:47:2c: 14:18:b5:5b:41:71:ad:3e:ed:88:9e:31:07:2d:1e: 9b:a6:cf:d7:7b:80:45:57:8b:c9:13:6d:af:86:4f: bd:91:53:40:9e:13:d8:5a:20:7f:13:e9:f4:84:f2: 11:9c:a4:24:1b:b4:ef:90:f4:ec:98:f9:12:6e:5c: 5f:42:ee:c6:f8:b5:d0:ad:77:76:97:2c:4d:3a:62: d0:02:6f:0e:28:0b:64:2f:2e:d9:7e:53:19:a9:5e: 58:7e:ed:85:a9:64:73:ff:e9:62:02:d2:83:0d:19: b2:18:16:17:44:a2:01:00:06:c3:7b:a6:ae:5c:67: 10:6c:b2:52:ae:8e:e3:5e:8c:e2:da:21:4d:2c:f7: 1d:c8:7e:02:40:78:e3:e1:21:78:98:57:6f:a9:76: 4e:d4:7c:5f:fe:0b:44:68:47:13:b3:0a:5c:17:52: ec:b1:4b:c5:1d:81:82:4e:c8:e2:67:c0:8b:c9:97: a9:f5:d3:94:a3:ec:0e:13:fa:69:dd:02:21:3f:f3: ca:ad:01:74:16:7f:9d:7a:ee:d6:12:24:05:80:6a: 99:0d:73:78:05:af:e7:63:ee:b2:73:d8:c7:e2:fd: 78:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328716 sbgp-ipAddrBlock: critical IPv4: 102.222.120.0/22 IPv6: 2c0f:e948::/32 Signature Algorithm: sha256WithRSAEncryption 68:1c:78:fd:d5:5a:61:e3:e1:07:7c:e9:d7:b9:e3:cf:09:2c: 1f:66:02:3a:f7:7d:9e:65:7b:0b:09:29:3e:52:ba:1b:fd:13: 2e:ac:6a:23:c0:57:93:77:47:92:32:9c:87:3c:09:ad:dc:21: 6b:34:a7:7a:cd:bf:b8:74:90:f4:ea:ea:85:c2:d2:97:32:82: b7:b5:2b:f2:9d:4e:f6:f7:8d:9c:1a:9f:58:e6:67:32:50:5c: 54:54:3e:ec:05:91:63:3c:03:92:00:f1:66:7d:46:bd:7f:a6: 9a:db:7f:8a:62:56:d8:9c:51:46:b7:86:dd:ad:bc:7f:1a:25: f0:84:1a:19:40:59:fe:0b:e1:9e:c0:d6:4e:b6:46:e6:50:17: 79:6c:52:c5:81:a1:83:01:87:b7:05:e0:de:1e:42:3c:f9:b5: bd:07:d8:e6:60:e2:ca:05:90:b5:7f:38:b7:77:ec:cb:6d:b7: 1b:82:8a:ba:de:8b:c0:91:ae:51:a5:c5:af:0c:54:3a:b4:16: 92:a5:98:00:f7:a7:83:71:c7:9d:1e:21:e1:64:b8:e9:ac:97: 65:9c:55:56:17:16:56:ee:6b:96:9e:78:33:d9:b3:5f:73:b1: 41:8a:ea:d9:dd:18:18:80:39:8b:74:52:49:03:72:78:92:1a: e7:35:bd:64 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOIMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDU1MTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjMyMzVEQUYxMTAvBgNVBAUTKDA1QTk3OEUzRDU0N0Y1NTkzRTRCMDMx OTcwMzg1OTg2OTQ1MDU4QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+IeMyg6I9TPDFq+7C9grRWxgGcQwyeerl9qlHLBQYtVtBca0+7YieMQctHpum z9d7gEVXi8kTba+GT72RU0CeE9haIH8T6fSE8hGcpCQbtO+Q9OyY+RJuXF9C7sb4 tdCtd3aXLE06YtACbw4oC2QvLtl+UxmpXlh+7YWpZHP/6WIC0oMNGbIYFhdEogEA BsN7pq5cZxBsslKujuNejOLaIU0s9x3IfgJAeOPhIXiYV2+pdk7UfF/+C0RoRxOz ClwXUuyxS8UdgYJOyOJnwIvJl6n105Sj7A4T+mndAiE/88qtAXQWf5167tYSJAWA apkNc3gFr+dj7rJz2Mfi/XivAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUBal449VH 9Vk+SwMZcDhZhpRQWMYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMjM1RC82NzdDRkRFQzRDMzkx MUYwODNFQzMzOTdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzIzNUQvNjc3Q0ZERUM0QzM5MTFGMDgzRUMzMzk3REFFNEVDOUMvQmFsNDQ5 Vkg5VmstU3dNWmNEaFpocFJRV01ZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBAwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3ngwDQQCAAIwBwMF ACwP6UgwDQYJKoZIhvcNAQELBQADggEBAGgceP3VWmHj4Qd86de5488JLB9mAjr3 fZ5lewsJKT5Suhv9Ey6saiPAV5N3R5IynIc8Ca3cIWs0p3rNv7h0kPTq6oXC0pcy gre1K/KdTvb3jZwan1jmZzJQXFRUPuwFkWM8A5IA8WZ9Rr1/pprbf4piVticUUa3 ht2tvH8aJfCEGhlAWf4L4Z7A1k62RuZQF3lsUsWBoYMBh7cF4N4eQjz5tb0H2OZg 4soFkLV/OLd37MtttxuCirrei8CRrlGlxa8MVDq0FpKlmAD3p4Nxx50eIeFkuOms l2WcVVYXFlbua5aeeDPZs19zsUGK6tndGBiAOYt0UkkDcniSGuc1vWQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:03 2026 by rpki-client