This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer File: U0PDi98uSRgxOaWKxC8Rb6mWc80.cer (raw, json) Hash identifier: +vseEScI2WEkjVKxJE8f1RT91yCPUUBVkrzUSAZtFWc= Subject key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EB6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:55:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328257 IP: 102.22.112.0/21 IP: 2c0f:2180::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16054 (0x3eb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:55:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EADB7AF, serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:a9:28:68:91:b7:b8:43:62:10:ac:db:44: d1:c3:8c:d6:46:d7:6a:81:cd:a3:28:88:19:12:1f: d9:b7:2c:fc:3b:a9:41:e1:35:19:1f:1f:1c:94:c7: 9f:ef:52:09:bd:52:f4:b4:76:d8:85:78:86:31:99: 97:a6:40:b2:88:36:44:a6:48:c9:71:41:7c:d4:a1: 7e:ee:a3:dd:2a:c6:78:1e:d3:5b:6d:be:ba:b5:da: ce:64:69:11:2c:80:37:0b:9d:2f:48:49:ad:42:a7: a2:e2:af:49:e2:e4:54:5a:59:eb:f6:df:c4:20:1d: a2:96:99:58:9b:aa:db:9a:54:e7:22:1d:25:8d:d0: 1b:fa:1e:8f:52:fa:61:7a:6a:ad:9d:f3:a0:c4:67: 6d:4b:d4:6e:f7:8a:de:5d:b5:cd:3f:18:30:65:89: e6:20:8b:23:a4:f6:82:ab:d1:13:98:d2:6a:ee:28: 74:90:d7:05:65:31:8f:ac:d9:a2:57:11:74:39:1b: 02:6e:74:d3:bb:31:e2:94:6b:3d:49:6e:e6:71:14: d4:3c:38:de:21:34:ef:0d:91:d8:a6:96:01:58:3a: 86:8f:bb:4d:e3:44:87:a0:07:f0:c3:3c:99:ca:26: 29:d9:aa:97:9c:92:e8:ce:1f:bc:4b:3e:00:36:6a: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328257 sbgp-ipAddrBlock: critical IPv4: 102.22.112.0/21 IPv6: 2c0f:2180::/32 Signature Algorithm: sha256WithRSAEncryption 5e:49:0a:94:bc:5a:75:a6:5e:98:a4:19:e9:a6:83:dc:6e:69: 25:98:bd:c8:0e:53:c5:11:3d:54:14:25:59:c0:93:c7:1b:6e: 4b:40:a0:20:81:d7:90:1d:61:07:6d:19:9f:f0:a0:99:68:d6: 59:a7:9f:40:c4:64:b5:f9:e9:e9:77:fa:90:bf:39:fe:4b:cf: 67:c2:2b:b5:7a:b0:d5:66:5a:9c:e1:c3:5a:24:81:e7:1f:64: b2:f4:61:e4:05:b9:17:08:ae:06:fd:de:e8:ad:8f:52:fa:5a: e0:2b:91:c6:72:da:27:f1:aa:0b:bd:5d:4d:79:ff:12:00:83: 35:20:4c:b9:a0:f4:60:a1:2e:a7:f2:aa:24:46:ac:d9:6c:f3: 68:71:80:48:28:da:a9:76:1e:83:56:00:55:e4:85:92:28:6d: e4:58:99:d3:57:4f:10:89:9d:8f:fd:e8:52:99:19:0d:de:12: b1:bf:f8:59:15:47:23:25:b7:15:1f:98:da:d9:aa:29:2f:e0: 83:7d:47:b2:7f:87:b7:24:e4:53:a7:ee:80:8e:22:b0:36:82: a4:ca:53:51:a5:61:a6:a6:48:c8:90:4b:b8:ea:40:11:05:40: 24:49:46:e5:56:3a:47:44:9c:08:b1:7b:64:7a:63:6c:ed:41: 5a:a4:6d:2a -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPrYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDU1NDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVBREI3QUYxMTAvBgNVBAUTKDUzNDNDMzhCREYyRTQ5MTgzMTM5QTU4 QUM0MkYxMTZGQTk5NjczQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX4qkoaJG3uENiEKzbRNHDjNZG12qBzaMoiBkSH9m3LPw7qUHhNRkfHxyUx5/v Ugm9UvS0dtiFeIYxmZemQLKINkSmSMlxQXzUoX7uo90qxnge01ttvrq12s5kaREs gDcLnS9ISa1Cp6Lir0ni5FRaWev238QgHaKWmVibqtuaVOciHSWN0Bv6Ho9S+mF6 aq2d86DEZ21L1G73it5dtc0/GDBlieYgiyOk9oKr0ROY0mruKHSQ1wVlMY+s2aJX EXQ5GwJudNO7MeKUaz1JbuZxFNQ8ON4hNO8NkdimlgFYOoaPu03jRIegB/DDPJnK JinZqpeckujOH7xLPgA2apWdAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUU0PDi98u SRgxOaWKxC8Rb6mWc80wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFQURCNy8zQzhFQjI5MjEzMjAx MUVEOUNBRTQzRUVGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUFEQjcvM0M4RUIyOTIxMzIwMTFFRDlDQUU0M0VFRjEyMjI0NjgvVTBQRGk5 OHVTUmd4T2FXS3hDOFJiNm1XYzgwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAkEwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmFnAwDQQCAAIwBwMF ACwPIYAwDQYJKoZIhvcNAQELBQADggEBAF5JCpS8WnWmXpikGemmg9xuaSWYvcgO U8URPVQUJVnAk8cbbktAoCCB15AdYQdtGZ/woJlo1lmnn0DEZLX56el3+pC/Of5L z2fCK7V6sNVmWpzhw1okgecfZLL0YeQFuRcIrgb93uitj1L6WuArkcZy2ifxqgu9 XU15/xIAgzUgTLmg9GChLqfyqiRGrNls82hxgEgo2ql2HoNWAFXkhZIobeRYmdNX TxCJnY/96FKZGQ3eErG/+FkVRyMltxUfmNrZqikv4IN9R7J/h7ck5FOn7oCOIrA2 gqTKU1GlYaamSMiQS7jqQBEFQCRJRuVWOkdEnAixe2R6Y2ztQVqkbSo= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:58 2026 by rpki-client