This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer File: J3k9IV8IgF240LqJLTNvKat7sFs.cer (raw, json) Hash identifier: ifMdKzHWs099LM7tmJyX4vqlmOREWjNcgFh7qlYEW24= Subject key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 377A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:06:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329063 IP: 102.215.132.0/22 IP: 2c0f:7680::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14202 (0x377a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:06:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:ed:20:37:10:7a:91:e1:fd:00:9f:74:0a: 11:d0:c5:2a:a4:dd:e7:18:68:a6:0a:43:0f:c5:45: 28:6b:99:94:30:e3:c4:90:69:06:63:d3:ea:6c:25: 6b:9c:67:4c:4b:50:97:f4:25:dc:21:d3:ef:e9:ec: 96:5e:9b:b1:33:6d:b0:04:78:8b:4f:16:2b:55:1c: 01:4c:70:c1:c4:d1:8c:f5:ae:78:26:53:ad:6f:c9: bf:be:50:76:f5:20:b7:6b:ea:c2:80:ce:d6:a8:31: e9:24:db:20:27:82:51:ae:3c:14:51:d2:03:5d:e5: 8b:cc:57:28:d0:59:d7:be:a6:a5:55:ae:ad:1b:8f: 50:68:32:0d:34:b6:c5:2c:6e:d8:22:56:fc:0b:7c: 69:ff:40:64:53:e2:b5:8b:3f:53:9d:14:a1:08:f9: d5:8d:a2:f3:a3:91:22:97:fd:06:8d:8b:8e:58:ee: 68:0b:09:a6:9b:53:f3:fb:8d:44:b0:08:35:da:40: 18:82:a9:be:a2:44:cf:5a:08:3f:88:ae:8f:57:66: 32:26:35:6e:40:19:39:18:ac:92:40:c3:de:5b:11: 89:cd:51:0b:3d:c5:06:49:37:0a:c5:40:65:e8:71: ac:8b:1e:7f:28:29:ae:ab:f9:cc:fd:12:48:55:ff: b3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329063 sbgp-ipAddrBlock: critical IPv4: 102.215.132.0/22 IPv6: 2c0f:7680::/32 Signature Algorithm: sha256WithRSAEncryption 37:20:d1:68:ec:ff:27:46:7a:86:41:f3:57:c6:3f:a5:f8:cb: 42:da:6b:d7:15:c2:b2:4f:ee:b1:f9:0c:ec:1f:c0:f9:4f:2e: 2b:d0:2b:22:2d:53:50:e3:a6:f2:8e:df:6e:0b:34:f5:c6:76: 72:78:da:81:40:7f:6d:12:e4:d5:39:77:03:dd:3b:b6:21:4b: b0:8b:ad:e7:a4:59:00:72:f2:1a:a5:c3:61:a9:ca:8e:f4:b4: fe:ba:f6:5e:d6:88:ec:f6:1e:9d:c4:1f:ab:3e:f0:43:c5:d5: e9:f3:52:41:1c:80:99:01:74:22:9a:e3:e2:d8:f4:16:51:cd: 83:be:c2:f8:59:3c:99:50:a9:f3:73:18:ea:34:7b:43:5f:99: d9:d3:61:ad:6e:34:4d:71:5f:ea:a6:bd:db:8a:5f:b2:7e:f8: 69:d8:3d:5b:7f:8c:22:2e:40:78:47:aa:79:03:c4:8c:25:fa: 02:81:62:6d:3e:e3:ca:3e:6a:7d:1d:64:3f:ae:c3:35:4f:ab: 0c:28:16:49:ea:56:71:51:a6:b5:30:92:2f:73:84:d3:b0:65: 73:67:87:c6:cf:37:22:6e:5b:05:50:01:a5:66:73:bb:f2:83: 8d:1a:13:e0:b3:73:12:10:cf:12:ec:22:60:a7:3f:b5:5c:fd: ab:a4:1d:50 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICN3owDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDA2NTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE0RDFEQUYxMTAvBgNVBAUTKDI3NzkzRDIxNUYwODgwNURCOEQwQkE4 OTJEMzM2RjI5QUI3QkIwNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs1+0gNxB6keH9AJ90ChHQxSqk3ecYaKYKQw/FRShrmZQw48SQaQZj0+psJWuc Z0xLUJf0Jdwh0+/p7JZem7EzbbAEeItPFitVHAFMcMHE0Yz1rngmU61vyb++UHb1 ILdr6sKAztaoMekk2yAnglGuPBRR0gNd5YvMVyjQWde+pqVVrq0bj1BoMg00tsUs btgiVvwLfGn/QGRT4rWLP1OdFKEI+dWNovOjkSKX/QaNi45Y7mgLCaabU/P7jUSw CDXaQBiCqb6iRM9aCD+Iro9XZjImNW5AGTkYrJJAw95bEYnNUQs9xQZJNwrFQGXo cayLHn8oKa6r+cz9EkhV/7OHAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUJ3k9IV8I gF240LqJLTNvKat7sFswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNEQxRC81OENGMzBFNDI5Mjgx MUVEOEU2OEU4RjhGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTREMUQvNThDRjMwRTQyOTI4MTFFRDhFNjhFOEY4RjEyMjI0NjgvSjNrOUlW OElnRjI0MExxSkxUTnZLYXQ3c0ZzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBWcwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm14QwDQQCAAIwBwMF ACwPdoAwDQYJKoZIhvcNAQELBQADggEBADcg0Wjs/ydGeoZB81fGP6X4y0Laa9cV wrJP7rH5DOwfwPlPLivQKyItU1DjpvKO324LNPXGdnJ42oFAf20S5NU5dwPdO7Yh S7CLreekWQBy8hqlw2Gpyo70tP669l7WiOz2Hp3EH6s+8EPF1enzUkEcgJkBdCKa 4+LY9BZRzYO+wvhZPJlQqfNzGOo0e0NfmdnTYa1uNE1xX+qmvduKX7J++GnYPVt/ jCIuQHhHqnkDxIwl+gKBYm0+48o+an0dZD+uwzVPqwwoFknqVnFRprUwki9zhNOw ZXNnh8bPNyJuWwVQAaVmc7vyg40aE+CzcxIQzxLsImCnP7Vc/aukHVA= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:31 2026 by rpki-client