This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer File: EpiStZvukL-kaOVEXErR0BaeEdk.cer (raw, json) Hash identifier: k4FQQlVf+wKj12rt8TojmPbuC5CD/FxH/T6LKI7Utik= Subject key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BB7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:56:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328735 IP: 102.222.136.0/23 IP: 2c0f:e9b8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15287 (0x3bb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:56:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a9:f2:8a:26:6f:1a:e2:f0:91:c6:9a:3c:2e: e7:be:10:72:bf:1b:72:0d:58:5c:6f:b5:13:2a:b2: d6:ab:6e:61:da:8d:cc:ce:4d:58:f3:12:db:a6:20: ea:62:c8:ec:98:3f:33:46:00:63:a8:9f:9c:44:4c: 1a:28:c4:c6:7c:63:d1:0c:72:8d:12:16:57:e7:51: b0:cc:b9:90:93:8b:89:3f:b1:6b:48:76:8d:36:63: 3c:65:bc:cb:89:47:5f:71:be:ef:8b:63:54:38:86: 86:73:b9:80:1f:7d:50:20:d8:3d:8d:25:fa:72:97: 83:21:67:7c:cf:9b:95:a6:ea:92:3e:61:58:c8:98: 97:ec:9b:4e:77:f4:2e:fb:f6:7e:e6:45:e4:b6:a0: a4:85:94:fd:26:61:2d:bd:33:67:59:ad:a7:95:9c: d6:65:da:73:d9:cf:33:86:54:cc:6c:f7:18:19:3f: bc:08:10:51:6d:72:57:5e:ec:5a:2c:00:ec:91:41: f4:55:14:7b:3f:61:9d:6d:24:dd:4e:93:b2:40:9d: 3c:08:82:74:bb:fd:3d:e3:77:79:0f:e0:28:7f:2c: f6:03:a2:01:29:cf:70:c4:b1:0a:38:8e:8f:0e:33: 15:39:6a:e7:4a:0b:bc:e1:9f:f8:6a:c1:1c:e3:fe: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328735 sbgp-ipAddrBlock: critical IPv4: 102.222.136.0/23 IPv6: 2c0f:e9b8::/32 Signature Algorithm: sha256WithRSAEncryption 53:dc:21:4b:7b:8b:5b:84:42:87:a7:54:77:fb:dd:62:f8:83: a7:8e:c8:eb:e8:eb:f3:3c:f1:a7:36:df:9d:47:aa:ef:0d:8d: ff:97:27:ba:14:6f:ac:3d:99:cf:fc:fe:a3:8f:65:19:a1:f1: 1c:85:31:27:84:4d:24:0f:dd:71:00:a1:d2:ea:62:b9:14:6e: ae:f7:e2:e6:5b:24:bd:3e:da:99:08:03:c9:2b:ba:f1:db:e5: ad:46:74:f9:28:6e:31:d2:b6:51:d4:40:99:3e:df:4b:0e:06: 75:0d:a3:1d:85:d5:b3:f4:84:40:41:9c:79:1f:06:4b:59:6d: ad:94:83:0b:e7:1a:f8:c8:2a:c4:70:f7:c9:4a:2b:3c:37:a4: b5:7e:7f:23:0c:e6:5d:67:e9:6b:f0:ee:69:8a:4d:b2:87:a3: 96:c6:a9:56:e7:75:37:d3:aa:88:27:ea:4e:1d:4d:c5:d4:49: db:e2:ac:d2:cb:52:c7:07:5b:f0:71:c0:ad:f4:f2:a7:7c:28: 23:8d:dd:9e:d3:12:e1:55:cb:32:5e:37:bc:c9:bb:b4:43:97: 33:6f:65:7d:cd:58:6d:cf:40:cf:1d:1d:86:58:78:1f:d5:69: a9:51:bd:d8:6c:5a:b0:f6:5f:c8:80:d0:76:42:2a:c0:03:21: b4:23:ee:48 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO7cwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU2NTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg5RTEyQUYxMTAvBgNVBAUTKDEyOTg5MkI1OUJFRTkwQkZBNDY4RTU0 NDVDNEFEMUQwMTY5RTExRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoqfKKJm8a4vCRxpo8Lue+EHK/G3INWFxvtRMqstarbmHajczOTVjzEtumIOpi yOyYPzNGAGOon5xETBooxMZ8Y9EMco0SFlfnUbDMuZCTi4k/sWtIdo02YzxlvMuJ R19xvu+LY1Q4hoZzuYAffVAg2D2NJfpyl4MhZ3zPm5Wm6pI+YVjImJfsm0539C77 9n7mReS2oKSFlP0mYS29M2dZraeVnNZl2nPZzzOGVMxs9xgZP7wIEFFtclde7Fos AOyRQfRVFHs/YZ1tJN1Ok7JAnTwIgnS7/T3jd3kP4Ch/LPYDogEpz3DEsQo4jo8O MxU5audKC7zhn/hqwRzj/ktJAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUEpiStZvu kL+kaOVEXErR0BaeEdkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4OUUxMi82QzYwOTY4QTZBMzgx MUVCQTdDODhDMzJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODlFMTIvNkM2MDk2OEE2QTM4MTFFQkE3Qzg4QzMyRjhBRUEyMjgvRXBpU3Ra dnVrTC1rYU9WRVhFclIwQmFlRWRrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBB8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFm3ogwDQQCAAIwBwMF ACwP6bgwDQYJKoZIhvcNAQELBQADggEBAFPcIUt7i1uEQoenVHf73WL4g6eOyOvo 6/M88ac2351Hqu8Njf+XJ7oUb6w9mc/8/qOPZRmh8RyFMSeETSQP3XEAodLqYrkU bq734uZbJL0+2pkIA8kruvHb5a1GdPkobjHStlHUQJk+30sOBnUNox2F1bP0hEBB nHkfBktZba2UgwvnGvjIKsRw98lKKzw3pLV+fyMM5l1n6Wvw7mmKTbKHo5bGqVbn dTfTqogn6k4dTcXUSdvirNLLUscHW/BxwK308qd8KCON3Z7TEuFVyzJeN7zJu7RD lzNvZX3NWG3PQM8dHYZYeB/VaalRvdhsWrD2X8iA0HZCKsADIbQj7kg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:12 2026 by rpki-client