This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer File: ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer (raw, json) Hash identifier: oXTUwxCs9G4zA7qiGl7PFLcNIM+b2IVUhUFD9Jdn1jA= Subject key identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F8F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 15 Jan 2026 14:35:16 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329686 IP: 102.203.164.0/22 IP: 2c0f:43a0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16271 (0x3f8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 15 14:35:16 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36DD266AF, serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0d:e0:7b:87:04:2f:10:06:39:18:c5:69:41: 4b:a2:90:55:b2:bc:c7:95:35:6d:c0:38:44:e9:03: 89:f7:66:37:43:34:83:4c:bd:35:50:54:7b:8e:d1: f6:cb:82:5f:c8:db:0a:e6:20:66:2a:f3:91:18:41: 00:40:b5:5a:cc:04:99:32:a6:fd:b7:d9:ee:72:2a: cc:68:7c:9f:70:22:28:33:84:0d:cf:ea:4d:94:49: b5:5a:62:ba:19:d1:74:6f:e0:1c:3f:48:49:c7:a5: 61:ad:c5:5e:b4:ab:6c:00:77:28:24:16:cb:aa:17: 7a:0e:94:c2:e7:23:66:11:23:5b:82:13:6b:26:2a: 60:20:1e:89:dc:c9:73:be:14:7d:cc:9a:29:15:57: 02:2c:0b:77:37:52:c8:99:ef:70:15:96:2d:00:e9: 8c:b7:b5:ba:57:6c:10:ab:54:66:4d:6b:2e:81:1a: a4:7e:58:2a:66:8b:e0:c1:34:a1:da:5b:64:00:3e: c2:d6:f1:be:c1:74:f8:33:b8:d7:03:73:06:53:72: b9:29:4b:76:43:a7:11:f9:60:37:a6:ff:18:99:b1: 8e:a1:69:61:39:0f:6c:c1:d9:21:0d:fe:ed:50:dc: c9:fd:44:2b:f0:42:d6:79:f4:f3:e6:61:a5:da:74: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329686 sbgp-ipAddrBlock: critical IPv4: 102.203.164.0/22 IPv6: 2c0f:43a0::/32 Signature Algorithm: sha256WithRSAEncryption bf:c1:2f:3c:7e:5e:f6:6d:f4:6a:72:0f:8e:4d:9a:8a:6e:2b: 79:23:59:51:3c:e3:97:61:a5:74:2e:c3:64:46:61:30:5e:72: f7:69:64:a1:4a:f7:55:3a:13:0c:cd:96:8a:80:de:f8:f4:30: d6:19:a4:1a:3c:93:c1:68:22:48:86:de:3f:aa:14:c2:d3:1c: fd:e8:e0:c6:ee:be:8e:42:bc:6b:bc:ff:27:81:dd:61:e4:a1: 12:fa:b7:16:58:2a:b2:6e:e5:5e:45:c1:f6:d9:55:c9:fa:77: 17:cd:c8:b8:39:73:74:a3:cf:50:ca:d6:2b:c1:a6:d1:3e:15: 66:96:c6:0d:96:a6:00:35:a6:91:1e:16:57:ca:0c:4f:20:16: 51:23:81:14:2b:a4:4a:97:7c:74:a1:d8:d6:00:89:d8:9b:98: 38:91:0c:20:a9:af:57:fa:e0:8d:2b:f1:88:7c:f7:ee:f6:8d: 32:26:ff:77:f5:f8:43:c3:bb:cd:01:e8:ed:7b:a4:70:35:d3: c5:b3:70:b2:8b:02:70:50:99:74:56:5a:1d:d0:6d:4b:78:74: 10:60:2b:32:8a:08:4f:48:dc:11:64:11:c5:fe:96:aa:d0:9d: bd:13:da:3e:ae:91:9f:78:5e:fd:08:4d:a3:30:e4:ec:a1:28: f0:13:c2:f4 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICP48wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMTUxNDM1MTZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkREMjY2QUYxMTAvBgNVBAUTKDIyREM1MDExQ0U4QTFGRUM1Rjg3MTM4 QjBCNjI4NUY5RjFCOEY1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqDeB7hwQvEAY5GMVpQUuikFWyvMeVNW3AOETpA4n3ZjdDNINMvTVQVHuO0fbL gl/I2wrmIGYq85EYQQBAtVrMBJkypv232e5yKsxofJ9wIigzhA3P6k2USbVaYroZ 0XRv4Bw/SEnHpWGtxV60q2wAdygkFsuqF3oOlMLnI2YRI1uCE2smKmAgHoncyXO+ FH3MmikVVwIsC3c3UsiZ73AVli0A6Yy3tbpXbBCrVGZNay6BGqR+WCpmi+DBNKHa W2QAPsLW8b7BdPgzuNcDcwZTcrkpS3ZDpxH5YDem/xiZsY6haWE5D2zB2SEN/u1Q 3Mn9RCvwQtZ59PPmYaXadOw5AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUItxQEc6K H+xfhxOLC2KF+fG49XQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZERDI2Ni82Mzc3QTRGNEYyMUYx MUYwOTI3QjZEREVEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2REQyNjYvNjM3N0E0RjRGMjFGMTFGMDkyN0I2RERFREFFNEVDOUMvSXR4UUVj NktILXhmaHhPTEMyS0YtZkc0OVhRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB9YwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmy6QwDQQCAAIwBwMF ACwPQ6AwDQYJKoZIhvcNAQELBQADggEBAL/BLzx+XvZt9GpyD45NmopuK3kjWVE8 45dhpXQuw2RGYTBecvdpZKFK91U6EwzNloqA3vj0MNYZpBo8k8FoIkiG3j+qFMLT HP3o4Mbuvo5CvGu8/yeB3WHkoRL6txZYKrJu5V5FwfbZVcn6dxfNyLg5c3Sjz1DK 1ivBptE+FWaWxg2WpgA1ppEeFlfKDE8gFlEjgRQrpEqXfHSh2NYAidibmDiRDCCp r1f64I0r8Yh89+72jTIm/3f1+EPDu80B6O17pHA108WzcLKLAnBQmXRWWh3QbUt4 dBBgKzKKCE9I3BFkEcX+lqrQnb0T2j6ukZ94Xv0ITaMw5OyhKPATwvQ= -----END CERTIFICATE-----Generated at Sun Jan 25 04:16:32 2026 by rpki-client