This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer File: NewylCgvp6NUePgvkJSwP-Jgb7Y.cer (raw, json) Hash identifier: r2NCsEFKvTR8lmV9yFQ6eafkzACc0ANRIZrExj8c/OU= Subject key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BD5 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:01:18 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328266 IP: 102.135.240.0/21 IP: 102.204.228.0/22 IP: 102.208.236.0/22 IP: 102.216.76.0/22 IP: 2c0f:ef18::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15317 (0x3bd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:01:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36AB1CDAF, serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:6c:3e:a5:4a:37:8e:93:d7:d7:10:c9:03: 02:72:50:3e:ee:3d:ac:cb:a2:42:c5:d0:ac:bc:33: 69:6a:7c:14:ec:66:40:e0:91:7c:18:1e:f6:8e:f3: e9:06:4e:8f:e3:b3:c0:86:51:3c:00:0d:c2:f2:1e: 51:25:55:14:45:61:e3:88:bc:66:fd:78:71:4b:18: b8:4c:d8:ef:0a:0c:c7:d5:0d:4d:4e:c5:59:cc:ee: 7c:a0:e1:4e:83:af:ba:ef:18:60:fc:6c:a6:5f:9c: 86:42:eb:5c:9e:d7:ec:ce:64:e6:5e:68:84:d4:d9: 21:07:57:ae:cc:3a:b8:60:55:5a:92:f0:17:c1:1f: cd:dd:7c:76:3e:3d:c1:bc:9a:27:74:9e:b5:d9:bb: 69:f9:76:98:dc:71:4e:18:50:67:9a:92:b5:5d:20: 4f:89:f8:b8:78:ba:72:9f:3f:81:50:a5:16:a3:75: 35:e0:01:37:ea:d8:23:98:8a:df:f2:7f:2b:24:93: 01:6c:5b:13:12:fd:0c:ba:d4:91:86:d4:ce:2d:14: 36:9f:92:ff:db:62:d2:89:3b:38:e7:eb:60:cb:02: d5:82:c5:e6:2a:82:00:b7:43:1a:f8:ec:12:4b:dc: 72:3e:ed:7a:84:a4:b2:a7:53:dc:35:ed:19:c6:4a: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328266 sbgp-ipAddrBlock: critical IPv4: 102.135.240.0/21 102.204.228.0/22 102.208.236.0/22 102.216.76.0/22 IPv6: 2c0f:ef18::/32 Signature Algorithm: sha256WithRSAEncryption 22:31:bb:6f:2e:be:a9:e3:4c:44:d3:6a:44:f7:f5:7d:cc:09: f9:6e:4a:53:52:58:fc:61:aa:ff:a0:9c:76:74:5e:33:cc:a7: b7:3f:0d:36:91:d5:94:d0:6b:1e:2c:bf:ae:eb:d9:7f:8e:28: 80:8a:c7:56:4e:ab:1d:d2:9e:29:c4:1b:70:d8:16:44:28:30: 6e:ef:17:d8:8d:e8:86:4d:8a:2d:c3:73:40:aa:12:b5:6c:03: e3:3d:aa:ae:8e:0a:16:15:79:00:60:81:cd:4d:45:6f:9c:53: a8:41:3b:70:ad:02:f2:ed:27:0e:ce:83:05:e1:98:19:97:cb: 08:80:74:d5:57:1d:43:7c:d6:54:07:fc:7d:8d:f3:82:77:07: a9:63:e5:5a:85:3a:5c:00:28:98:2c:6e:4b:19:59:eb:b0:7e: 98:fe:03:0f:4d:cc:8c:51:3c:a7:ab:95:87:79:53:04:75:ac: df:26:cd:4e:ac:7d:60:d4:d5:06:03:24:64:aa:f5:a9:39:4a: 11:aa:39:33:46:f5:0a:01:be:c4:79:e5:5b:e6:72:b0:88:9d: 61:91:bc:bf:0d:a3:02:f5:3a:8b:c2:16:0c:e4:92:af:d1:5c: 82:59:97:42:8e:5f:bd:81:96:c0:7e:99:3b:7c:7c:ea:b0:29: bd:02:ff:7a -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICO9UwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzAxMThaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkFCMUNEQUYxMTAvBgNVBAUTKDM1RUMzMjk0MjgyRkE3QTM1NDc4Rjgy RjkwOTRCMDNGRTI2MDZGQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQj2w+pUo3jpPX1xDJAwJyUD7uPazLokLF0Ky8M2lqfBTsZkDgkXwYHvaO8+kG To/js8CGUTwADcLyHlElVRRFYeOIvGb9eHFLGLhM2O8KDMfVDU1OxVnM7nyg4U6D r7rvGGD8bKZfnIZC61ye1+zOZOZeaITU2SEHV67MOrhgVVqS8BfBH83dfHY+PcG8 mid0nrXZu2n5dpjccU4YUGeakrVdIE+J+Lh4unKfP4FQpRajdTXgATfq2COYit/y fyskkwFsWxMS/Qy61JGG1M4tFDafkv/bYtKJOzjn62DLAtWCxeYqggC3Qxr47BJL 3HI+7XqEpLKnU9w17RnGSnOhAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUNewylCgv p6NUePgvkJSwP+Jgb7YwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBQjFDRC85RDQ5QjkyNjgxQkMx MUVBOTJEODQ4NUVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QUIxQ0QvOUQ0OUI5MjY4MUJDMTFFQTkyRDg0ODVFRjhBRUEyMjgvTmV3eWxD Z3ZwNk5VZVBndmtKU3dQLUpnYjdZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAkowQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBANmh/ADBAJmzOQDBAJm 0OwDBAJm2EwwDQQCAAIwBwMFACwP7xgwDQYJKoZIhvcNAQELBQADggEBACIxu28u vqnjTETTakT39X3MCfluSlNSWPxhqv+gnHZ0XjPMp7c/DTaR1ZTQax4sv67r2X+O KICKx1ZOqx3SninEG3DYFkQoMG7vF9iN6IZNii3Dc0CqErVsA+M9qq6OChYVeQBg gc1NRW+cU6hBO3CtAvLtJw7OgwXhmBmXywiAdNVXHUN81lQH/H2N84J3B6lj5VqF OlwAKJgsbksZWeuwfpj+Aw9NzIxRPKerlYd5UwR1rN8mzU6sfWDU1QYDJGSq9ak5 ShGqOTNG9QoBvsR55VvmcrCInWGRvL8NowL1OovCFgzkkq/RXIJZl0KOX72BlsB+ mTt8fOqwKb0C/3o= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:21 2026 by rpki-client