This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer File: Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer (raw, json) Hash identifier: JmBS2XTBMufde+JcMKoBJfqAve8/sEj8Hhy5JByPtDI= Subject key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F19 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:12:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328256 IP: 102.176.240.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16153 (0x3f19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:12:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:4f:8c:b3:05:87:aa:f0:4f:1e:fc:f5:67: 8c:92:7e:62:46:00:ac:3a:eb:29:1b:8c:41:f9:52: 4c:55:06:e2:bd:ac:3b:2e:b7:7e:2a:ad:04:a5:82: d2:09:d6:d2:27:ca:db:20:73:7c:e8:3e:3f:ff:47: 47:10:66:c4:3a:f0:ec:f4:87:fe:74:f2:c4:70:26: c1:c8:06:ca:10:e3:de:d4:0b:37:59:4f:23:46:74: 52:09:98:e7:fc:b8:69:48:8a:e2:94:55:8c:d6:2e: 49:ab:f3:e6:9b:7c:01:20:20:ab:ad:58:00:50:b8: 16:66:2a:ec:b2:73:1f:96:e6:d2:d4:10:6f:20:cb: a8:21:1c:6a:1b:25:d8:4b:2e:45:c6:2b:d3:76:d7: 12:1d:0d:b6:3b:3b:0d:9c:cc:ef:c4:7b:bc:fb:5b: ae:96:a6:3f:51:bd:e5:b4:87:45:10:36:8f:6e:8a: e6:c8:31:e7:b6:08:20:34:8b:fa:8c:d6:f2:2e:3a: c1:88:62:a7:4e:63:26:d3:45:78:05:68:0b:f4:cd: c4:d8:89:7b:54:0d:0a:52:dd:67:aa:77:fd:19:8d: 7d:c6:1f:26:44:3d:05:77:84:2e:a6:f4:08:59:f8: 4e:ae:a4:cb:1d:8b:0e:50:79:b5:fc:60:b4:67:c5: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328256 sbgp-ipAddrBlock: critical IPv4: 102.176.240.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:96:58:11:ee:76:e3:32:08:1e:f0:f8:da:05:02:24:ed:e1: 7f:69:1e:f8:e9:c4:c4:8a:ef:04:57:60:ac:4e:2d:52:33:c1: 24:bf:e3:c6:3a:f6:47:47:93:3c:ec:12:f1:33:da:67:b7:e8: 84:75:6f:c5:da:c1:f7:04:f3:ad:42:86:b9:50:44:e3:af:6b: 6b:f5:10:35:6e:58:56:b3:e6:62:f6:8d:17:a5:3b:1b:3a:c9: 2a:83:8c:5a:28:4a:f9:e3:9a:5c:3b:1c:6f:50:96:43:72:c2: a1:94:d6:ee:6e:05:fc:67:d6:05:98:c4:a3:65:ab:c2:b3:04: 64:22:27:c9:5b:6b:a1:18:38:84:64:96:59:0c:f2:d5:9e:1c: f5:83:0d:fa:b8:64:7e:2a:36:e3:f9:6c:07:b5:e4:c2:5f:07: b7:8f:c4:14:10:49:9e:de:c2:49:ae:6e:9d:35:19:99:a6:63: 31:0f:e8:bf:3e:a4:94:9c:d5:09:f5:ee:c3:bd:e5:4d:16:32: 32:9a:1e:a2:5b:e8:ea:93:de:88:0c:29:79:6e:6b:94:e7:3a: af:04:ef:fd:37:19:51:ae:e5:ff:03:0f:21:94:94:a9:c3:fa: 47:f2:0b:af:93:bd:ff:cf:61:ad:4e:fd:b2:20:c5:09:49:68: 5f:00:9b:74 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICPxkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTEyNDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY4NDM0QUYxMTAvBgNVBAUTKDBBMUQxRDRFM0IxNzBGOTRGOEFFNzBB RTQyQTk0QkUxQkU5QkExREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbN0+MswWHqvBPHvz1Z4ySfmJGAKw66ykbjEH5UkxVBuK9rDsut34qrQSlgtIJ 1tInytsgc3zoPj//R0cQZsQ68Oz0h/508sRwJsHIBsoQ497UCzdZTyNGdFIJmOf8 uGlIiuKUVYzWLkmr8+abfAEgIKutWABQuBZmKuyycx+W5tLUEG8gy6ghHGobJdhL LkXGK9N21xIdDbY7Ow2czO/Ee7z7W66Wpj9RveW0h0UQNo9uiubIMee2CCA0i/qM 1vIuOsGIYqdOYybTRXgFaAv0zcTYiXtUDQpS3Weqd/0ZjX3GHyZEPQV3hC6m9AhZ +E6upMsdiw5QebX8YLRnxS21AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUCh0dTjsX D5T4rnCuQqlL4b6bod4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGODQzNC9CMEYzMTlFNkRGODEx MUVFOEI1RkVBNkQ3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Rjg0MzQvQjBGMzE5RTZERjgxMTFFRThCNUZFQTZENzc1NDEyRTYvQ2gwZFRq c1hENVQ0cm5DdVFxbEw0YjZib2Q0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAkAwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmsPAwDQYJKoZIhvcN AQELBQADggEBAEuWWBHuduMyCB7w+NoFAiTt4X9pHvjpxMSK7wRXYKxOLVIzwSS/ 48Y69kdHkzzsEvEz2me36IR1b8XawfcE861ChrlQROOva2v1EDVuWFaz5mL2jRel Oxs6ySqDjFooSvnjmlw7HG9QlkNywqGU1u5uBfxn1gWYxKNlq8KzBGQiJ8lba6EY OIRkllkM8tWeHPWDDfq4ZH4qNuP5bAe15MJfB7ePxBQQSZ7ewkmubp01GZmmYzEP 6L8+pJSc1Qn17sO95U0WMjKaHqJb6OqT3ogMKXlua5TnOq8E7/03GVGu5f8DDyGU lKnD+kfyC6+Tvf/PYa1O/bIgxQlJaF8Am3Q= -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:04 2026 by rpki-client