This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer File: DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer (raw, json) Hash identifier: 4m3k4wwVXaDTDoPzJwxiXRq7Ci2Z9EtUhwYMHWR7DHE= Subject key identifier: 0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 379C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:12:35 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.217.96.0/22 IP: 2c0f:3700::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14236 (0x379c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:12:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36177FDAF, serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a6:35:b4:46:7f:50:c6:ed:04:02:91:9e:5d: 45:85:56:e0:e9:cf:6a:2a:ac:87:a3:db:cf:1f:59: db:b1:97:23:61:a0:88:61:08:26:d8:a9:93:29:54: c9:24:86:d0:de:82:61:11:7c:77:4d:5a:e1:eb:bf: 76:b8:35:f0:20:ca:b0:6d:d6:7f:6c:e2:18:b5:40: e9:4f:66:c8:8d:69:38:f9:b6:98:a7:8b:94:fa:4f: 74:2f:ef:c9:0a:21:09:a1:83:d0:26:84:cd:e8:75: b6:40:84:ab:80:9d:6f:11:b2:71:33:e6:1d:81:c0: ba:e0:90:f6:bc:d4:26:b9:4c:d4:2e:00:58:76:b8: 16:0b:b7:29:ea:95:d5:e2:71:23:77:df:aa:47:37: 6a:d6:0a:81:f5:86:1f:d6:0c:85:4d:6e:62:3d:66: 3d:8e:eb:17:20:60:b7:aa:8c:10:fa:af:1a:ee:7a: c2:d6:35:53:6c:29:44:b2:78:79:f8:70:d5:c1:35: 4c:84:33:e0:d7:4c:72:88:cc:85:e0:ce:54:64:be: 30:22:fb:cb:e5:9b:46:ac:20:1d:fc:72:93:1a:a9: f6:4d:90:54:63:5a:a9:67:3d:a8:73:fa:0b:2d:e8: eb:3b:d5:46:92:0d:a2:9e:a1:5b:25:76:9b:da:96: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft sbgp-ipAddrBlock: critical IPv4: 102.217.96.0/22 IPv6: 2c0f:3700::/32 Signature Algorithm: sha256WithRSAEncryption b9:c7:64:19:2b:cc:9c:0d:73:d1:c3:2f:21:16:65:ff:f1:bb: 4b:81:b4:4b:f2:6e:33:de:88:16:44:e5:16:49:06:e6:db:05: de:52:9a:88:7a:2a:08:b0:2a:85:e6:f9:04:1c:13:5c:55:0b: 2d:1f:c0:0e:79:4c:4f:35:59:54:7e:f7:5a:1a:df:78:4c:c3: b7:a2:6d:f3:83:a7:87:26:fd:49:6e:bb:c3:7c:7f:70:37:95: f6:b7:49:15:b5:ff:da:ee:54:77:a3:24:6a:d4:2e:9b:f4:84: 31:e2:74:10:de:3e:a3:63:a8:81:f9:6f:64:62:d3:e6:39:2e: 78:ce:7a:72:26:b9:8e:65:39:af:db:cf:6c:5f:29:b6:ba:aa: c1:79:14:45:31:26:80:44:c2:6f:59:c3:ec:60:46:46:c3:58: 5b:8b:f6:ce:d1:61:cc:66:f9:82:45:d3:2b:7b:3e:d8:7b:a8: 23:b7:ec:5c:58:89:7b:ad:d5:5d:ba:2b:19:41:e3:fb:49:14: bb:2f:64:85:11:1d:6a:4e:b7:2e:0f:31:69:36:74:8d:37:6f: c6:77:b9:7e:2c:b6:21:f0:a0:c0:7f:bf:cf:89:7a:17:5b:e5: c1:ac:9f:46:bf:cc:4e:d3:ee:d7:09:ab:ff:8d:40:5c:33:da: 0d:c0:0a:54 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICN5wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDEyMzVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE3N0ZEQUYxMTAvBgNVBAUTKDBEQzBCMjJDNzQyRjAyNTM4MDVGNDFB RjcwNEUxRDdERTFCOEJGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNpjW0Rn9Qxu0EApGeXUWFVuDpz2oqrIej288fWduxlyNhoIhhCCbYqZMpVMkk htDegmERfHdNWuHrv3a4NfAgyrBt1n9s4hi1QOlPZsiNaTj5tpini5T6T3Qv78kK IQmhg9AmhM3odbZAhKuAnW8RsnEz5h2BwLrgkPa81Ca5TNQuAFh2uBYLtynqldXi cSN336pHN2rWCoH1hh/WDIVNbmI9Zj2O6xcgYLeqjBD6rxruesLWNVNsKUSyeHn4 cNXBNUyEM+DXTHKIzIXgzlRkvjAi+8vlm0asIB38cpMaqfZNkFRjWqlnPahz+gst 6Os71UaSDaKeoVsldpvalnIHAgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUDcCyLHQv AlOAX0GvcE4dfeG4v5gwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNzdGRC83RUUyRUQxQURDRDAx MUVDQUFGRkM1OEZGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTc3RkQvN0VFMkVEMUFEQ0QwMTFFQ0FBRkZDNThGRjEyMjI0NjgvRGNDeUxI UXZBbE9BWDBHdmNFNGRmZUc0djVnLm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbZYDANBAIAAjAHAwUALA83ADANBgkqhkiG9w0BAQsFAAOCAQEAucdk GSvMnA1z0cMvIRZl//G7S4G0S/JuM96IFkTlFkkG5tsF3lKaiHoqCLAqheb5BBwT XFULLR/ADnlMTzVZVH73WhrfeEzDt6Jt84Onhyb9SW67w3x/cDeV9rdJFbX/2u5U d6MkatQum/SEMeJ0EN4+o2OogflvZGLT5jkueM56cia5jmU5r9vPbF8ptrqqwXkU RTEmgETCb1nD7GBGRsNYW4v2ztFhzGb5gkXTK3s+2HuoI7fsXFiJe63VXborGUHj +0kUuy9khREdak63Lg8xaTZ0jTdvxne5fiy2IfCgwH+/z4l6F1vlwayfRr/MTtPu 1wmr/41AXDPaDcAKVA== -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:11 2026 by rpki-client