This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer File: IlhakHPb2Nx6VQRFf_nceJcpdE4.cer (raw, json) Hash identifier: 6B8LL9J7i6KpXKXHbkSXuhK3UcY7YX3R8TOAoMjG7GQ= Subject key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38D1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:07:13 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328029 IP: 102.207.20.0/22 IP: 196.61.240.0/20 IP: 2c0f:eb80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14545 (0x38d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:07:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:e0:36:1e:89:7d:4d:87:d2:ca:b3:cd:b8: 8b:8b:8a:bb:48:be:7b:ed:21:ef:eb:3d:e9:d4:95: 10:5a:c8:72:88:2d:02:bd:fb:0c:31:a6:1c:b2:da: 89:26:9c:ac:8c:e8:60:ea:84:14:e2:a2:0b:5e:dd: bd:91:0c:4f:1d:91:cf:7c:e4:ee:7f:8f:b5:f1:7e: 6f:c3:cc:c4:62:00:aa:a2:96:5d:1a:aa:32:93:a5: 8a:aa:e6:9d:f0:3a:85:29:07:94:fc:87:b7:95:b6: 17:0a:89:8c:53:12:8b:79:97:23:9c:8b:55:5e:37: 2f:f9:7f:dc:7d:f2:d3:ae:3c:9c:13:72:8b:0b:4e: 2f:8d:1f:ff:6e:2a:b7:8a:9a:0d:8c:8a:65:8c:40: b4:83:ed:0b:3e:6d:bb:e0:81:14:af:3b:0e:19:2f: 38:25:3e:52:07:15:e6:12:69:8b:92:f9:cd:5f:d2: 26:ee:a5:c1:9a:3b:c3:05:dc:7a:7d:72:e5:7e:48: 80:47:4d:d2:4d:61:4a:96:75:0c:0e:7c:de:3f:4b: 7e:8a:29:d6:4f:e6:0a:e2:9b:37:fd:dc:d2:f3:49: 5e:43:67:fb:7e:bc:1b:1a:56:4c:50:31:bc:40:44: cd:81:fb:61:e6:3f:5d:b9:70:d1:39:2d:ad:81:18: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328029 sbgp-ipAddrBlock: critical IPv4: 102.207.20.0/22 196.61.240.0/20 IPv6: 2c0f:eb80::/32 Signature Algorithm: sha256WithRSAEncryption a8:91:e4:61:b5:22:1c:1b:dd:34:8c:7f:8c:85:cc:1e:64:8c: b4:31:ed:8b:4a:7f:7f:3a:b9:da:66:6a:f8:65:f0:eb:98:da: 9c:9c:0c:89:c6:cd:a1:67:ab:3c:d3:fe:fb:47:97:d3:77:c2: 88:2c:be:10:79:13:2d:8b:b5:88:a3:4a:20:93:f9:01:a6:f7: cc:74:a5:6e:4b:79:c5:e6:7a:bd:ae:da:de:51:c1:49:62:76: ac:5b:bc:8d:d9:27:1f:b8:b8:53:89:5d:24:02:1b:d8:57:67: 75:c8:58:aa:a1:7d:67:5a:bb:58:0a:04:1d:e6:e3:a9:bb:da: b9:b1:e1:86:d6:45:a9:a5:a1:ec:16:76:cf:05:85:18:e0:da: 7d:b1:61:8d:00:2e:ac:50:03:f0:6d:6d:94:27:70:b4:a1:c4: 7b:9b:f6:1a:8d:96:41:de:8f:f1:92:27:ec:98:c9:24:e0:e6: 72:bd:9a:24:8b:a6:4a:07:f2:fc:fb:ec:45:ec:aa:6a:1f:dd: dd:bf:bb:f3:c8:50:49:91:e3:9c:b0:a1:1f:41:46:1b:18:75: 73:5f:5b:62:b2:e9:31:cb:72:f7:9d:02:e1:b3:3e:d5:1a:65: 97:36:d0:de:bb:be:fe:1e:69:4e:cb:bd:64:b5:88:81:d8:26: 0c:d7:f0:94 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICONEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTA3MTNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjNDQzI0QUYxMTAvBgNVBAUTKDIyNTg1QTkwNzNEQkQ4REM3QTU1MDQ0 NTdGRjlEQzc4OTcyOTc0NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHteA2Hol9TYfSyrPNuIuLirtIvnvtIe/rPenUlRBayHKILQK9+wwxphyy2okm nKyM6GDqhBTiogte3b2RDE8dkc985O5/j7Xxfm/DzMRiAKqill0aqjKTpYqq5p3w OoUpB5T8h7eVthcKiYxTEot5lyOci1VeNy/5f9x98tOuPJwTcosLTi+NH/9uKreK mg2MimWMQLSD7Qs+bbvggRSvOw4ZLzglPlIHFeYSaYuS+c1f0ibupcGaO8MF3Hp9 cuV+SIBHTdJNYUqWdQwOfN4/S36KKdZP5grimzf93NLzSV5DZ/t+vBsaVkxQMbxA RM2B+2HmP125cNE5La2BGGmTAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUIlhakHPb 2Nx6VQRFf/nceJcpdE4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzQ0MyNC9GMTJEMjI5ODZDQ0Yx MUVEODU4ODgyQTJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2M0NDMjQvRjEyRDIyOTg2Q0NGMTFFRDg1ODg4MkEyRjEyMjI0NjgvSWxoYWtI UGIyTng2VlFSRmZfbmNlSmNwZEU0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAV0wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmzxQDBATEPfAwDQQC AAIwBwMFACwP64AwDQYJKoZIhvcNAQELBQADggEBAKiR5GG1Ihwb3TSMf4yFzB5k jLQx7YtKf386udpmavhl8OuY2pycDInGzaFnqzzT/vtHl9N3wogsvhB5Ey2LtYij SiCT+QGm98x0pW5LecXmer2u2t5RwUlidqxbvI3ZJx+4uFOJXSQCG9hXZ3XIWKqh fWdau1gKBB3m46m72rmx4YbWRamloewWds8FhRjg2n2xYY0ALqxQA/BtbZQncLSh xHub9hqNlkHej/GSJ+yYySTg5nK9miSLpkoH8vz77EXsqmof3d2/u/PIUEmR45yw oR9BRhsYdXNfW2Ky6THLcvedAuGzPtUaZZc20N67vv4eaU7LvWS1iIHYJgzX8JQ= -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:28 2026 by rpki-client