This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer File: CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer (raw, json) Hash identifier: 36xFAXJLgaBUpMQYH9DMk5RHY+0jUM31BvkEzA/ePzg= Subject key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38A2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:59:37 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328535 IP: 102.36.212.0/22 IP: 2c0f:d80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14498 (0x38a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:59:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F363763AAF, serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:a9:aa:8d:44:f7:df:42:8a:88:23:a0:81: 2b:10:01:b0:89:fa:b6:b6:1d:d0:5b:88:68:00:a6: 2d:34:99:92:ea:c1:17:95:08:65:1e:a4:4b:98:f8: 30:04:52:1c:04:24:0c:88:3a:41:8b:2a:d6:bf:14: 8f:59:ac:af:2f:46:be:84:88:82:e2:e6:98:65:93: 63:dd:d3:f3:f5:52:10:56:14:cc:7c:e8:cd:da:c8: 15:32:19:38:1b:e3:8b:4b:26:40:fc:bd:12:8b:23: 35:0a:c2:4a:04:c7:b4:a0:6a:58:f0:db:59:18:4a: d6:3f:cc:95:70:84:69:f0:da:ea:8d:46:f1:78:42: 52:d8:ff:ce:75:39:5f:f5:fa:83:28:7d:c5:f6:68: 1e:10:15:0a:1f:2b:15:e0:e2:07:a7:e0:2b:77:74: 5c:e7:d6:a2:57:c4:ce:b0:3a:45:b3:49:0f:da:e5: d7:31:e9:bc:1c:06:60:c2:fc:1d:b0:06:4e:de:2d: 8b:2c:c3:e4:8b:ed:8b:fa:b7:28:88:29:e7:78:7a: 44:83:bf:5d:73:e4:1e:96:7b:51:95:d7:98:2a:cd: 95:88:11:1a:8b:5a:04:56:01:7c:7d:c3:85:b8:c9: ed:f7:6e:f9:3f:4d:68:39:6d:2f:45:e4:6f:93:bc: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328535 sbgp-ipAddrBlock: critical IPv4: 102.36.212.0/22 IPv6: 2c0f:d80::/32 Signature Algorithm: sha256WithRSAEncryption 52:45:6f:74:cc:ee:41:66:03:c2:32:15:e9:42:1f:ce:c0:6f: 2f:9a:67:1f:69:42:30:7b:2b:7b:be:d2:05:03:60:da:79:cf: af:a1:e0:91:b9:dc:63:2d:35:d7:74:b5:8a:92:3a:c6:7d:f5: b7:55:a4:b0:9d:3a:15:17:7f:90:1f:41:5a:0f:1d:3e:d7:90: 2a:9b:e4:59:23:92:90:15:50:84:e0:fe:f5:e0:86:59:b3:20: f9:ad:60:ee:c6:0e:a2:76:19:5a:44:18:6f:be:2d:13:09:58: 08:e7:c9:a0:74:c3:88:e1:2c:fa:d6:19:70:fe:01:e8:81:54: ad:f0:59:f4:ff:3c:0c:a3:55:23:b7:bf:c3:c9:17:21:46:ca: 3b:e0:82:5e:74:f8:ce:ee:81:75:6b:ae:de:93:75:83:1f:bf: 33:3a:53:00:ae:fa:7c:ca:3d:a8:81:61:d8:bf:7e:44:36:67: 33:3a:13:57:d6:f4:43:b3:a8:14:05:d6:36:a2:e0:d8:9a:79: b1:fd:aa:24:27:d5:a0:8a:f5:df:52:c7:06:50:c0:56:79:d4: cb:e5:03:6a:cc:37:cb:7e:aa:22:02:d5:63:d5:b6:f8:77:35: a4:f6:ae:f1:50:b7:ee:4b:97:03:84:3e:d6:04:1d:b8:77:ec: 6e:c1:67:90 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOKIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDU5MzdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjM3NjNBQUYxMTAvBgNVBAUTKDA5OURCQjk5MjhBNUMyOUZBNTkyMkNG REI5NUYxOTBFQzBGQjRBQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOhamqjUT330KKiCOggSsQAbCJ+ra2HdBbiGgApi00mZLqwReVCGUepEuY+DAE UhwEJAyIOkGLKta/FI9ZrK8vRr6EiILi5phlk2Pd0/P1UhBWFMx86M3ayBUyGTgb 44tLJkD8vRKLIzUKwkoEx7Sgaljw21kYStY/zJVwhGnw2uqNRvF4QlLY/851OV/1 +oMofcX2aB4QFQofKxXg4gen4Ct3dFzn1qJXxM6wOkWzSQ/a5dcx6bwcBmDC/B2w Bk7eLYssw+SL7Yv6tyiIKed4ekSDv11z5B6We1GV15gqzZWIERqLWgRWAXx9w4W4 ye33bvk/TWg5bS9F5G+TvHazAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUCZ27mSil wp+lkiz9uV8ZDsD7SsgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzNzYzQS9CNjBBQkQ3MDUzNkYx MUVEODU1RDdBQTJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Mzc2M0EvQjYwQUJENzA1MzZGMTFFRDg1NUQ3QUEyRjEyMjI0NjgvQ1oyN21T aWx3cC1sa2l6OXVWOFpEc0Q3U3NnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA1cwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmJNQwDQQCAAIwBwMF ACwPDYAwDQYJKoZIhvcNAQELBQADggEBAFJFb3TM7kFmA8IyFelCH87Aby+aZx9p QjB7K3u+0gUDYNp5z6+h4JG53GMtNdd0tYqSOsZ99bdVpLCdOhUXf5AfQVoPHT7X kCqb5FkjkpAVUITg/vXghlmzIPmtYO7GDqJ2GVpEGG++LRMJWAjnyaB0w4jhLPrW GXD+AeiBVK3wWfT/PAyjVSO3v8PJFyFGyjvggl50+M7ugXVrrt6TdYMfvzM6UwCu +nzKPaiBYdi/fkQ2ZzM6E1fW9EOzqBQF1jai4NiaebH9qiQn1aCK9d9SxwZQwFZ5 1MvlA2rMN8t+qiIC1WPVtvh3NaT2rvFQt+5LlwOEPtYEHbh37G7BZ5A= -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:57 2026 by rpki-client