This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer File: DD2lBSocT7aPxjEmUGBjsCoEIWY.cer (raw, json) Hash identifier: ZxD3+mkB/4WOFxX85Nbo+aWwIFJSM+0S6r0tAA7VKZw= Subject key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AE9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:27:46 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328888 IP: 102.206.100.0/22 IP: 102.214.20.0/22 IP: 102.219.8.0/22 IP: 2c0f:1500::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15081 (0x3ae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:27:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b2:eb:22:5e:63:21:4f:39:c0:4f:ee:aa:73: 77:a1:b6:a4:42:9b:0e:21:0d:54:ef:9e:76:c9:0b: 42:3d:91:59:11:d4:05:04:e1:28:c7:d3:5d:f4:6f: b7:3c:ad:cb:3f:92:af:67:a8:14:92:31:d3:f9:b6: bf:54:4e:90:4d:06:fb:b4:b8:b7:e5:6b:14:b8:37: d3:70:ca:66:d4:53:31:d6:69:5f:22:58:2b:a5:be: 7f:8f:db:54:04:da:05:86:8c:85:01:f6:8a:7a:5a: 92:40:ff:c7:c1:3e:8c:35:ed:ff:d4:72:f1:f6:fa: 1a:c8:e3:f4:57:7f:20:8c:f1:c4:79:13:a8:ec:9f: ec:fd:9d:33:e8:1d:db:e0:b1:c9:9d:d6:83:67:7d: c5:eb:68:18:23:6e:cd:ca:ba:a3:e8:d3:b5:7a:e8: 53:68:98:7e:0d:1b:a6:c4:9e:a0:dd:5f:9a:ae:8b: 7e:4a:c8:e1:3d:05:02:a6:eb:d4:3e:ae:04:74:6d: c9:74:e4:a7:f4:33:57:35:1c:37:01:53:aa:c7:3f: a2:a6:46:f0:16:9c:40:54:aa:cf:71:ed:dd:98:1c: e6:8c:25:ba:db:48:1d:0a:e8:76:15:49:11:09:d5: fe:bb:e9:ef:d9:f3:c1:ca:8f:16:30:39:f8:55:60: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328888 sbgp-ipAddrBlock: critical IPv4: 102.206.100.0/22 102.214.20.0/22 102.219.8.0/22 IPv6: 2c0f:1500::/32 Signature Algorithm: sha256WithRSAEncryption 75:33:5d:92:ee:61:fc:f0:cc:0a:02:2a:80:29:df:20:23:d7: 2d:03:52:03:76:b8:25:c8:f1:da:61:a1:0a:78:68:b5:b6:20: 07:f2:23:34:a8:00:d2:20:84:c3:98:c5:0e:00:2f:9b:96:d5: c5:7e:04:80:00:e6:90:19:c9:e7:31:ec:db:0a:eb:f2:60:82: 47:cb:b3:f2:3e:06:7f:81:9b:83:fd:9f:21:fa:87:e0:ee:76: 6b:c7:1d:14:31:44:b8:48:ef:a1:60:6c:e6:c5:5e:4e:61:68: 09:4b:52:ef:e8:00:84:58:c8:03:c7:16:c6:9d:78:1b:48:02: 47:0b:75:2e:30:05:ab:02:e1:cc:82:e2:03:21:32:82:5d:4b: 23:f3:a3:c3:fb:bc:3d:bf:79:db:6b:f8:20:3e:3f:7d:08:72: 1b:bd:28:ef:44:ad:7b:e4:b2:71:3e:43:05:a1:6e:b0:dd:7e: ff:06:41:ab:2f:e2:51:54:fc:2e:78:a0:7e:2f:c4:d9:1b:a2: e8:ad:2b:8f:ec:00:7b:62:bc:b4:8b:9e:99:8f:f3:e2:08:af: 1e:51:b4:8b:77:ba:73:f2:d2:2d:2b:28:bf:ea:71:0f:73:42: 7b:bb:14:b4:b4:5a:ed:e4:06:2d:1c:53:82:73:29:96:f9:25: 72:3e:e8:b1 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOukwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjI3NDZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc0REE3QUYxMTAvBgNVBAUTKDBDM0RBNTA1MkExQzRGQjY4RkM2MzEy NjUwNjA2M0IwMkEwNDIxNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwsusiXmMhTznAT+6qc3ehtqRCmw4hDVTvnnbJC0I9kVkR1AUE4SjH0130b7c8 rcs/kq9nqBSSMdP5tr9UTpBNBvu0uLflaxS4N9NwymbUUzHWaV8iWCulvn+P21QE 2gWGjIUB9op6WpJA/8fBPow17f/UcvH2+hrI4/RXfyCM8cR5E6jsn+z9nTPoHdvg scmd1oNnfcXraBgjbs3KuqPo07V66FNomH4NG6bEnqDdX5qui35KyOE9BQKm69Q+ rgR0bcl05Kf0M1c1HDcBU6rHP6KmRvAWnEBUqs9x7d2YHOaMJbrbSB0K6HYVSREJ 1f676e/Z88HKjxYwOfhVYHPzAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUDD2lBSoc T7aPxjEmUGBjsCoEIWYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NERBNy9DNjYxRUU2RTE0QjMx MUVEQTEyMzY4RjJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzREQTcvQzY2MUVFNkUxNEIzMTFFREExMjM2OEYyRjEyMjI0NjgvREQybEJT b2NUN2FQeGpFbVVHQmpzQ29FSVdZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBLgwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmzmQDBAJm1hQDBAJm 2wgwDQQCAAIwBwMFACwPFQAwDQYJKoZIhvcNAQELBQADggEBAHUzXZLuYfzwzAoC KoAp3yAj1y0DUgN2uCXI8dphoQp4aLW2IAfyIzSoANIghMOYxQ4AL5uW1cV+BIAA 5pAZyecx7NsK6/JggkfLs/I+Bn+Bm4P9nyH6h+DudmvHHRQxRLhI76FgbObFXk5h aAlLUu/oAIRYyAPHFsadeBtIAkcLdS4wBasC4cyC4gMhMoJdSyPzo8P7vD2/edtr +CA+P30Ichu9KO9ErXvksnE+QwWhbrDdfv8GQasv4lFU/C54oH4vxNkbouitK4/s AHtivLSLnpmP8+IIrx5RtIt3unPy0i0rKL/qcQ9zQnu7FLS0Wu3kBi0cU4JzKZb5 JXI+6LE= -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:58 2026 by rpki-client