This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer File: Upl4cSNfYM1xWncQ_9bi6kyI0po.cer (raw, json) Hash identifier: i57VOrI4OtCCdXjMesbM2vqd8yzBTmGn15ffDBVp+hU= Subject key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F17 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:12:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328155 IP: 154.65.80.0/21 IP: 2c0f:f610::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16151 (0x3f17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:12:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:9f:18:26:1c:e1:d1:2a:0b:c8:ce:81:f8: 7e:b6:22:78:94:77:4a:f6:96:a4:3b:a8:91:69:fc: 43:e2:8f:b4:ad:e5:61:e2:73:ad:d4:35:01:2a:89: 11:cc:22:2a:d7:f1:b4:c4:0d:cb:7c:4f:4e:6f:02: 9b:d3:ff:ec:ab:25:b2:f0:29:80:8c:bc:1e:a9:31: b5:6c:0e:cb:3b:ea:ba:ef:58:6e:0e:e5:aa:82:63: c4:af:a3:ee:cc:fb:37:f6:45:68:34:cc:38:6a:e7: bb:0d:bb:95:dc:07:36:d1:8b:aa:f4:81:7e:bf:3c: e8:74:b0:bf:ef:4f:cd:a0:7e:ab:d1:9b:21:d4:7f: 2c:a7:24:f5:40:0a:05:ff:bd:b4:0d:dd:4f:2d:ce: a1:98:57:c5:89:49:7e:7d:84:50:57:6a:3a:37:58: ff:bd:b7:b5:80:95:25:f0:87:44:c2:9d:ed:90:fc: 6e:f8:a5:65:cc:db:de:46:f9:13:02:da:f5:ab:ec: 1d:c2:cb:9d:61:7e:ae:b7:e9:6a:03:6c:b3:17:d4: 73:58:88:36:73:a8:a4:d4:4d:5b:ae:0d:bd:f2:3c: 9d:43:e2:80:ea:e7:90:fb:ca:9c:45:63:65:1e:6f: 1c:e4:68:d5:e0:a3:92:8a:37:b9:99:14:7c:04:8d: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328155 sbgp-ipAddrBlock: critical IPv4: 154.65.80.0/21 IPv6: 2c0f:f610::/32 Signature Algorithm: sha256WithRSAEncryption 4e:48:2c:6c:04:b9:bd:c6:a9:37:7a:b3:41:c9:78:43:93:c7: 24:5c:a0:48:2b:23:bb:f4:48:ff:41:ef:84:e4:1c:55:eb:25: fb:e9:c9:c1:06:78:60:d3:bd:54:0d:07:53:e8:d8:f5:15:c4: 05:16:37:c3:4e:1f:a4:14:72:46:65:02:a0:dc:06:59:c5:fb: 61:35:70:e8:e5:2f:f1:e1:00:bc:5c:e8:8f:20:5a:10:b3:99: 7d:e0:f4:6c:f7:8d:91:91:40:78:ae:e3:cf:24:06:02:f2:64: 1d:27:f9:99:1d:06:1f:57:de:58:15:59:b8:77:ed:4f:97:4a: d4:98:30:45:b0:0f:d2:0b:58:14:71:e2:3e:a7:01:ad:19:3b: b9:1e:21:e4:60:9a:f4:dd:ec:06:8b:59:c1:4a:ce:d3:c8:1f: 1d:3d:1a:4a:48:b3:a1:13:81:1e:d6:fa:75:8e:ab:f3:72:ae: c0:c8:a7:89:7f:c7:2b:eb:fb:8b:bb:6c:b2:1f:9f:25:92:f9: 4b:54:aa:4c:2d:d5:08:65:71:75:39:f7:26:30:bb:33:0d:ba: a4:85:1d:ab:99:c5:ea:cd:6f:ca:7f:98:e2:a5:9f:47:eb:81: 73:77:10:7c:97:28:d6:4a:97:72:0e:34:2b:dd:36:5e:48:35: 6b:c0:6d:c0 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPxcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTEyMjVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY3RjIxQUYxMTAvBgNVBAUTKDUyOTk3ODcxMjM1RjYwQ0Q3MTVBNzcx MEZGRDZFMkVBNEM4OEQyOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBgZ8YJhzh0SoLyM6B+H62IniUd0r2lqQ7qJFp/EPij7St5WHic63UNQEqiRHM IirX8bTEDct8T05vApvT/+yrJbLwKYCMvB6pMbVsDss76rrvWG4O5aqCY8Svo+7M +zf2RWg0zDhq57sNu5XcBzbRi6r0gX6/POh0sL/vT82gfqvRmyHUfyynJPVACgX/ vbQN3U8tzqGYV8WJSX59hFBXajo3WP+9t7WAlSXwh0TCne2Q/G74pWXM295G+RMC 2vWr7B3Cy51hfq636WoDbLMX1HNYiDZzqKTUTVuuDb3yPJ1D4oDq55D7ypxFY2Ue bxzkaNXgo5KKN7mZFHwEjWNhAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUUpl4cSNf YM1xWncQ/9bi6kyI0powHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGN0YyMS8zNTVENzM3RUU3MDAx MUVDOUM4NEQ3QjlGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjdGMjEvMzU1RDczN0VFNzAwMTFFQzlDODREN0I5RjEyMjI0NjgvVXBsNGNT TmZZTTF4V25jUV85Ymk2a3lJMHBvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAdswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOaQVAwDQQCAAIwBwMF ACwP9hAwDQYJKoZIhvcNAQELBQADggEBAE5ILGwEub3GqTd6s0HJeEOTxyRcoEgr I7v0SP9B74TkHFXrJfvpycEGeGDTvVQNB1Po2PUVxAUWN8NOH6QUckZlAqDcBlnF +2E1cOjlL/HhALxc6I8gWhCzmX3g9Gz3jZGRQHiu488kBgLyZB0n+ZkdBh9X3lgV Wbh37U+XStSYMEWwD9ILWBRx4j6nAa0ZO7keIeRgmvTd7AaLWcFKztPIHx09GkpI s6ETgR7W+nWOq/NyrsDIp4l/xyvr+4u7bLIfnyWS+UtUqkwt1QhlcXU59yYwuzMN uqSFHauZxerNb8p/mOKln0frgXN3EHyXKNZKl3IONCvdNl5INWvAbcA= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:16 2026 by rpki-client