This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer File: JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer (raw, json) Hash identifier: KkPczQtePydinC3hZkQMKiNbaT9CUJTO5P1Pz9Z4ga8= Subject key identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CE9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:41:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.208.192.0/22 IP: 102.222.48.0/22 IP: 2c0f:e970::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15593 (0x3ce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:41:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36AA6EDAF, serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:7f:fa:73:5a:b6:cd:d7:c5:d3:0a:f6:8b: f3:a7:46:03:fe:31:17:28:f9:0a:0e:75:49:4e:1c: a0:f0:cb:e1:91:97:0e:0e:11:d0:8b:61:16:bd:32: c4:d1:38:0d:f5:3a:5a:1c:c0:4a:41:22:55:3f:fc: 03:23:a0:ea:ea:c7:90:69:65:33:23:66:c5:91:de: bd:cf:01:e6:cb:07:fd:e2:b2:09:61:0a:5a:6a:14: 56:25:d8:84:68:8c:7d:22:60:00:db:d3:45:f2:c9: 3a:ae:7e:e2:c9:b8:b6:7f:3e:0d:d9:de:ea:f4:1b: 8d:70:6c:67:09:b2:1b:2b:18:26:ea:24:2d:20:4c: 7d:8f:bf:74:d0:28:d3:5b:1c:cb:f9:0a:6b:b9:f4: 16:0b:07:30:13:1b:92:b7:40:40:20:3a:fd:88:1f: 37:81:cb:64:d6:1b:dc:6f:ba:2a:a4:60:58:0f:89: a3:48:cd:95:0f:e0:79:b2:67:14:9a:41:47:19:e2: 53:7c:62:5a:3c:29:76:25:e8:6d:38:f4:84:5e:0a: 95:b3:d6:ab:65:4d:7b:d2:4a:14:5e:37:04:fd:29: 15:82:de:7e:54:ec:98:65:0f:54:88:3d:15:6d:75: fc:b4:2e:ed:68:b2:20:c3:2a:e8:b4:08:55:93:a6: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft sbgp-ipAddrBlock: critical IPv4: 102.208.192.0/22 102.222.48.0/22 IPv6: 2c0f:e970::/32 Signature Algorithm: sha256WithRSAEncryption 99:18:09:35:9c:fc:8b:b2:d4:56:89:20:97:59:50:ba:ea:69: b4:e8:3d:58:98:96:0c:aa:55:0c:ca:7f:e2:16:2e:10:c5:d9: e7:ae:c2:56:a0:34:23:78:51:40:e9:c8:58:c3:30:6e:5e:a9: 20:0e:fb:f1:86:08:f7:81:3a:fe:99:01:e4:4b:7d:59:43:f2: c7:cc:55:b5:24:08:c8:72:bc:48:41:74:9f:bb:23:4f:6f:53: 95:40:30:11:7c:e4:2a:7e:f9:bd:e9:e4:e9:c1:f5:bf:81:1f: 12:6f:39:8f:38:c0:09:4c:51:b8:bc:f2:d3:4d:18:07:aa:6e: 73:33:08:1f:62:61:4e:ed:0d:29:36:f5:2e:98:84:e8:48:c1: df:1d:dd:62:42:36:1e:4e:a2:40:f9:f4:cc:3d:5a:8d:72:a0: f9:d6:cb:8d:24:47:b1:b7:b9:c4:a7:b0:b1:c4:19:41:a8:4c: 78:f9:1e:ae:3a:c8:3c:7b:a4:b2:72:00:6d:56:cf:da:6d:74: 88:9d:e5:c6:c5:ee:5b:7b:2b:c4:a3:4b:93:e9:0c:18:4e:44: be:77:3d:e4:f9:4a:dd:3f:02:10:5e:c0:95:83:f3:b4:ed:5e: 40:4d:2a:57:4e:b4:56:d6:1a:48:1a:1d:0d:b5:86:7d:87:06: 00:09:cd:9d -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgICPOkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzQxNTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkFBNkVEQUYxMTAvBgNVBAUTKDI3MDMxNjc1QTI5NUFGRTM5MzVEOUY2 MjI2MUJENDg2OEQxNDRDNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCW/X/6c1q2zdfF0wr2i/OnRgP+MRco+QoOdUlOHKDwy+GRlw4OEdCLYRa9MsTR OA31OlocwEpBIlU//AMjoOrqx5BpZTMjZsWR3r3PAebLB/3isglhClpqFFYl2IRo jH0iYADb00XyyTqufuLJuLZ/Pg3Z3ur0G41wbGcJshsrGCbqJC0gTH2Pv3TQKNNb HMv5Cmu59BYLBzATG5K3QEAgOv2IHzeBy2TWG9xvuiqkYFgPiaNIzZUP4HmyZxSa QUcZ4lN8Ylo8KXYl6G049IReCpWz1qtlTXvSShReNwT9KRWC3n5U7JhlD1SIPRVt dfy0Lu1osiDDKui0CFWTpoN3AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUJwMWdaKV r+OTXZ9iJhvUho0UTE4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBQTZFRC81NjE4OTZEMkMyMTkx MUVCOTg2QTFCNzNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QUE2RUQvNTYxODk2RDJDMjE5MTFFQjk4NkExQjczRjhBRUEyMjgvSndNV2Rh S1ZyLU9UWFo5aUpodlVobzBVVEU0Lm1mdDA0BggrBgEFBQcBBwEB/wQlMCMwEgQC AAEwDAMEAmbQwAMEAmbeMDANBAIAAjAHAwUALA/pcDANBgkqhkiG9w0BAQsFAAOC AQEAmRgJNZz8i7LUVokgl1lQuupptOg9WJiWDKpVDMp/4hYuEMXZ567CVqA0I3hR QOnIWMMwbl6pIA778YYI94E6/pkB5Et9WUPyx8xVtSQIyHK8SEF0n7sjT29TlUAw EXzkKn75venk6cH1v4EfEm85jzjACUxRuLzy000YB6puczMIH2JhTu0NKTb1LpiE 6EjB3x3dYkI2Hk6iQPn0zD1ajXKg+dbLjSRHsbe5xKewscQZQahMePkerjrIPHuk snIAbVbP2m10iJ3lxsXuW3srxKNLk+kMGE5Evnc95PlK3T8CEF7AlYPztO1eQE0q V060VtYaSBodDbWGfYcGAAnNnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:29 2026 by rpki-client