This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer File: U3W2ePNrjZxrXcMoG29etnFqEQk.cer (raw, json) Hash identifier: 4fqTSqvpJ5SZ4qEbUrTUM7gzgxY+CrNdqdP5mACWmYc= Subject key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37DE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:24:33 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327907 IP: 102.135.128.0/19 IP: 102.214.216.0/22 IP: 2c0f:f020::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14302 (0x37de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:24:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:be:1b:4b:14:a3:09:a3:31:ee:30:28:55: c7:62:ed:63:75:bb:48:a9:e5:56:5b:7c:0d:02:21: b2:3f:8e:64:74:c8:8b:08:bb:f3:cd:80:38:dc:1a: 64:44:72:a4:11:26:1b:9e:95:67:7e:c1:35:65:b5: f9:67:bd:8e:77:ea:5e:4e:23:73:31:dc:5e:7a:7e: 0f:56:aa:e8:08:23:ab:f1:a9:f1:51:02:f8:e0:5a: 5b:fd:32:fa:7b:04:de:a3:a1:e0:89:f1:5c:7d:8a: 0c:32:7b:84:ce:58:e8:46:32:20:da:f5:ee:bc:c1: 2f:49:56:3f:6f:29:18:78:79:05:e8:81:18:aa:eb: cf:cf:87:11:83:99:8b:5d:82:13:8d:cb:88:35:05: 2e:e1:15:19:98:39:f7:82:3a:85:87:49:b7:a8:0b: 5b:4f:78:d2:12:66:71:78:b0:be:92:81:4a:7f:26: 10:8e:34:e0:19:3a:6f:dc:42:ff:99:ff:6a:48:d1: e8:34:92:4a:c4:3a:15:99:f8:ff:76:27:25:a5:2a: dc:5e:ba:d7:64:c5:44:b5:64:b5:99:9d:d7:33:ea: a8:4e:8e:db:3e:a5:89:b1:0a:ca:02:6d:76:da:23: 67:14:d4:44:d4:dd:30:14:fa:d3:08:66:87:53:aa: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327907 sbgp-ipAddrBlock: critical IPv4: 102.135.128.0/19 102.214.216.0/22 IPv6: 2c0f:f020::/32 Signature Algorithm: sha256WithRSAEncryption 72:f0:49:45:58:1c:a9:50:b8:81:5a:8c:6f:61:1e:e1:49:91: 69:a1:03:60:53:93:bc:72:4c:59:99:b9:03:0c:90:9e:85:13: 69:f4:59:a2:16:42:3e:10:d6:fb:41:95:53:bc:de:13:5b:b6: 10:df:7a:cb:82:5a:ff:5a:97:7f:44:20:32:1d:38:db:c8:10: e8:4e:de:76:f4:56:94:14:18:51:13:bb:df:d3:75:e4:ac:35: 19:57:bd:b1:1f:b5:89:d1:ec:4a:87:ba:4a:dc:18:23:de:5c: b9:df:8b:95:0b:36:3d:42:5b:7f:c1:e6:6b:b9:d2:cd:22:e9: c2:32:ac:94:e4:e8:2d:9e:be:78:1f:17:55:59:3e:1c:b7:a2: 35:ef:a2:11:c0:c1:a5:bb:df:e1:2d:e3:d8:e0:38:7b:a1:f0: 05:38:35:fa:75:52:69:a0:23:37:c2:b3:cc:a2:3b:bc:9c:9d: 1c:8a:4d:2f:fd:42:c8:da:14:04:cb:c8:de:c9:92:d6:88:40: d5:97:ea:ed:81:d6:42:d6:42:c0:20:7a:b7:0f:50:60:b0:25: 41:8e:05:8d:6d:b2:e9:84:90:82:28:c7:34:75:ba:79:ed:cf: 3e:25:bf:d2:c8:5e:bf:b1:db:fb:1d:cb:97:42:a4:c8:9a:1b: 72:38:b0:49 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICN94wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDI0MzNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjFGMURBQUYxMTAvBgNVBAUTKDUzNzVCNjc4RjM2QjhEOUM2QjVEQzMy ODFCNkY1RUI2NzE2QTExMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCURr4bSxSjCaMx7jAoVcdi7WN1u0ip5VZbfA0CIbI/jmR0yIsIu/PNgDjcGmRE cqQRJhuelWd+wTVltflnvY536l5OI3Mx3F56fg9WqugII6vxqfFRAvjgWlv9Mvp7 BN6joeCJ8Vx9igwye4TOWOhGMiDa9e68wS9JVj9vKRh4eQXogRiq68/PhxGDmYtd ghONy4g1BS7hFRmYOfeCOoWHSbeoC1tPeNISZnF4sL6SgUp/JhCONOAZOm/cQv+Z /2pI0eg0kkrEOhWZ+P92JyWlKtxeutdkxUS1ZLWZndcz6qhOjts+pYmxCsoCbXba I2cU1ETU3TAU+tMIZodTqnTjAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUU3W2ePNr jZxrXcMoG29etnFqEQkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxRjFEQS8yREE4RjM3QTc3RTAx MUVFQTIzM0VBN0I0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MUYxREEvMkRBOEYzN0E3N0UwMTFFRUEyMzNFQTdCNEFEOUU2RkMvVTNXMmVQ TnJqWnhyWGNNb0cyOWV0bkZxRVFrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAOMwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAVmh4ADBAJm1tgwDQQC AAIwBwMFACwP8CAwDQYJKoZIhvcNAQELBQADggEBAHLwSUVYHKlQuIFajG9hHuFJ kWmhA2BTk7xyTFmZuQMMkJ6FE2n0WaIWQj4Q1vtBlVO83hNbthDfesuCWv9al39E IDIdONvIEOhO3nb0VpQUGFETu9/TdeSsNRlXvbEftYnR7EqHukrcGCPeXLnfi5UL Nj1CW3/B5mu50s0i6cIyrJTk6C2evngfF1VZPhy3ojXvohHAwaW73+Et49jgOHuh 8AU4Nfp1UmmgIzfCs8yiO7ycnRyKTS/9QsjaFATLyN7JktaIQNWX6u2B1kLWQsAg ercPUGCwJUGOBY1tsumEkIIoxzR1unntzz4lv9LIXr+x2/sdy5dCpMiaG3I4sEk= -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:17 2026 by rpki-client