This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer File: RQb8pqpV74TTpMAErIOrtQvu07k.cer (raw, json) Hash identifier: eI+bHVnp6Nr3reJMk6Z7lC8osRFy5jR1VYHuER3Jp38= Subject key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39CC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:45:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328598 IP: 102.22.88.0/21 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14796 (0x39cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:45:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:f3:b6:cb:21:b5:1c:84:14:5e:42:16:cf: b8:02:17:c2:ad:76:24:b7:2f:d8:26:8c:62:df:dd: 11:ae:32:91:f8:2b:9c:54:c9:bb:af:6f:1f:6e:29: 7e:6d:48:82:0a:c2:b3:b8:49:cd:b0:7b:dd:cc:3b: 7f:ab:d1:e0:8b:7d:b3:d0:c7:9d:75:d8:59:c1:03: c1:c3:39:36:fb:89:13:ee:aa:e1:b4:15:22:1f:8c: 3e:19:9c:6e:bd:78:8e:cd:b3:d9:a9:0a:88:70:c5: 7f:2f:57:64:a1:71:89:22:5d:81:93:0c:93:9d:1d: 04:7e:49:b2:7b:f1:02:9f:e0:26:19:ac:6e:f7:da: b5:cd:c7:41:ad:0e:8e:09:f8:70:d3:92:1c:f0:67: 9e:2f:b9:20:b7:45:7d:b0:ac:44:f1:9a:93:c9:e0: cf:d5:07:ac:f8:9c:3a:8a:be:54:e1:c8:41:60:8b: a0:89:5c:59:59:c8:65:41:54:bd:09:fc:49:07:e4: 99:11:7a:b1:dc:5b:33:2b:7a:07:12:5b:ad:25:07: e9:ff:c2:a3:a8:96:3a:0c:29:4a:6b:95:53:a2:9c: ee:91:d5:9a:d9:47:5a:d5:41:0d:83:31:06:a8:67: 18:0d:b7:de:90:5f:65:00:43:d2:cc:e4:db:19:16: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328598 sbgp-ipAddrBlock: critical IPv4: 102.22.88.0/21 Signature Algorithm: sha256WithRSAEncryption 66:7b:3b:7c:1e:19:cd:88:3b:25:dc:04:39:85:f8:02:28:b2: 43:d8:1d:af:e6:d3:7f:43:52:10:45:d3:1f:39:46:55:8d:45: f8:a9:38:a8:9c:77:c2:18:b5:45:9f:03:66:d7:8c:1f:a7:3c: 56:22:a1:91:68:8f:c6:c4:09:92:65:83:01:c3:f6:05:82:2d: 0b:1f:bf:39:65:a7:66:f0:91:12:bf:d5:8c:a9:26:d1:93:95: e0:61:cf:50:bc:76:9d:27:a7:7d:f4:f5:23:2f:a1:a4:f6:6e: 04:33:41:5d:06:5e:93:67:cd:86:1d:6d:5e:2d:26:33:46:08: f8:79:aa:c5:fb:2e:24:59:8b:40:b3:9c:09:d2:79:02:e6:eb: 4c:d9:69:62:6a:c1:13:54:2c:3c:ad:6b:30:27:5c:43:f4:b3: c5:4e:ca:1c:50:12:f3:e8:d4:bf:0b:c9:14:a3:92:4d:39:49: c6:2c:65:74:19:df:dc:ce:11:fa:3e:a3:f4:49:0c:52:c5:3b: 38:4f:7b:7c:9f:68:e1:ca:b3:38:03:8c:52:11:dc:b0:c4:ea: c2:44:73:6f:ff:7a:97:33:bf:9b:18:5c:47:93:ab:f2:d2:41: 2e:b3:8f:84:a0:27:17:32:42:38:a4:ad:aa:fc:94:cb:df:16: 0e:03:42:80 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICOcwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQ1NTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU4QUUwQUYxMTAvBgNVBAUTKDQ1MDZGQ0E2QUE1NUVGODREM0E0QzAw NEFDODNBQkI1MEJFRUQzQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0afO2yyG1HIQUXkIWz7gCF8KtdiS3L9gmjGLf3RGuMpH4K5xUybuvbx9uKX5t SIIKwrO4Sc2we93MO3+r0eCLfbPQx5112FnBA8HDOTb7iRPuquG0FSIfjD4ZnG69 eI7Ns9mpCohwxX8vV2ShcYkiXYGTDJOdHQR+SbJ78QKf4CYZrG732rXNx0GtDo4J +HDTkhzwZ54vuSC3RX2wrETxmpPJ4M/VB6z4nDqKvlThyEFgi6CJXFlZyGVBVL0J /EkH5JkRerHcWzMregcSW60lB+n/wqOoljoMKUprlVOinO6R1ZrZR1rVQQ2DMQao ZxgNt96QX2UAQ9LM5NsZFv5ZAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQURQb8pqpV 74TTpMAErIOrtQvu07kwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1OEFFMC9FNTUxQzNFQzlBMzAx MUVDQjU2M0EwQjQ1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NThBRTAvRTU1MUMzRUM5QTMwMTFFQ0I1NjNBMEI0NUE0MEQ1NzcvUlFiOHBx cFY3NFRUcE1BRXJJT3J0UXZ1MDdrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA5YwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANmFlgwDQYJKoZIhvcN AQELBQADggEBAGZ7O3weGc2IOyXcBDmF+AIoskPYHa/m039DUhBF0x85RlWNRfip OKicd8IYtUWfA2bXjB+nPFYioZFoj8bECZJlgwHD9gWCLQsfvzllp2bwkRK/1Yyp JtGTleBhz1C8dp0np3309SMvoaT2bgQzQV0GXpNnzYYdbV4tJjNGCPh5qsX7LiRZ i0CznAnSeQLm60zZaWJqwRNULDytazAnXEP0s8VOyhxQEvPo1L8LyRSjkk05ScYs ZXQZ39zOEfo+o/RJDFLFOzhPe3yfaOHKszgDjFIR3LDE6sJEc2//epczv5sYXEeT q/LSQS6zj4SgJxcyQjikrar8lMvfFg4DQoA= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:47 2026 by rpki-client