This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer File: HNlmJ3URky060f0tMBT24WjMSOU.cer (raw, json) Hash identifier: GrFIOgzOD6nrvUCMHbEzBkvalmi5WzqDKM+WpRFwfpg= Subject key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E7A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:45:38 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328760 IP: 102.221.248.0/22 IP: 2c0f:1b80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15994 (0x3e7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:45:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ca:3b:54:77:40:ae:9f:7f:bb:8c:42:66:f1: 48:93:b3:6b:45:63:a9:6d:24:d8:85:0f:3a:77:d6: b7:98:41:46:24:ec:61:73:84:ab:56:ee:c1:5e:33: 85:9b:22:af:b8:99:33:2f:ac:fa:7b:2f:c1:c1:8a: f9:08:ef:39:76:26:ce:42:9a:4e:2c:c3:8d:bf:92: 2f:0a:fe:8e:dc:ab:96:b4:00:e7:9b:e2:cf:64:1b: 57:bd:d0:9f:b8:09:ed:37:fa:a6:9d:19:b3:4c:07: ec:43:08:6b:46:03:f1:61:a7:82:d3:ef:9b:c9:65: 4a:9d:fc:09:0e:b0:98:97:19:7e:c4:df:0d:fd:d2: 36:ad:80:42:ac:01:40:64:09:0f:56:96:99:b0:6f: 92:22:bd:ba:fb:26:74:c9:72:07:b1:c7:39:e3:65: 57:6a:11:63:f2:ab:0d:6f:5d:aa:b6:ea:eb:80:8a: 90:e3:ab:f5:be:5a:99:d1:5d:c5:aa:9f:96:98:e0: 74:bf:39:69:77:b5:dd:a4:d3:b9:f2:84:bb:70:35: 5f:cb:3e:b0:5c:37:4d:6d:21:32:95:b4:78:0d:12: 2d:9d:31:c4:b6:69:1b:4f:75:4d:47:2b:fb:44:2c: 60:43:cb:62:65:fb:63:31:0d:02:c0:e9:5c:05:be: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328760 sbgp-ipAddrBlock: critical IPv4: 102.221.248.0/22 IPv6: 2c0f:1b80::/32 Signature Algorithm: sha256WithRSAEncryption b3:b1:ce:da:ff:b0:91:be:c9:b1:cd:a6:70:ba:5f:34:2b:fa: 2b:67:0e:1a:69:64:84:23:b9:0b:f1:89:57:24:ae:62:c3:7e: 09:c5:e8:6a:55:20:4a:b0:6b:78:ba:87:18:87:8c:f9:39:e1: 5d:e8:75:7d:45:37:11:97:e6:98:4d:12:e3:b6:72:9f:2f:dd: c2:44:b5:84:62:8b:89:ce:e6:63:c4:49:19:94:5b:bb:e3:ab: 95:bd:26:50:ca:5f:2d:63:1e:a7:e4:f3:51:a7:d8:c0:85:c7: e7:44:08:a7:f6:bf:c2:6f:cc:4f:be:5b:15:6b:ef:3d:34:36: c2:2a:4d:98:04:17:3f:44:c2:b0:92:cc:3e:eb:13:ad:41:c6: 5a:ee:a7:65:1a:1a:ae:d3:f5:ea:da:19:c9:eb:5a:f2:74:d0: b9:b3:09:01:14:76:5e:d2:d3:fb:d6:b2:fa:c8:6a:03:4e:9d: 06:d8:6b:2b:58:bf:a4:42:11:b0:c7:12:64:00:ee:e8:a6:6b: ce:3f:a2:25:26:7f:aa:df:62:78:d2:26:24:53:5d:17:a3:8c: e9:b6:46:db:2c:90:42:0f:b8:dd:53:cb:68:fc:c1:f3:26:37: 3c:fe:43:fe:40:d4:44:26:cf:5e:0e:5a:e0:00:ad:e2:1d:71: 76:ea:dd:aa -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPnowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDQ1MzhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkUyQjY5QUYxMTAvBgNVBAUTKDFDRDk2NjI3NzUxMTkzMkQzQUQxRkQy RDMwMTRGNkUxNjhDQzQ4RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoyjtUd0Cun3+7jEJm8UiTs2tFY6ltJNiFDzp31reYQUYk7GFzhKtW7sFeM4Wb Iq+4mTMvrPp7L8HBivkI7zl2Js5Cmk4sw42/ki8K/o7cq5a0AOeb4s9kG1e90J+4 Ce03+qadGbNMB+xDCGtGA/Fhp4LT75vJZUqd/AkOsJiXGX7E3w390jatgEKsAUBk CQ9Wlpmwb5Iivbr7JnTJcgexxznjZVdqEWPyqw1vXaq26uuAipDjq/W+WpnRXcWq n5aY4HS/OWl3td2k07nyhLtwNV/LPrBcN01tITKVtHgNEi2dMcS2aRtPdU1HK/tE LGBDy2Jl+2MxDQLA6VwFvrTxAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUHNlmJ3UR ky060f0tMBT24WjMSOUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFMkI2OS8xQjZBQzUzOEY2Nzgx MUVEQTMzNjcyMTk0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTJCNjkvMUI2QUM1MzhGNjc4MTFFREEzMzY3MjE5NEFEOUU2RkMvSE5sbUoz VVJreTA2MGYwdE1CVDI0V2pNU09VLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBDgwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3fgwDQQCAAIwBwMF ACwPG4AwDQYJKoZIhvcNAQELBQADggEBALOxztr/sJG+ybHNpnC6XzQr+itnDhpp ZIQjuQvxiVckrmLDfgnF6GpVIEqwa3i6hxiHjPk54V3odX1FNxGX5phNEuO2cp8v 3cJEtYRii4nO5mPESRmUW7vjq5W9JlDKXy1jHqfk81Gn2MCFx+dECKf2v8JvzE++ WxVr7z00NsIqTZgEFz9EwrCSzD7rE61Bxlrup2UaGq7T9eraGcnrWvJ00LmzCQEU dl7S0/vWsvrIagNOnQbYaytYv6RCEbDHEmQA7uima84/oiUmf6rfYnjSJiRTXRej jOm2RtsskEIPuN1Ty2j8wfMmNzz+Q/5A1EQmz14OWuAAreIdcXbq3ao= -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:53 2026 by rpki-client