This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer File: Ic9mCQ8NCPeTru46mq74zw9BMAs.cer (raw, json) Hash identifier: Lhceq7mT2fjYSl5FA7WgDDg6+L/DIyR7Xx3d+8AYxtE= Subject key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B60 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:44:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328650 IP: 102.36.136.0/22 IP: 2001:43f8:1400::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15200 (0x3b60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:44:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:6a:b3:4c:35:03:94:45:3b:16:56:9e:66: 3e:e3:f9:b9:d7:62:84:78:4b:e1:a6:a7:8a:26:14: 38:5c:c1:17:72:55:20:ba:40:bc:29:4c:b1:12:c4: 2f:cb:49:5f:c7:cf:c4:09:b5:ff:ca:61:c4:d8:27: 15:3e:3d:5d:e4:b8:13:a6:8f:7a:a2:db:cb:81:0e: c4:54:c1:e4:24:e4:bf:22:b6:b6:25:4a:b8:29:05: 0b:01:72:18:0d:a1:44:85:a6:b7:8a:39:a1:0a:ae: 41:86:b2:25:63:5d:43:08:e3:88:91:56:09:f7:57: 95:df:11:04:15:2c:8e:d4:bf:3a:f4:16:ad:b3:72: f6:da:dd:c5:e9:2e:57:56:88:19:a6:0c:e2:1f:2a: e6:e0:72:2a:a6:57:61:89:e0:53:67:af:ea:b3:ce: 3e:66:8e:70:27:0a:2b:3e:18:dd:69:1d:e2:91:fb: 79:7a:b0:13:a2:ea:27:00:d7:00:6c:7f:49:35:33: cd:67:05:d5:5e:eb:42:d0:1f:b5:66:5a:5f:4a:ae: bb:11:d2:d3:76:9e:d1:ac:c1:44:e4:a6:46:ae:14: e5:1c:65:fd:fc:e0:1d:65:dd:9f:a1:34:64:3b:0d: a6:d1:20:f0:c5:02:9b:30:58:46:7b:10:ab:a5:ab: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328650 sbgp-ipAddrBlock: critical IPv4: 102.36.136.0/22 IPv6: 2001:43f8:1400::/48 Signature Algorithm: sha256WithRSAEncryption 6a:f3:14:16:76:fc:2c:84:34:12:dc:d7:a8:d1:08:41:27:25: c5:47:84:c3:c1:e8:5d:1a:2b:ac:9f:b7:05:9c:c4:ad:bc:94: 05:0e:4b:57:a6:f1:fc:1f:25:6b:21:c5:c6:94:6f:34:e0:90: 62:5a:95:f8:76:e7:51:56:60:19:7d:e8:06:c6:11:67:1e:49: ba:be:33:af:fc:77:50:d4:2f:a7:7a:f6:45:95:9d:7a:61:da: d9:21:76:ee:7e:53:e1:38:33:09:46:99:71:24:32:e7:03:41: 0f:26:55:23:14:69:6c:0e:67:bd:ba:74:f6:7a:e6:40:ab:25: 49:82:e1:a2:e8:55:16:9c:ed:d3:d1:ff:9d:ae:87:14:24:f5: df:77:71:6d:32:67:3d:58:95:27:59:e4:75:28:9b:da:14:bc: d8:f1:6d:12:b8:3c:1b:a2:9c:c6:cb:3d:87:1d:ee:ae:a5:f9: 42:52:87:a2:52:01:6c:c9:32:8f:f6:04:b7:bb:3b:a6:85:32: 37:5b:40:81:02:b8:35:00:86:37:28:c9:0d:23:24:bc:bd:b1: 06:10:0d:10:ed:d3:e2:05:2c:70:90:03:de:4e:7f:17:39:a8: 06:a1:fd:9f:64:2e:95:fc:46:58:67:59:b6:eb:f6:0a:e1:d6: 36:7b:1e:c9 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgICO2AwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjQ0NTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjgxOEM4QUYxMTAvBgNVBAUTKDIxQ0Y2NjA5MEYwRDA4Rjc5M0FFRUUz QTlBQUVGOENGMEY0MTMwMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjM2qzTDUDlEU7FlaeZj7j+bnXYoR4S+Gmp4omFDhcwRdyVSC6QLwpTLESxC/L SV/Hz8QJtf/KYcTYJxU+PV3kuBOmj3qi28uBDsRUweQk5L8itrYlSrgpBQsBchgN oUSFpreKOaEKrkGGsiVjXUMI44iRVgn3V5XfEQQVLI7Uvzr0Fq2zcvba3cXpLldW iBmmDOIfKubgciqmV2GJ4FNnr+qzzj5mjnAnCis+GN1pHeKR+3l6sBOi6icA1wBs f0k1M81nBdVe60LQH7VmWl9KrrsR0tN2ntGswUTkpkauFOUcZf384B1l3Z+hNGQ7 DabRIPDFApswWEZ7EKulq8VDAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUIc9mCQ8N CPeTru46mq74zw9BMAswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4MThDOC9FODIwQTdGQ0Y5RjIx MUVCQUMxODUyMkREOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODE4QzgvRTgyMEE3RkNGOUYyMTFFQkFDMTg1MjJERDhBMDE0Q0UvSWM5bUNR OE5DUGVUcnU0Nm1xNzR6dzlCTUFzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA8owMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJmJIgwDwQCAAIwCQMH ACABQ/gUADANBgkqhkiG9w0BAQsFAAOCAQEAavMUFnb8LIQ0EtzXqNEIQSclxUeE w8HoXRorrJ+3BZzErbyUBQ5LV6bx/B8layHFxpRvNOCQYlqV+HbnUVZgGX3oBsYR Zx5Jur4zr/x3UNQvp3r2RZWdemHa2SF27n5T4TgzCUaZcSQy5wNBDyZVIxRpbA5n vbp09nrmQKslSYLhouhVFpzt09H/na6HFCT133dxbTJnPViVJ1nkdSib2hS82PFt Erg8G6Kcxss9hx3urqX5QlKHolIBbMkyj/YEt7s7poUyN1tAgQK4NQCGNyjJDSMk vL2xBhANEO3T4gUscJAD3k5/FzmoBqH9n2QulfxGWGdZtuv2CuHWNnseyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:48 2026 by rpki-client