This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer File: PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer (raw, json) Hash identifier: 40YK6vcMEJXHhj/0sPkNmU//o1+2yPLxUikZHobnHn4= Subject key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C2C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:14:33 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329227 IP: 102.212.68.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15404 (0x3c2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:14:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:41:ff:01:bc:8c:e2:d5:33:9a:7f:56:e6: 2e:16:92:9f:03:e1:d6:3c:15:c5:0b:46:2e:c8:a1: b7:cb:0c:ba:7b:d6:7c:22:8b:3f:ba:ad:fb:67:ea: 93:0f:ca:ab:f9:f8:eb:0c:97:53:cf:9b:09:13:51: df:b1:d0:75:d9:eb:cf:44:d8:c4:e8:2c:5e:d9:f8: 49:8a:6f:84:41:7a:e0:42:84:4a:5e:c4:38:bf:67: 5e:67:86:ee:cc:85:e4:03:f3:9f:e3:58:bc:33:f7: 9e:7d:9d:10:b1:88:11:e3:bf:05:2f:94:96:bc:b4: d8:e9:8f:1f:61:0b:ef:40:be:e6:63:cd:34:e3:7e: 6c:de:7d:2c:11:69:dc:c7:c6:c1:84:a4:a4:5b:d2: 40:b6:0b:0b:3f:d6:fc:8a:cc:c8:30:5b:96:5a:e2: 21:ad:6b:97:aa:fe:80:06:70:da:2a:f6:e1:68:83: 8a:7a:4d:ba:ce:c0:62:cd:c2:72:c5:eb:d6:23:e3: df:fa:5d:2a:76:3d:9f:b3:b0:53:6c:c0:83:b7:c7: 23:2e:24:4a:70:10:78:2e:8f:e9:05:ce:36:b3:b4: 57:bc:b4:0d:f1:32:80:1b:7d:b4:03:82:ad:b8:9a: a2:33:fc:51:25:43:94:7f:eb:fd:61:4e:fc:eb:83: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329227 sbgp-ipAddrBlock: critical IPv4: 102.212.68.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:a9:08:d3:b3:e6:ef:02:a5:fb:93:13:05:13:cb:f6:fb:72: 33:52:3b:67:a5:48:e5:4f:48:84:d7:e4:74:f1:29:24:d1:41: cc:d2:e3:56:a5:bc:f3:63:8e:9a:d0:cb:d5:e1:fc:12:b1:e4: 0b:bc:35:9e:4e:1a:f5:ff:da:19:77:9c:c0:92:64:4e:b4:f0: 5e:70:b7:85:ec:b7:90:c4:90:a3:fa:1a:7e:75:0f:38:d3:9f: dc:f2:44:6e:d6:a3:aa:86:c4:70:82:23:fa:01:18:28:08:9c: 43:ea:26:e6:67:8a:16:d0:ac:69:b4:df:4e:c8:9c:2f:4d:43: 9d:77:16:70:5b:78:f1:04:5b:53:94:5e:28:d9:4a:05:9c:ef: 4a:e5:2c:3d:8c:45:3d:89:2f:ea:35:48:55:4d:83:44:71:3d: 21:b2:06:13:9e:27:20:49:52:17:90:04:27:4a:7d:18:33:49: 7b:6f:ab:8b:a7:8b:79:89:c0:a1:9e:23:05:50:80:1a:e5:80: 54:6d:bb:87:bf:d6:3a:c9:ed:9d:f8:19:72:2d:6c:5d:1d:4f: b3:0d:1d:0e:f2:75:5a:9a:5a:eb:3e:3c:a1:74:48:7a:5d:71: 80:ea:2b:d3:d5:d7:fb:a5:18:a3:ae:dd:45:75:8e:ea:01:a0: 5a:b4:df:77 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICPCwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzE0MzNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk4MTI1QUYxMTAvBgNVBAUTKDNDNzlGMEZDQkJCMEMwNDFDOEI0RjZE RUUxMDNCMDI1MTk1MTZFRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqAUH/AbyM4tUzmn9W5i4Wkp8D4dY8FcULRi7IobfLDLp71nwiiz+6rftn6pMP yqv5+OsMl1PPmwkTUd+x0HXZ689E2MToLF7Z+EmKb4RBeuBChEpexDi/Z15nhu7M heQD85/jWLwz9559nRCxiBHjvwUvlJa8tNjpjx9hC+9AvuZjzTTjfmzefSwRadzH xsGEpKRb0kC2Cws/1vyKzMgwW5Za4iGta5eq/oAGcNoq9uFog4p6TbrOwGLNwnLF 69Yj49/6XSp2PZ+zsFNswIO3xyMuJEpwEHguj+kFzjaztFe8tA3xMoAbfbQDgq24 mqIz/FElQ5R/6/1hTvzrg2WbAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUPHnw/Luw wEHItPbe4QOwJRlRbvQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5ODEyNS85RUQ3RUIxRTgzODQx MUVFQUY4MTMxMzU0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTgxMjUvOUVEN0VCMUU4Mzg0MTFFRUFGODEzMTM1NEFEOUU2RkMvUEhud19M dXd3RUhJdFBiZTRRT3dKUmxSYnZRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBgswHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1EQwDQYJKoZIhvcN AQELBQADggEBAH6pCNOz5u8CpfuTEwUTy/b7cjNSO2elSOVPSITX5HTxKSTRQczS 41alvPNjjprQy9Xh/BKx5Au8NZ5OGvX/2hl3nMCSZE608F5wt4Xst5DEkKP6Gn51 DzjTn9zyRG7Wo6qGxHCCI/oBGCgInEPqJuZnihbQrGm0307InC9NQ513FnBbePEE W1OUXijZSgWc70rlLD2MRT2JL+o1SFVNg0RxPSGyBhOeJyBJUheQBCdKfRgzSXtv q4uni3mJwKGeIwVQgBrlgFRtu4e/1jrJ7Z34GXItbF0dT7MNHQ7ydVqaWus+PKF0 SHpdcYDqK9PV1/ulGKOu3UV1juoBoFq033c= -----END CERTIFICATE-----Generated at Sun Jan 25 13:44:36 2026 by rpki-client