This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer File: KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer (raw, json) Hash identifier: u1w+SwEngyNHDmWwIADFFsVQMOqP2saj3yV7vbcvUXo= Subject key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37AC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:16:12 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329678 IP: 102.203.196.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14252 (0x37ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:16:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:2c:e7:f6:7c:77:9d:48:77:cd:a2:de:3d: 4b:16:d6:03:e2:e3:c8:5c:1b:11:74:9c:8f:90:b6: df:c6:fe:03:8f:35:d3:bd:c3:eb:50:b7:ae:3b:5d: 2a:d6:1b:af:28:74:42:60:7b:1f:1f:f6:85:08:4d: 0d:cd:e9:a7:e0:39:3d:50:eb:57:cd:98:de:06:39: 20:52:42:8e:2e:26:b7:6e:b3:09:93:4e:a6:33:9d: 90:53:1e:83:72:e2:4d:61:65:29:39:15:b4:bb:24: 7c:bb:7c:7e:a7:5d:c2:cf:35:ca:74:d5:da:8c:cb: a3:69:2f:b2:48:9e:b5:08:ae:ef:bc:7b:74:19:10: cd:5e:ba:4d:f1:a6:2c:21:4b:47:4d:c9:d0:ed:b1: cd:70:e8:67:c7:7a:79:8c:9b:4a:10:be:95:d3:28: 0c:4d:59:92:17:3e:9e:04:00:72:ff:65:0b:f6:ed: 8a:9c:56:fc:23:58:82:ad:66:f9:75:26:50:0e:46: 7b:35:6a:5c:98:a9:84:b6:63:ac:97:a8:a4:35:bd: 44:00:10:25:44:91:e8:30:6a:9a:25:8c:44:f1:70: de:0b:95:d1:08:ae:c5:73:94:87:de:49:b7:63:19: 27:d6:19:b5:86:f0:a0:bc:37:eb:60:db:97:d1:9e: ba:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329678 sbgp-ipAddrBlock: critical IPv4: 102.203.196.0/22 Signature Algorithm: sha256WithRSAEncryption 11:94:11:f6:80:14:4e:1a:55:fd:40:1c:c1:bd:36:bc:a6:2f: c6:fc:d4:30:98:cf:21:be:3a:c5:70:4f:4e:11:c2:d4:f3:b2: f0:ee:05:ad:bb:a2:f7:c9:6d:90:f7:d2:40:bd:08:68:8d:e0: b4:20:60:e5:a9:f8:da:a4:07:64:6b:24:2f:22:a7:8f:76:aa: ee:6e:4f:c5:65:34:79:f3:9f:27:1d:05:d0:05:84:5d:b4:cb: 4b:5e:7d:65:db:96:32:92:97:ed:15:8c:66:59:93:1b:d1:f0: 3c:4c:1e:3b:60:2a:70:87:7a:ac:71:4f:d5:13:d1:08:c8:39: 40:6a:12:42:7f:e4:0f:57:22:40:ca:cc:ea:01:64:ba:48:b7: 40:51:b7:11:cd:20:5f:e7:0e:eb:7a:fa:69:e0:ef:50:42:a5: 36:48:ec:e6:7c:89:20:c4:36:c6:d0:30:2c:95:3d:cf:da:72: 91:03:7d:df:87:f1:e7:09:90:19:9a:70:21:43:8b:51:c7:b4: 41:8e:93:8c:d6:06:b5:4d:d8:2f:42:0e:41:ba:6b:aa:69:c5: 87:75:86:8b:0a:d0:e4:6b:40:06:74:3d:4f:a4:77:f7:9b:78: b4:47:80:dd:9a:67:99:74:eb:fc:ae:4f:7b:56:af:c8:38:12: 04:8e:1b:7c -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICN6wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDE2MTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE4RURCQUYxMTAvBgNVBAUTKDI4MzI3NEM0MzA5QjAyN0E5QkQ1RTA2 NEJDNkVEMENGM0ZERjlCN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQuCzn9nx3nUh3zaLePUsW1gPi48hcGxF0nI+Qtt/G/gOPNdO9w+tQt647XSrW G68odEJgex8f9oUITQ3N6afgOT1Q61fNmN4GOSBSQo4uJrduswmTTqYznZBTHoNy 4k1hZSk5FbS7JHy7fH6nXcLPNcp01dqMy6NpL7JInrUIru+8e3QZEM1euk3xpiwh S0dNydDtsc1w6GfHenmMm0oQvpXTKAxNWZIXPp4EAHL/ZQv27YqcVvwjWIKtZvl1 JlAORns1alyYqYS2Y6yXqKQ1vUQAECVEkegwapoljETxcN4LldEIrsVzlIfeSbdj GSfWGbWG8KC8N+tg25fRnrq/AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUKDJ0xDCb Anqb1eBkvG7Qzz/fm30wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxOEVEQi9FQzcyQUMzQUUwRjUx MUYwOTY0MENBRDdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MThFREIvRUM3MkFDM0FFMEY1MTFGMDk2NDBDQUQ3REFFNEVDOUMvS0RKMHhE Q2JBbnFiMWVCa3ZHN1F6el9mbTMwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB84wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmy8QwDQYJKoZIhvcN AQELBQADggEBABGUEfaAFE4aVf1AHMG9NrymL8b81DCYzyG+OsVwT04RwtTzsvDu Ba27ovfJbZD30kC9CGiN4LQgYOWp+NqkB2RrJC8ip492qu5uT8VlNHnznycdBdAF hF20y0tefWXbljKSl+0VjGZZkxvR8DxMHjtgKnCHeqxxT9UT0QjIOUBqEkJ/5A9X IkDKzOoBZLpIt0BRtxHNIF/nDut6+mng71BCpTZI7OZ8iSDENsbQMCyVPc/acpED fd+H8ecJkBmacCFDi1HHtEGOk4zWBrVN2C9CDkG6a6ppxYd1hosK0ORrQAZ0PU+k d/ebeLRHgN2aZ5l06/yuT3tWr8g4EgSOG3w= -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:29 2026 by rpki-client