This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer File: PUpO_QKaES64mqyOyp2RekfLbFw.cer (raw, json) Hash identifier: bQaWGsiX6oZZrpqEusV+LoGY2x+T2jQ9Qq0CUQ4O3XI= Subject key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39E1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:49:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328820 IP: 102.220.104.0/22 IP: 2c0f:1200::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14817 (0x39e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:49:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:b8:14:48:37:e5:21:16:d2:e1:f3:44:c3: 0a:48:72:73:f1:c4:62:ce:74:20:2b:e6:a0:79:cf: 84:aa:b8:ce:79:32:b6:42:86:a9:f7:d7:18:bd:ea: 88:a8:6d:89:ee:2f:2a:aa:e3:fb:e6:ea:23:b2:f0: 7c:b7:2f:91:5e:d5:52:11:08:8a:d3:a0:1b:b6:0f: 8b:e1:3c:70:d5:37:2e:cf:7a:c3:85:ff:4a:2e:47: e1:e2:27:28:fa:dc:fb:e8:fc:62:b3:e8:e8:16:1e: 37:ac:3a:3a:50:51:01:6d:2e:70:cb:cb:ff:80:59: 27:6a:9e:72:8a:9d:96:16:f3:c6:bd:b0:a7:96:8f: 1d:a5:34:ad:18:c1:3e:61:7e:09:78:cb:77:ca:fc: 9f:4b:b4:a0:91:0a:91:0e:3e:6e:d3:7c:59:16:68: f2:c5:1e:f2:85:9e:36:cb:b8:68:d1:d3:ee:e3:73: cd:32:34:95:15:2d:18:de:ee:19:d9:51:f3:77:49: d9:58:10:00:14:30:45:20:f8:f2:ea:6f:b9:10:65: 43:7f:09:6f:cd:80:e5:d6:67:0a:df:22:5c:9a:e3: 77:6d:1c:fc:11:04:99:40:87:48:dc:b8:e7:93:c3: d3:cf:82:5a:d6:17:8e:24:3d:78:6d:f2:c5:19:f7: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328820 sbgp-ipAddrBlock: critical IPv4: 102.220.104.0/22 IPv6: 2c0f:1200::/32 Signature Algorithm: sha256WithRSAEncryption 93:67:41:11:7b:9e:f4:58:66:c5:a1:ca:47:6f:7d:7b:ec:8f: a4:61:61:10:b9:9b:86:c2:db:13:74:91:b2:6b:b9:c1:b5:e1: 19:2d:30:1f:22:9a:68:c2:d6:70:7a:f7:2e:30:4a:0c:d6:f6: 26:32:98:48:e1:f4:92:80:03:09:92:39:c8:d6:e2:ec:34:ef: e7:fa:94:d2:d7:f8:1f:d3:b2:be:64:56:71:86:36:90:5a:f3: 6e:ff:43:da:96:1c:b2:18:54:40:fe:55:3f:23:54:ae:72:83: 34:ac:4f:78:5b:f2:ee:34:43:3d:2c:94:c0:e3:42:5c:62:89: 33:17:af:cb:57:1a:b0:44:70:9b:21:79:0e:7b:a5:dc:90:78: 69:a2:b8:73:70:48:9c:a7:e8:ca:c2:2c:9b:a5:22:5a:4a:d2: b7:da:14:be:e6:d4:65:60:88:5f:3e:40:62:f9:46:b0:05:0c: 45:52:e5:20:17:c3:17:6c:41:03:48:f0:28:08:46:dc:18:04: a9:22:ec:0a:52:b9:af:03:ba:63:7c:02:bb:75:52:b9:27:70: 2b:63:d7:7c:6a:89:ee:0d:4b:76:37:2e:55:78:e5:ad:a3:de: 93:02:21:e2:bf:89:d7:e5:3f:9b:58:85:44:b6:9a:ed:cc:65: d7:fe:0c:a6 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOeEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQ5MjZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU5OEY1QUYxMTAvBgNVBAUTKDNENEE0RUZEMDI5QTExMkVCODlBQUM4 RUNBOUQ5MTdBNDdDQjZDNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPEbgUSDflIRbS4fNEwwpIcnPxxGLOdCAr5qB5z4SquM55MrZChqn31xi96oio bYnuLyqq4/vm6iOy8Hy3L5Fe1VIRCIrToBu2D4vhPHDVNy7PesOF/0ouR+HiJyj6 3Pvo/GKz6OgWHjesOjpQUQFtLnDLy/+AWSdqnnKKnZYW88a9sKeWjx2lNK0YwT5h fgl4y3fK/J9LtKCRCpEOPm7TfFkWaPLFHvKFnjbLuGjR0+7jc80yNJUVLRje7hnZ UfN3SdlYEAAUMEUg+PLqb7kQZUN/CW/NgOXWZwrfIlya43dtHPwRBJlAh0jcuOeT w9PPglrWF44kPXht8sUZ96+VAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUPUpO/QKa ES64mqyOyp2RekfLbFwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1OThGNS9BNDEwRDM1MERDMDIx MUVDOTlFMzYxODhGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTk4RjUvQTQxMEQzNTBEQzAyMTFFQzk5RTM2MTg4RjEyMjI0NjgvUFVwT19R S2FFUzY0bXF5T3lwMlJla2ZMYkZ3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBHQwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3GgwDQQCAAIwBwMF ACwPEgAwDQYJKoZIhvcNAQELBQADggEBAJNnQRF7nvRYZsWhykdvfXvsj6RhYRC5 m4bC2xN0kbJrucG14RktMB8immjC1nB69y4wSgzW9iYymEjh9JKAAwmSOcjW4uw0 7+f6lNLX+B/Tsr5kVnGGNpBa827/Q9qWHLIYVED+VT8jVK5ygzSsT3hb8u40Qz0s lMDjQlxiiTMXr8tXGrBEcJsheQ57pdyQeGmiuHNwSJyn6MrCLJulIlpK0rfaFL7m 1GVgiF8+QGL5RrAFDEVS5SAXwxdsQQNI8CgIRtwYBKki7ApSua8DumN8Art1Urkn cCtj13xqie4NS3Y3LlV45a2j3pMCIeK/idflP5tYhUS2mu3MZdf+DKY= -----END CERTIFICATE-----Generated at Sun Jan 25 21:36:44 2026 by rpki-client