This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer File: DgQKv0-UXzDXfaKLvwKLasSdBCw.cer (raw, json) Hash identifier: b88LH57k5ij3ETfxrITDKemYIKyn85OBLMnAI7CrXo4= Subject key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EC2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:57:32 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327795 IP: 102.223.8.0/22 IP: 154.118.224.0/21 IP: 196.192.72.0/21 IP: 197.149.176.0/22 IP: 2c0f:efe8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16066 (0x3ec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:57:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:18:f9:46:40:32:f2:6d:ce:c2:f4:76:08: 00:74:65:94:2e:9f:08:e8:57:5b:f2:fd:22:bc:4b: 4c:28:98:39:a1:5a:13:d8:72:7c:8b:4b:82:12:e1: 3d:56:b1:ba:72:b4:17:42:1f:45:28:83:14:91:a4: e9:94:df:d9:95:3c:50:83:4f:79:d9:16:a4:fc:8e: d2:ee:d2:ee:cd:1d:b6:5d:43:61:e9:0e:d5:b9:78: 78:af:b0:7d:a6:b2:4e:ae:fe:71:55:98:91:58:06: b4:f6:df:19:30:94:14:5a:f1:80:07:bf:b3:37:a3: 1d:01:f0:30:10:41:55:78:7a:ee:d8:cb:ba:d0:67: e9:b0:c0:c2:96:e0:f6:fc:6e:4e:cd:0d:8e:0c:ea: 62:97:f1:ba:19:69:2f:64:7f:bb:c9:62:88:55:1e: bd:26:0e:80:96:25:36:21:16:3b:7d:d9:71:04:b3: b6:b2:b8:fc:36:94:e0:9a:bf:f9:07:1f:df:a3:65: 50:2b:0e:e2:e6:a0:e8:cd:be:35:19:37:0e:65:22: e1:12:94:43:65:32:21:a5:23:ba:c1:bb:1e:a9:79: bd:d8:66:a7:03:87:3b:98:e9:ac:cd:70:a3:2b:aa: c2:f2:a5:54:5f:c3:b2:63:5a:d5:20:f7:67:ee:04: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327795 sbgp-ipAddrBlock: critical IPv4: 102.223.8.0/22 154.118.224.0/21 196.192.72.0/21 197.149.176.0/22 IPv6: 2c0f:efe8::/32 Signature Algorithm: sha256WithRSAEncryption 7d:fa:a3:3c:26:b7:aa:94:c9:c7:56:2f:28:b7:cb:6a:63:95: 46:21:25:a9:6b:70:44:84:08:ae:0f:31:f7:21:8c:64:45:72: b0:24:fb:d8:88:be:21:48:0e:e1:84:13:11:e4:56:b2:98:a2: 50:4c:ba:7b:38:54:d3:76:65:fe:f0:26:e8:66:21:31:03:32: fe:69:f7:24:f0:76:90:0c:23:1b:c9:f5:c3:58:0c:87:83:6d: 63:4e:a9:2e:a9:c9:97:f0:e0:58:86:e0:b6:2c:a9:cf:da:87: 5e:d7:60:38:2c:05:e5:9b:3a:8e:c9:03:bd:81:0a:ec:b1:08: 9a:ae:47:c9:31:f6:83:e8:e7:79:b9:8a:bc:b3:e9:9e:0d:43: e2:00:20:c3:14:05:2b:d1:a0:69:f0:2b:e7:77:06:26:3d:1e: 62:8d:bd:0d:33:c3:79:61:d7:72:53:e1:e8:89:cf:0e:30:88: f5:ec:c7:93:db:c2:6f:64:37:14:dc:88:c1:60:73:c9:be:b7: d3:f2:f8:f8:d5:f9:78:55:0e:c3:f0:fb:17:6e:7b:79:0f:0b: 6a:7d:ff:42:ff:00:de:a7:f4:42:ce:fd:08:fa:0e:b8:b9:34: 6f:11:17:78:90:00:36:b4:e1:6e:9f:2b:27:7b:45:10:05:87: 1d:96:a8:09 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICPsIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDU3MzJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVDN0NFQUYxMTAvBgNVBAUTKDBFMDQwQUJGNEY5NDVGMzBENzdEQTI4 QkJGMDI4QjZBQzQ5RDA0MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo2Rj5RkAy8m3OwvR2CAB0ZZQunwjoV1vy/SK8S0womDmhWhPYcnyLS4IS4T1W sbpytBdCH0UogxSRpOmU39mVPFCDT3nZFqT8jtLu0u7NHbZdQ2HpDtW5eHivsH2m sk6u/nFVmJFYBrT23xkwlBRa8YAHv7M3ox0B8DAQQVV4eu7Yy7rQZ+mwwMKW4Pb8 bk7NDY4M6mKX8boZaS9kf7vJYohVHr0mDoCWJTYhFjt92XEEs7ayuPw2lOCav/kH H9+jZVArDuLmoOjNvjUZNw5lIuESlENlMiGlI7rBux6peb3YZqcDhzuY6azNcKMr qsLypVRfw7JjWtUg92fuBPMzAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUDgQKv0+U XzDXfaKLvwKLasSdBCwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFQzdDRS84MjAxNEExMDk4OTkx MUU5QjczOTZBMzNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUM3Q0UvODIwMTRBMTA5ODk5MTFFOUI3Mzk2QTMzRjhBRUEyMjgvRGdRS3Yw LVVYekRYZmFLTHZ3S0xhc1NkQkN3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAHMwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJm3wgDBAOaduADBAPE wEgDBALFlbAwDQQCAAIwBwMFACwP7+gwDQYJKoZIhvcNAQELBQADggEBAH36ozwm t6qUycdWLyi3y2pjlUYhJalrcESECK4PMfchjGRFcrAk+9iIviFIDuGEExHkVrKY olBMuns4VNN2Zf7wJuhmITEDMv5p9yTwdpAMIxvJ9cNYDIeDbWNOqS6pyZfw4FiG 4LYsqc/ah17XYDgsBeWbOo7JA72BCuyxCJquR8kx9oPo53m5iryz6Z4NQ+IAIMMU BSvRoGnwK+d3BiY9HmKNvQ0zw3lh13JT4eiJzw4wiPXsx5Pbwm9kNxTciMFgc8m+ t9Py+PjV+XhVDsPw+xdue3kPC2p9/0L/AN6n9ELO/Qj6Dri5NG8RF3iQADa04W6f Kyd7RRAFhx2WqAk= -----END CERTIFICATE-----Generated at Sun Jan 25 21:36:11 2026 by rpki-client