This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer File: RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer (raw, json) Hash identifier: GLel30DHDFGk9DOaNQtV+Q5U0Sj9alac3RnjA3g0d7Q= Subject key identifier: 46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36CC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Wed 12 Nov 2025 12:22:04 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 329659 IP: 102.204.0.0/22 IP: 2c0f:a0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14028 (0x36cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 12 12:22:04 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36AA372AF, serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:1c:e4:46:31:fc:9e:09:0c:9f:f9:e6:1a: 9c:c8:5f:13:fd:4f:43:5d:73:b4:19:f3:d7:ac:7b: 65:72:5a:bd:2a:bc:93:9c:db:12:37:82:70:a8:16: 2c:4b:49:4e:6f:56:29:ac:ac:13:c4:dc:ef:31:18: 7a:a6:73:a6:05:92:35:67:f0:ac:9d:fc:9f:87:a9: 55:ca:87:ba:63:65:1f:1e:58:60:2a:4e:48:a6:13: 22:77:44:c9:db:fa:79:19:d3:04:cc:f7:86:3f:35: 4f:9e:e9:f0:d7:9d:92:fc:ac:cc:19:5e:03:04:21: 95:2d:ed:da:4f:8f:60:40:15:ed:86:15:b1:bf:d9: 8c:63:27:8d:fe:c2:dc:b4:1c:8a:04:62:7e:d1:b2: 19:bb:82:b5:a4:d3:0c:8f:0d:85:9e:e4:3f:6e:d1: e6:1a:fb:76:3c:cf:29:1c:fb:26:06:e3:86:ce:55: f2:e1:0a:bd:a1:2a:b0:02:b7:78:ad:6b:8e:04:55: f5:60:87:54:c8:27:ea:29:91:36:75:e2:a5:ee:f9: ee:10:7b:c3:38:d6:c9:59:f5:ed:d5:0d:0e:b0:5f: 34:11:b6:61:a1:fd:eb:47:97:5e:1b:a3:71:b7:a0: 2d:81:17:d0:dd:5f:c1:52:fa:be:ad:e0:82:b8:f7: 2f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329659 sbgp-ipAddrBlock: critical IPv4: 102.204.0.0/22 IPv6: 2c0f:a0::/32 Signature Algorithm: sha256WithRSAEncryption 60:6b:24:18:f2:4e:e9:c5:9d:72:71:a5:26:00:b1:b1:9e:c3: 93:8c:fa:fd:e1:b1:19:c5:45:32:88:95:80:e3:6e:f8:17:e8: f0:ea:e2:43:d2:1d:1d:c3:d2:a5:62:9c:0e:3e:d6:03:9a:90: be:28:45:9c:ae:3f:71:63:cf:1b:2c:b1:b8:b6:0a:f2:08:3b: 3c:97:af:b3:4d:22:0c:2b:ef:fb:56:61:52:ff:19:4d:71:6e: 1d:0c:97:6b:18:6e:fd:a0:53:0b:29:0e:7f:91:72:ff:b8:e8: ea:8e:75:f8:3e:f3:08:da:2d:61:eb:f3:19:10:a2:6d:62:59: 1d:44:f0:b7:1b:a8:65:bd:3e:44:4d:e7:2a:69:5f:81:7f:ec: 10:cb:6a:04:bf:7b:02:59:23:33:e0:fa:d3:37:4d:24:e5:95: e7:4f:73:dd:4b:ca:69:ef:33:40:d5:5d:d8:43:c9:7c:54:4b: 5f:d7:f7:8a:2c:58:79:0c:14:56:ad:d2:c9:65:11:b1:ae:5f: 4f:89:86:be:fc:ed:23:b6:ee:63:ed:be:e8:8c:32:00:82:c5: e1:02:6c:96:d2:d5:e1:79:27:cb:11:f3:a7:d8:f5:e0:c5:3f: bc:12:12:c1:61:db:fd:c4:f2:1f:68:31:c1:2d:c8:b2:16:b2: 57:c6:93:bc -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICNswwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTIxMjIyMDRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkFBMzcyQUYxMTAvBgNVBAUTKDQ2NTY5NzM1MTE1OUQxNDFFNTQ5MkY4 RERDMDAxMTcxRjZEMUU1RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5mhzkRjH8ngkMn/nmGpzIXxP9T0Ndc7QZ89ese2VyWr0qvJOc2xI3gnCoFixL SU5vVimsrBPE3O8xGHqmc6YFkjVn8Kyd/J+HqVXKh7pjZR8eWGAqTkimEyJ3RMnb +nkZ0wTM94Y/NU+e6fDXnZL8rMwZXgMEIZUt7dpPj2BAFe2GFbG/2YxjJ43+wty0 HIoEYn7Rshm7grWk0wyPDYWe5D9u0eYa+3Y8zykc+yYG44bOVfLhCr2hKrACt3it a44EVfVgh1TIJ+opkTZ14qXu+e4Qe8M41slZ9e3VDQ6wXzQRtmGh/etHl14bo3G3 oC2BF9DdX8FS+r6t4IK49y/nAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQURlaXNRFZ 0UHlSS+N3AARcfbR5fIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBQTM3Mi8yREQyN0ZFOEJGQzIx MUYwOUM2MjFBQzlEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QUEzNzIvMkREMjdGRThCRkMyMTFGMDlDNjIxQUM5REFFNEVDOUMvUmxhWE5S RlowVUhsU1MtTjNBQVJjZmJSNWZJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB7swLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzAAwDQQCAAIwBwMF ACwPAKAwDQYJKoZIhvcNAQELBQADggEBAGBrJBjyTunFnXJxpSYAsbGew5OM+v3h sRnFRTKIlYDjbvgX6PDq4kPSHR3D0qVinA4+1gOakL4oRZyuP3Fjzxsssbi2CvII OzyXr7NNIgwr7/tWYVL/GU1xbh0Ml2sYbv2gUwspDn+Rcv+46OqOdfg+8wjaLWHr 8xkQom1iWR1E8LcbqGW9PkRN5yppX4F/7BDLagS/ewJZIzPg+tM3TSTlledPc91L ymnvM0DVXdhDyXxUS1/X94osWHkMFFat0sllEbGuX0+Jhr787SO27mPtvuiMMgCC xeECbJbS1eF5J8sR86fY9eDFP7wSEsFh2/3E8h9oMcEtyLIWslfGk7w= -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:36 2025 by rpki-client