This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer File: HD250CDCm_5JEPoUqlAU9gSkJn8.cer (raw, json) Hash identifier: LSI4o5uxrsBVeLyvVaHeMjRbuJB4Nd0kRnHI9GRCM8E= Subject key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C7A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:25:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328622 IP: 102.223.232.0/22 IP: 2c0f:ebf0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15482 (0x3c7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:25:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:14:42:da:f8:6f:00:21:71:63:35:a4:b9: 3e:ef:68:5c:05:fc:3d:09:92:68:9a:a7:b3:ce:7d: 6d:28:e2:48:14:6c:43:40:a7:cd:02:cf:68:f7:34: ff:ad:52:85:49:fe:c1:76:1b:aa:bf:c1:00:c9:63: 42:ea:6f:76:da:9c:11:e2:4d:db:c6:28:8e:30:0b: cc:d3:0c:67:7b:1b:e8:5a:93:ef:a2:7f:60:ab:fb: d1:7e:a5:82:b9:ca:a7:99:1b:e7:d3:53:03:8d:84: 6b:a4:ff:10:bd:81:e0:5d:cc:0f:99:ee:e7:4c:94: 1e:46:9b:a6:8b:05:fc:1b:9d:86:ec:82:9e:99:cd: b9:70:b6:46:32:e5:31:72:30:00:5f:6d:14:51:da: 80:92:85:f0:e4:bd:eb:4a:13:e2:c0:a5:73:94:8b: 96:36:40:54:5e:05:24:8c:4d:0b:56:a9:da:89:82: c5:42:75:93:ca:eb:94:02:c4:a8:e5:b3:24:d8:9c: d0:f1:1e:d0:35:49:2c:3e:37:0d:1d:08:bc:b3:bd: ce:de:c6:4c:34:47:81:44:22:65:6a:4a:d2:3b:3f: 9a:ae:b7:4b:08:6d:36:25:bc:de:94:05:88:4d:bd: 45:bf:5b:55:3f:f3:d0:b3:2e:a2:36:17:6d:af:5d: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328622 sbgp-ipAddrBlock: critical IPv4: 102.223.232.0/22 IPv6: 2c0f:ebf0::/32 Signature Algorithm: sha256WithRSAEncryption 72:c1:08:90:40:33:10:46:fe:8d:54:d5:d9:e0:38:0e:77:be: 75:6a:4e:da:ee:18:13:4a:5a:1a:f5:d1:14:43:5f:d2:0f:23: 02:61:a0:22:35:67:cb:d5:e1:88:1d:bd:32:ab:80:d4:11:a1: d1:fc:63:34:f9:d6:9e:47:ba:cd:17:aa:1e:10:cc:d9:b8:0b: 4d:0b:cb:ae:c3:ce:70:8d:7d:78:0d:17:01:17:2f:a3:c2:c9: 2c:12:18:c3:63:06:e0:91:88:28:ad:d8:23:7d:11:37:26:07: 97:63:78:a1:19:33:43:20:22:14:9e:7c:15:56:01:a4:ab:22: 95:c5:04:0e:09:89:a0:23:fa:20:f9:72:7e:f2:7f:d9:4f:88: 5a:d1:e2:8b:fa:bb:d1:c3:c3:b2:e0:29:36:d7:ff:28:03:36: f0:fc:d6:ee:b2:74:58:2e:e7:bf:ac:e7:16:8f:fe:ff:45:29: 09:6f:78:c8:3c:2e:0f:a8:75:91:3b:44:5b:8c:38:97:2a:9b: ab:1b:0e:a7:82:87:c5:29:23:1f:aa:d6:45:43:44:45:df:a2: 6a:66:cb:2e:f5:3f:41:7e:d7:ac:38:63:c1:68:1e:af:46:02: 9a:13:4c:7e:a2:ce:6c:c9:26:0a:84:2c:28:39:f4:c0:99:3d: 01:3a:0f:e7 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPHowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzI1NTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjlFMkJEQUYxMTAvBgNVBAUTKDFDM0RCOUQwMjBDMjlCRkU0OTEwRkEx NEFBNTAxNEY2MDRBNDI2N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZqhRC2vhvACFxYzWkuT7vaFwF/D0Jkmiap7POfW0o4kgUbENAp80Cz2j3NP+t UoVJ/sF2G6q/wQDJY0Lqb3banBHiTdvGKI4wC8zTDGd7G+hak++if2Cr+9F+pYK5 yqeZG+fTUwONhGuk/xC9geBdzA+Z7udMlB5Gm6aLBfwbnYbsgp6ZzblwtkYy5TFy MABfbRRR2oCShfDkvetKE+LApXOUi5Y2QFReBSSMTQtWqdqJgsVCdZPK65QCxKjl syTYnNDxHtA1SSw+Nw0dCLyzvc7exkw0R4FEImVqStI7P5qut0sIbTYlvN6UBYhN vUW/W1U/89CzLqI2F22vXcfXAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUHD250CDC m/5JEPoUqlAU9gSkJn8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5RTJCRC8wMEYyOUI4RTU5NDMx MUVBQkRDNkUxNjBGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OUUyQkQvMDBGMjlCOEU1OTQzMTFFQUJEQzZFMTYwRjhBRUEyMjgvSEQyNTBD RENtXzVKRVBvVXFsQVU5Z1NrSm44Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA64wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3+gwDQQCAAIwBwMF ACwP6/AwDQYJKoZIhvcNAQELBQADggEBAHLBCJBAMxBG/o1U1dngOA53vnVqTtru GBNKWhr10RRDX9IPIwJhoCI1Z8vV4YgdvTKrgNQRodH8YzT51p5Hus0Xqh4QzNm4 C00Ly67DznCNfXgNFwEXL6PCySwSGMNjBuCRiCit2CN9ETcmB5djeKEZM0MgIhSe fBVWAaSrIpXFBA4JiaAj+iD5cn7yf9lPiFrR4ov6u9HDw7LgKTbX/ygDNvD81u6y dFgu57+s5xaP/v9FKQlveMg8Lg+odZE7RFuMOJcqm6sbDqeCh8UpIx+q1kVDREXf ompmyy71P0F+16w4Y8FoHq9GApoTTH6izmzJJgqELCg59MCZPQE6D+c= -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:05 2026 by rpki-client