This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/TCzDWgCjh0ueijRhfMDZa1EJgg4.cer File: TCzDWgCjh0ueijRhfMDZa1EJgg4.cer (raw, json) Hash identifier: xulWW9NWZlFbAR4JlrhVwfG5rhdx36vGmUi07DtI3Mc= Subject key identifier: 4C:2C:C3:5A:00:A3:87:4B:9E:8A:34:61:7C:C0:D9:6B:51:09:82:0E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36E9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 18 Nov 2025 10:46:17 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 329085 IP: 102.215.88.0/22 IP: 2c0f:2480::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14057 (0x36e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 18 10:46:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36E8D5AAF, serialNumber=4C2CC35A00A3874B9E8A34617CC0D96B5109820E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:b8:5c:1a:14:c6:09:74:8b:95:0f:8f:e0: 93:02:25:b6:1d:6d:b5:0f:c8:69:70:66:4c:f3:5f: f9:f6:2b:b6:e5:49:28:b1:74:3b:f9:c2:6c:0c:fb: a1:29:c6:a4:bb:7d:cc:37:2c:c8:c2:ef:f4:9b:47: bf:2f:09:d8:9b:d9:f2:c0:9e:ef:77:1a:0a:36:0b: 1e:71:6d:34:bf:0b:cf:51:bd:32:44:d7:af:b9:a2: 25:54:76:10:cd:db:02:2c:f5:62:ce:96:c2:0a:06: 19:67:10:cd:ad:3a:9f:b5:bc:b1:f6:16:53:8d:09: 86:32:02:25:46:f8:19:14:8b:00:5c:05:5d:01:cd: 76:aa:42:aa:c8:03:ee:84:e1:0c:e6:a8:65:68:dc: da:18:9e:79:14:a9:31:d2:af:23:46:a3:74:0b:07: ea:77:f2:7b:f3:12:5e:85:62:3a:ba:a3:c9:16:8d: e0:3a:c3:d0:15:39:80:b4:32:5c:e6:9e:e3:2c:16: 7e:8c:1a:68:d8:4a:f6:b2:0e:e4:8d:ac:b6:a3:fb: 19:c8:e3:86:e8:00:50:3d:70:73:e3:fd:4d:25:04: 60:2c:8f:73:7d:c8:fe:ae:25:c3:2d:57:6b:ca:84: dc:82:7b:ae:62:7b:39:f9:2f:46:54:23:88:41:dd: 59:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2C:C3:5A:00:A3:87:4B:9E:8A:34:61:7C:C0:D9:6B:51:09:82:0E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329085 sbgp-ipAddrBlock: critical IPv4: 102.215.88.0/22 IPv6: 2c0f:2480::/32 Signature Algorithm: sha256WithRSAEncryption 65:7e:8d:df:66:df:8a:ca:43:a9:90:f5:0f:c3:eb:37:3e:74: 29:e5:94:f8:96:60:f0:7a:99:36:37:c9:36:03:7e:bd:49:32: 1b:97:1e:35:84:90:19:b2:ab:af:00:a2:62:74:b8:24:01:4c: 7a:8c:01:d3:97:37:2b:a3:27:07:e8:38:7b:a3:28:cb:53:1c: 38:67:ac:33:cc:51:85:5d:4e:f6:aa:b5:5d:37:ff:11:65:1f: df:e9:76:92:9b:9c:e7:03:19:f2:48:55:fd:72:b5:17:ea:5a: 80:91:e9:c0:b0:70:15:01:fb:c7:ef:09:02:13:30:0a:aa:85: 92:8c:02:a7:3f:35:b5:6a:7a:23:b0:33:c0:f8:81:d9:4e:65: 80:99:b8:aa:9a:b1:75:54:f4:ee:b2:98:a8:10:08:53:f8:87: a7:31:2e:4b:c5:0c:fb:ba:41:52:d6:f4:2d:56:a9:3e:09:14: 13:09:5c:33:c2:74:c4:3f:4a:ef:40:7a:56:45:be:df:54:6d: 96:5b:0d:85:b0:2e:01:ab:3c:c6:6e:30:70:1c:b7:1e:38:e4: f0:96:f3:3e:21:37:eb:c9:c6:91:83:14:1d:f8:04:f1:3a:af: a6:52:e9:7b:5f:95:b9:56:40:a3:c5:d2:27:78:23:20:2b:4d: a1:21:c0:2a -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICNukwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTgxMDQ2MTdaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU4RDVBQUYxMTAvBgNVBAUTKDRDMkNDMzVBMDBBMzg3NEI5RThBMzQ2 MTdDQzBEOTZCNTEwOTgyMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLnLhcGhTGCXSLlQ+P4JMCJbYdbbUPyGlwZkzzX/n2K7blSSixdDv5wmwM+6Ep xqS7fcw3LMjC7/SbR78vCdib2fLAnu93Ggo2Cx5xbTS/C89RvTJE16+5oiVUdhDN 2wIs9WLOlsIKBhlnEM2tOp+1vLH2FlONCYYyAiVG+BkUiwBcBV0BzXaqQqrIA+6E 4QzmqGVo3NoYnnkUqTHSryNGo3QLB+p38nvzEl6FYjq6o8kWjeA6w9AVOYC0Mlzm nuMsFn6MGmjYSvayDuSNrLaj+xnI44boAFA9cHPj/U0lBGAsj3N9yP6uJcMtV2vK hNyCe65iezn5L0ZUI4hB3VnVAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUTCzDWgCj h0ueijRhfMDZa1EJgg4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFOEQ1QS8wN0U0NDQyOEI1NzUx MUVFOTUwMUVCNzc3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RThENUEvMDdFNDQ0MjhCNTc1MTFFRTk1MDFFQjc3Nzc1NDEyRTYvVEN6RFdn Q2poMHVlaWpSaGZNRFphMUVKZ2c0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBX0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm11gwDQQCAAIwBwMF ACwPJIAwDQYJKoZIhvcNAQELBQADggEBAGV+jd9m34rKQ6mQ9Q/D6zc+dCnllPiW YPB6mTY3yTYDfr1JMhuXHjWEkBmyq68AomJ0uCQBTHqMAdOXNyujJwfoOHujKMtT HDhnrDPMUYVdTvaqtV03/xFlH9/pdpKbnOcDGfJIVf1ytRfqWoCR6cCwcBUB+8fv CQITMAqqhZKMAqc/NbVqeiOwM8D4gdlOZYCZuKqasXVU9O6ymKgQCFP4h6cxLkvF DPu6QVLW9C1WqT4JFBMJXDPCdMQ/Su9AelZFvt9UbZZbDYWwLgGrPMZuMHActx44 5PCW8z4hN+vJxpGDFB34BPE6r6ZS6XtflblWQKPF0id4IyArTaEhwCo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:11:24 2025 by rpki-client