This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer File: HN9pXb8nTSxpriwAwuTuF8mGqe0.cer (raw, json) Hash identifier: yNkI3rjdr4pO2iFhHDpRoujHkSEx0FIQKvjoNTbRGko= Subject key identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3784 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:08:33 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328778 IP: 102.221.4.0/22 IP: 2c0f:800::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14212 (0x3784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:08:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3615533AF, serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:ac:c0:bf:43:5a:6f:60:b6:f3:7f:53:f1: 6a:0b:19:1f:99:c5:29:d4:d7:cc:cf:bb:34:60:cb: 28:e4:7e:e5:90:50:0c:c0:1c:9d:11:c1:6f:51:ff: 5c:04:0a:c4:ea:37:fd:ac:d0:2b:88:9b:be:bd:28: 31:3c:1e:44:bf:ac:86:0c:10:21:d0:1e:59:56:cb: 56:15:b7:8f:e8:16:96:f6:ff:2a:ae:67:cd:ac:8a: 7d:68:d7:50:ab:14:b1:5b:3d:10:e6:e8:01:d6:e6: 62:4b:4b:de:76:c9:19:40:71:46:58:68:10:1f:37: f7:a6:8f:2f:5f:9c:9d:86:69:ae:fc:65:2e:c1:d7: d6:c6:41:be:1e:65:ac:96:d3:4f:6b:d3:41:78:4d: 58:39:dc:13:1e:fb:14:ca:b0:f5:65:47:22:43:32: bb:a2:ad:80:4c:6b:13:de:62:9d:04:07:b3:c8:63: 7f:c3:08:9e:b1:0a:2d:c9:4c:43:57:86:16:0b:78: 11:c1:ff:ee:28:35:3b:98:ce:a8:53:58:a7:33:ce: e3:22:6d:e0:b9:c5:46:7c:aa:5c:a6:c7:3e:3b:e6: ec:a9:44:a1:a8:21:b2:73:cb:16:3d:e2:83:89:4c: bb:d9:5a:38:e5:65:90:3c:66:51:c8:96:73:ff:11: d9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328778 sbgp-ipAddrBlock: critical IPv4: 102.221.4.0/22 IPv6: 2c0f:800::/32 Signature Algorithm: sha256WithRSAEncryption 94:da:94:8d:5d:f2:c9:a1:fa:26:07:41:15:62:6b:5a:29:94: 90:b1:30:0c:a8:38:d3:75:fa:5f:89:5e:38:69:cb:df:db:c5: 8a:0d:3b:f3:0d:4c:de:47:d5:0b:6a:b3:7b:3a:4d:e6:a5:a5: 33:b7:a5:a8:d0:83:66:12:f7:1c:97:1a:56:73:44:68:97:15: b0:5e:97:b8:15:be:e0:89:b5:84:6f:c2:c8:75:58:b4:51:01: 29:95:ea:6b:ef:5c:13:ca:83:4d:cb:4d:63:da:20:1d:51:73: e4:51:31:ad:55:16:b5:99:4b:12:ec:f3:39:2b:eb:8f:74:31: 05:7b:95:16:57:73:92:ff:ba:7a:08:a2:e4:60:94:0e:60:df: c0:3d:7f:47:16:9f:5a:d5:05:ba:08:63:98:42:a9:d7:a0:3a: 86:de:3d:0f:ba:98:cc:18:0f:d5:a2:d4:df:70:52:8a:c4:ce: 3d:bd:b2:61:c5:e9:ae:db:aa:30:94:1c:56:9f:40:f9:f7:77: 36:65:f2:8a:48:4a:0d:89:69:a7:f1:9c:14:5f:aa:e5:17:98: ee:ae:1d:fa:4e:94:c3:30:a4:26:ac:1e:62:87:7a:96:f3:1d: ba:31:21:14:50:18:96:a6:5e:fe:d2:01:94:e1:41:c3:6d:45: 8d:25:c1:a0 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICN4QwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDA4MzNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE1NTMzQUYxMTAvBgNVBAUTKDFDREY2OTVEQkYyNzREMkM2OUFFMkMw MEMyRTRFRTE3Qzk4NkE5RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrWazAv0Nab2C2839T8WoLGR+ZxSnU18zPuzRgyyjkfuWQUAzAHJ0RwW9R/1wE CsTqN/2s0CuIm769KDE8HkS/rIYMECHQHllWy1YVt4/oFpb2/yquZ82sin1o11Cr FLFbPRDm6AHW5mJLS952yRlAcUZYaBAfN/emjy9fnJ2Gaa78ZS7B19bGQb4eZayW 009r00F4TVg53BMe+xTKsPVlRyJDMruirYBMaxPeYp0EB7PIY3/DCJ6xCi3JTENX hhYLeBHB/+4oNTuYzqhTWKczzuMibeC5xUZ8qlymxz475uypRKGoIbJzyxY94oOJ TLvZWjjlZZA8ZlHIlnP/Edn7AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUHN9pXb8n TSxpriwAwuTuF8mGqe0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNTUzMy9EODBBRkU1QzI5NTcx MUVGQTc5NzE3RjY3Q0RDMjRDMi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTU1MzMvRDgwQUZFNUMyOTU3MTFFRkE3OTcxN0Y2N0NEQzI0QzIvSE45cFhi OG5UU3hwcml3QXd1VHVGOG1HcWUwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBEowLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3QQwDQQCAAIwBwMF ACwPCAAwDQYJKoZIhvcNAQELBQADggEBAJTalI1d8smh+iYHQRVia1oplJCxMAyo ONN1+l+JXjhpy9/bxYoNO/MNTN5H1Qtqs3s6TealpTO3pajQg2YS9xyXGlZzRGiX FbBel7gVvuCJtYRvwsh1WLRRASmV6mvvXBPKg03LTWPaIB1Rc+RRMa1VFrWZSxLs 8zkr6490MQV7lRZXc5L/unoIouRglA5g38A9f0cWn1rVBboIY5hCqdegOobePQ+6 mMwYD9Wi1N9wUorEzj29smHF6a7bqjCUHFafQPn3dzZl8opISg2JaafxnBRfquUX mO6uHfpOlMMwpCasHmKHepbzHboxIRRQGJamXv7SAZThQcNtRY0lwaA= -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:47 2026 by rpki-client