This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer File: TwSz--IMFQm6-aos_oN2Xy6WnK4.cer (raw, json) Hash identifier: 3d3ip/FQIcqyUzg9i5PIM0g3/LMhnrfEYarTNLsxhqE= Subject key identifier: 4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BC3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:58:35 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329483 IP: 102.208.52.0/24 IP: 2001:43fd:f000::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15299 (0x3bc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:58:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F368BE0BAF, serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:19:b9:0d:e8:de:66:48:46:0c:e2:6e:84: 2b:90:53:64:0f:2f:66:f3:c7:e5:74:5f:6e:ab:f6: 4d:35:9a:f9:2d:66:cf:e7:68:df:05:56:96:ab:f2: 82:7e:d9:9f:d9:57:b4:7d:7c:c8:f2:bc:ba:16:c1: 6f:b0:e4:bf:a6:4d:be:67:ac:06:1c:51:2c:2d:eb: 4e:fd:aa:47:61:3f:b9:d2:07:32:38:78:0a:62:57: cb:df:00:22:ec:52:b9:e9:44:a6:46:06:a3:50:98: b3:45:c4:f3:c2:11:67:02:4e:08:08:1c:aa:64:3d: dd:49:f7:c1:2b:e8:cb:9d:bd:6e:1e:9b:0f:f3:49: 02:f9:a1:fb:ff:2f:21:12:ce:98:79:0d:dc:71:a2: d7:12:f4:2b:41:e8:35:36:ba:ef:14:88:6b:a9:bb: 31:3c:89:ff:db:20:71:3d:f0:dc:cb:8c:22:23:79: af:b2:e3:50:e3:97:6f:dd:33:03:8d:0d:07:e5:c3: b6:c4:3e:4a:bb:3c:14:4e:5e:10:5b:7d:aa:7f:77: 86:6a:d1:b6:e0:6c:27:df:9f:24:65:2a:cc:d3:a5: 75:a5:f1:1f:d3:5d:f2:f3:68:ea:2a:63:54:b6:aa: 33:31:13:3a:7a:17:10:43:0a:5a:4f:f3:b8:8e:fe: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329483 sbgp-ipAddrBlock: critical IPv4: 102.208.52.0/24 IPv6: 2001:43fd:f000::/48 Signature Algorithm: sha256WithRSAEncryption 0b:8d:6f:96:e5:2a:df:de:e2:e1:bc:49:82:91:a6:92:5c:68: 3e:9f:fc:f9:60:45:36:bd:82:df:e8:45:c1:b3:55:a4:b2:44: c9:da:bf:61:05:6a:97:3f:47:6d:0d:c2:7f:0f:20:55:64:79: fc:4d:0f:3b:14:85:e0:f8:8f:95:01:e8:3b:1f:f6:bf:ee:b0: 07:3a:8f:67:ba:89:6c:f3:3f:25:06:f0:1d:c8:83:ba:79:6b: fe:e6:fd:28:c8:1c:71:4d:a3:8e:e5:7b:e4:da:54:a3:53:9c: db:5d:0d:ce:e2:a2:19:e3:94:cd:1a:8b:4b:e8:90:62:25:dd: 1b:86:8d:a5:e0:1f:4f:27:03:04:de:d9:df:06:1a:ab:89:64: d1:15:34:2e:e2:83:39:ce:f2:e3:f2:58:fb:ff:e0:10:cc:dc: b5:9e:c2:56:b4:a0:99:63:19:2f:be:61:a8:ec:88:4d:64:2d: c6:ff:c0:9d:96:63:8e:50:0c:7c:29:b7:89:26:7c:bd:61:81: 36:3d:63:31:1f:72:9d:da:0d:73:86:24:2b:db:f4:a4:43:c7: ab:fb:58:5e:e8:aa:95:09:1e:8d:eb:44:23:91:cf:2c:3d:f6: d5:80:f0:37:e3:45:81:a2:a6:8b:e6:73:10:60:92:72:c8:be: 46:11:48:f5 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgICO8MwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU4MzVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjhCRTBCQUYxMTAvBgNVBAUTKDRGMDRCM0ZCRTIwQzE1MDlCQUY5QUEy Q0ZFODM3NjVGMkU5NjlDQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCntxm5DejeZkhGDOJuhCuQU2QPL2bzx+V0X26r9k01mvktZs/naN8FVpar8oJ+ 2Z/ZV7R9fMjyvLoWwW+w5L+mTb5nrAYcUSwt6079qkdhP7nSBzI4eApiV8vfACLs UrnpRKZGBqNQmLNFxPPCEWcCTggIHKpkPd1J98Er6MudvW4emw/zSQL5ofv/LyES zph5DdxxotcS9CtB6DU2uu8UiGupuzE8if/bIHE98NzLjCIjea+y41Djl2/dMwON DQflw7bEPkq7PBROXhBbfap/d4Zq0bbgbCffnyRlKszTpXWl8R/TXfLzaOoqY1S2 qjMxEzp6FxBDClpP87iO/pFfAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUTwSz++IM FQm6+aos/oN2Xy6WnK4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4QkUwQi9DMUIwMDAzNjc1MDAx MUVGODY2NEE2ODM3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OEJFMEIvQzFCMDAwMzY3NTAwMTFFRjg2NjRBNjgzNzYyRTk1MUEvVHdTei0t SU1GUW02LWFvc19vTjJYeTZXbks0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBwswMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABm0DQwDwQCAAIwCQMH ACABQ/3wADANBgkqhkiG9w0BAQsFAAOCAQEAC41vluUq397i4bxJgpGmklxoPp/8 +WBFNr2C3+hFwbNVpLJEydq/YQVqlz9HbQ3Cfw8gVWR5/E0POxSF4PiPlQHoOx/2 v+6wBzqPZ7qJbPM/JQbwHciDunlr/ub9KMgccU2jjuV75NpUo1Oc210NzuKiGeOU zRqLS+iQYiXdG4aNpeAfTycDBN7Z3wYaq4lk0RU0LuKDOc7y4/JY+//gEMzctZ7C VrSgmWMZL75hqOyITWQtxv/AnZZjjlAMfCm3iSZ8vWGBNj1jMR9yndoNc4YkK9v0 pEPHq/tYXuiqlQkejetEI5HPLD321YDwN+NFgaKmi+ZzEGCScsi+RhFI9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 04:22:58 2026 by rpki-client