This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer File: CFZSep0iAmz-gRG6M4cl_B6GyqA.cer (raw, json) Hash identifier: ZaYcb025DroEj3TUPRxnfkfTq3azS6cm/2pob6WgJmY= Subject key identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C3B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:16:39 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328482 IP: 102.67.152.0/22 IP: 2c0f:ed90::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15419 (0x3c3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:16:39 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36993D4AF, serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:a8:39:82:55:4f:3f:be:0f:93:df:4b:8f: 9a:6a:a6:9c:b6:51:f1:ac:04:05:06:23:46:60:7b: 51:c6:b2:4c:78:5b:fb:68:28:b8:02:79:20:43:19: bb:93:63:90:54:ee:46:f7:f4:ee:74:11:31:58:e9: fc:36:12:48:3a:38:76:13:5d:6e:f0:bb:29:1d:e1: e0:3a:5a:73:f1:72:c1:a2:78:a3:5e:61:ff:59:6f: 2d:ce:ce:dd:22:57:c4:b8:1d:72:64:7a:b9:10:0e: 20:ca:71:94:0b:fa:d0:b2:94:b2:af:b7:12:fa:78: c8:09:a7:52:8f:0f:73:5b:86:14:b5:fb:0d:16:1e: b8:13:da:22:c6:7f:f3:68:48:06:6f:d8:50:24:7e: da:57:c7:7c:f1:83:e4:55:1f:be:12:d4:fd:e7:44: 4e:c9:29:82:3d:d0:d5:7e:74:51:83:72:be:19:0d: f7:ea:03:46:ad:f4:b5:f6:e4:ad:83:d9:c2:47:dc: ca:88:f3:18:3d:46:fb:83:6a:cf:0d:74:86:2d:43: c5:dc:69:0e:b9:b1:f6:b5:4f:a0:cc:b4:43:89:e7: c6:5d:6b:4f:61:ca:03:2b:4f:80:8b:d9:61:9e:27: aa:1f:38:3e:82:16:81:ef:31:05:8e:23:0d:22:b8: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328482 sbgp-ipAddrBlock: critical IPv4: 102.67.152.0/22 IPv6: 2c0f:ed90::/32 Signature Algorithm: sha256WithRSAEncryption 49:51:67:a0:83:66:2c:9e:2d:9d:a7:88:fd:cf:7f:f6:4a:7a: 5d:1d:fc:b2:07:3c:df:51:42:2c:92:19:14:98:68:87:25:cc: 92:c8:15:73:dc:b8:0c:08:88:31:dd:37:28:cc:05:07:99:bc: 6e:56:15:42:17:d5:97:66:2a:46:29:bf:ff:fc:12:ba:16:68: fa:9d:42:d0:d5:5a:ee:50:b7:e7:e7:60:ee:52:31:87:92:44: 2a:ca:3f:3d:f0:54:a6:17:7c:d5:32:a9:52:d8:c1:b9:ca:4c: 04:2a:ff:ee:31:ad:1b:ff:18:d8:2e:3b:c3:aa:01:94:82:93: 81:8d:09:e8:a8:04:ea:d9:64:eb:27:07:2d:4d:b4:80:54:ee: da:3d:38:12:19:fc:bf:fa:89:70:f3:41:5b:0e:ae:73:75:d8: 8a:89:4f:dd:e9:8c:c1:c2:29:d2:39:54:4d:aa:52:ad:1e:ab: b0:25:c2:94:32:2f:5f:fe:a2:42:cb:a1:4b:45:81:1e:ac:67: f2:2a:00:45:96:b9:33:28:38:21:df:68:14:01:f0:1a:96:9d: 85:67:e9:fe:ab:5f:77:39:b1:bb:cc:17:5c:da:1e:e3:02:18: 68:78:e5:fb:73:cd:0d:1b:58:26:51:96:9c:ac:2a:42:e2:1f: d8:a2:c8:2c -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPDswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzE2MzlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk5M0Q0QUYxMTAvBgNVBAUTKDA4NTY1MjdBOUQyMjAyNkNGRTgxMTFC QTMzODcyNUZDMUU4NkNBQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ/qg5glVPP74Pk99Lj5pqppy2UfGsBAUGI0Zge1HGskx4W/toKLgCeSBDGbuT Y5BU7kb39O50ETFY6fw2Ekg6OHYTXW7wuykd4eA6WnPxcsGieKNeYf9Zby3Ozt0i V8S4HXJkerkQDiDKcZQL+tCylLKvtxL6eMgJp1KPD3NbhhS1+w0WHrgT2iLGf/No SAZv2FAkftpXx3zxg+RVH74S1P3nRE7JKYI90NV+dFGDcr4ZDffqA0at9LX25K2D 2cJH3MqI8xg9RvuDas8NdIYtQ8XcaQ65sfa1T6DMtEOJ58Zda09hygMrT4CL2WGe J6ofOD6CFoHvMQWOIw0iuJ3NAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUCFZSep0i Amz+gRG6M4cl/B6GyqAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5OTNENC80QTczNEI4MjJGQ0Ix MUYwOUM5QjBEQkNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTkzRDQvNEE3MzRCODIyRkNCMTFGMDlDOUIwREJDREFFNEVDOUMvQ0ZaU2Vw MGlBbXotZ1JHNk00Y2xfQjZHeXFBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAyIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmQ5gwDQQCAAIwBwMF ACwP7ZAwDQYJKoZIhvcNAQELBQADggEBAElRZ6CDZiyeLZ2niP3Pf/ZKel0d/LIH PN9RQiySGRSYaIclzJLIFXPcuAwIiDHdNyjMBQeZvG5WFUIX1ZdmKkYpv//8EroW aPqdQtDVWu5Qt+fnYO5SMYeSRCrKPz3wVKYXfNUyqVLYwbnKTAQq/+4xrRv/GNgu O8OqAZSCk4GNCeioBOrZZOsnBy1NtIBU7to9OBIZ/L/6iXDzQVsOrnN12IqJT93p jMHCKdI5VE2qUq0eq7AlwpQyL1/+okLLoUtFgR6sZ/IqAEWWuTMoOCHfaBQB8BqW nYVn6f6rX3c5sbvMF1zaHuMCGGh45ftzzQ0bWCZRlpysKkLiH9iiyCw= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:22 2026 by rpki-client