This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer File: Ob52uHZXsJfc7qO0DURSok5WA4I.cer (raw, json) Hash identifier: fEh75vJpMv4UZAIQQDV5HFAhF6zaX7M5ayIatlpxb0E= Subject key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BA9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:54:52 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328019 IP: 102.209.96.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15273 (0x3ba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:54:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:70:fb:ae:27:3d:0b:2e:bb:99:91:32:a6: 5e:50:37:64:3d:9e:6e:08:e0:fc:44:70:e3:a8:31: 87:28:df:a1:3f:a4:76:54:35:68:6b:e4:34:d2:a2: 72:b7:4f:ce:3a:9e:18:cc:bf:10:8c:28:29:52:6a: 64:d4:4a:52:91:28:51:fc:ef:59:f0:66:d7:40:8f: e4:81:2a:07:c3:34:ca:86:69:ac:e4:02:95:23:87: 6e:39:db:fe:52:a2:78:45:57:31:db:79:36:79:95: 2b:5a:10:bc:f8:07:4b:29:8a:b4:f0:29:9f:aa:46: 47:60:43:73:ce:57:76:a9:50:7a:52:d9:07:13:39: eb:b9:3b:4e:62:47:2b:31:4b:dd:c7:50:61:33:56: 11:27:36:d5:fd:4a:d5:8a:2c:b2:ab:b8:04:7d:e1: 8d:ff:70:cc:82:95:d0:d8:52:d6:a6:a8:68:60:38: 29:2e:09:55:1a:d0:29:0f:30:d8:9d:0c:df:68:01: 48:90:25:63:12:b3:6e:b4:99:e1:50:52:4e:18:99: 43:6d:79:a8:40:c0:52:53:83:04:ba:52:a3:89:ff: 9a:ce:5b:3c:76:bd:05:43:89:17:7a:f2:4c:e7:76: 7f:b2:89:fb:d3:22:3e:cf:2e:4d:04:dd:e3:60:de: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328019 sbgp-ipAddrBlock: critical IPv4: 102.209.96.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:b5:d3:30:e5:c8:bb:a1:e4:76:d8:c8:2a:95:25:1a:a7:bf: 79:92:fd:27:3d:09:31:9e:dd:b4:9e:2b:8d:b9:0f:8a:12:9e: 55:1e:bc:0f:d0:7d:b1:26:0b:a8:55:65:fd:db:b6:dd:30:06: c8:9c:a5:fa:fc:00:36:95:fa:04:d2:78:41:62:74:01:bc:d6: 98:3a:e9:75:2d:6e:7d:9d:b5:49:c0:6e:ba:b6:ec:22:18:62: d6:34:5d:82:4d:17:cf:dc:49:45:62:d1:ea:ec:ca:c2:4f:65: 87:aa:aa:48:b8:6c:4f:3c:05:69:c0:41:21:1b:5a:0c:59:6a: d4:35:3c:04:11:7b:01:2b:af:5f:25:df:1f:3b:09:01:62:cf: eb:2e:66:58:70:dc:13:0d:08:2f:4b:77:8b:5f:b2:2d:5a:6c: 81:bf:58:99:6f:66:8f:16:0d:ea:ff:66:c9:e2:67:18:7f:92: 20:37:23:33:82:bf:b9:3b:50:81:f2:e1:93:64:3c:85:a3:bb: 6b:fe:c1:55:18:48:aa:81:75:77:61:4b:ca:14:53:a3:89:65: d2:e5:50:c7:b5:2c:14:4f:0e:a6:95:eb:04:3b:80:36:4c:3c: 6a:1c:18:98:45:1c:db:cb:8a:42:58:9c:14:2e:5c:ca:07:94: 62:b2:03:76 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICO6kwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU0NTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg4MzIxQUYxMTAvBgNVBAUTKDM5QkU3NkI4NzY1N0IwOTdEQ0VFQTNC NDBENDQ1MkEyNEU1NjAzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTbHD7ric9Cy67mZEypl5QN2Q9nm4I4PxEcOOoMYco36E/pHZUNWhr5DTSonK3 T846nhjMvxCMKClSamTUSlKRKFH871nwZtdAj+SBKgfDNMqGaazkApUjh2452/5S onhFVzHbeTZ5lStaELz4B0spirTwKZ+qRkdgQ3POV3apUHpS2QcTOeu5O05iRysx S93HUGEzVhEnNtX9StWKLLKruAR94Y3/cMyCldDYUtamqGhgOCkuCVUa0CkPMNid DN9oAUiQJWMSs260meFQUk4YmUNteahAwFJTgwS6UqOJ/5rOWzx2vQVDiRd68kzn dn+yifvTIj7PLk0E3eNg3h9BAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUOb52uHZX sJfc7qO0DURSok5WA4IwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4ODMyMS84OTRERDhBMDBERkMx MUVGOTRBQTE4NUIwMTcwMDFCMS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODgzMjEvODk0REQ4QTAwREZDMTFFRjk0QUExODVCMDE3MDAxQjEvT2I1MnVI WlhzSmZjN3FPMERVUlNvazVXQTRJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAVMwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0WAwDQYJKoZIhvcN AQELBQADggEBAD210zDlyLuh5HbYyCqVJRqnv3mS/Sc9CTGe3bSeK425D4oSnlUe vA/QfbEmC6hVZf3btt0wBsicpfr8ADaV+gTSeEFidAG81pg66XUtbn2dtUnAbrq2 7CIYYtY0XYJNF8/cSUVi0ersysJPZYeqqki4bE88BWnAQSEbWgxZatQ1PAQRewEr r18l3x87CQFiz+suZlhw3BMNCC9Ld4tfsi1abIG/WJlvZo8WDer/ZsniZxh/kiA3 IzOCv7k7UIHy4ZNkPIWju2v+wVUYSKqBdXdhS8oUU6OJZdLlUMe1LBRPDqaV6wQ7 gDZMPGocGJhFHNvLikJYnBQuXMoHlGKyA3Y= -----END CERTIFICATE-----Generated at Sun Jan 25 05:59:10 2026 by rpki-client