This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer File: UpunS83yaGnfBI9JzaZV3lnZgeE.cer (raw, json) Hash identifier: D/FaIU4rEo/TGhgkw1XY7xGsaPvbqB1Z0QUdyXuieX4= Subject key identifier: 52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39DC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:48:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329621 IP: 102.204.152.0/22 IP: 2c0f:35c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14812 (0x39dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:48:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36596DEAF, serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:a1:5c:67:a1:8f:98:d1:e9:4b:9e:f0:21: 05:1e:0a:bc:af:4c:5d:ef:e1:8b:1f:23:0d:bd:10: f3:8b:63:74:b4:7b:7d:47:f6:89:0d:eb:60:82:57: a0:ad:05:30:ed:0b:85:ba:d3:f8:91:7a:36:5a:12: e8:a0:8a:85:e2:79:48:de:14:3e:61:db:2f:88:5b: 57:15:30:67:e0:be:0b:ea:1f:5a:62:1d:f9:ba:20: 9f:16:75:7a:58:00:92:2c:da:77:f8:26:35:5a:6d: 9d:59:dc:5a:d6:f1:3d:96:af:80:79:ed:9d:11:3d: 3c:dc:30:6c:c5:ed:0e:b7:b3:17:85:23:72:73:bf: c0:4c:81:ff:fe:89:c4:7d:78:49:f5:b3:41:9a:ff: 6e:15:3c:14:4d:fe:03:93:9c:bb:01:35:9a:f2:47: b6:da:df:61:aa:c0:ad:f2:c7:09:51:4b:a6:9b:56: a5:f8:c9:a9:1b:89:9b:37:84:35:2b:e1:02:11:3a: 94:84:db:b4:69:e3:46:00:e5:ca:28:9f:f2:a4:1d: f8:ab:19:a8:1d:d8:bf:2a:d5:60:31:1c:e6:21:44: ac:33:9e:95:0a:a2:6c:14:78:12:d8:45:b5:3e:9f: c2:38:41:40:f7:64:73:8c:25:9c:f7:ac:0b:da:f9: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329621 sbgp-ipAddrBlock: critical IPv4: 102.204.152.0/22 IPv6: 2c0f:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 56:81:30:97:6a:1d:15:bd:36:0b:ab:9d:e9:36:8c:77:36:20: 37:80:43:64:bd:40:48:2a:68:c7:24:2b:76:e8:49:e8:b4:30: 23:c3:ea:67:5c:6a:ec:f1:73:43:01:8f:32:d2:e0:3b:ea:2b: a4:e4:d4:89:60:de:b1:bf:63:1c:9b:69:b8:69:5a:d5:9c:64: 76:61:fd:aa:d9:ee:0c:44:48:69:1e:5a:09:a4:82:27:ae:06: 91:38:e7:79:2f:07:90:de:76:7e:ff:02:95:b9:31:07:f5:d0: ed:f7:13:0c:d5:d2:9e:2d:40:f4:cd:aa:38:a4:3e:3b:f6:04: bf:29:b6:ae:52:8b:cb:fc:a2:7e:12:19:a8:73:59:50:62:88: a5:fa:5f:5b:5c:52:35:09:54:23:86:8a:ad:b6:ae:f0:3a:dc: 38:f0:4b:5a:14:98:4c:b7:3b:72:8e:7e:23:73:84:14:a9:4d: f5:13:4e:21:23:bc:25:02:cc:0c:60:61:e5:80:97:15:d5:d9: 7a:e7:c3:56:da:ca:14:4b:b7:b5:4a:67:31:7a:f3:25:42:74: 39:97:a7:2d:df:f6:d3:9d:bc:a0:e2:30:83:8c:45:f5:8e:cc: 0e:9a:51:23:1b:e2:0f:5d:fd:bc:4e:53:ed:cd:e8:b6:63:a8: 4a:94:4f:7d -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOdwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQ4NDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU5NkRFQUYxMTAvBgNVBAUTKDUyOUJBNzRCQ0RGMjY4NjlERjA0OEY0 OUNEQTY1NURFNTlEOTgxRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6g6FcZ6GPmNHpS57wIQUeCryvTF3v4YsfIw29EPOLY3S0e31H9okN62CCV6Ct BTDtC4W60/iRejZaEuigioXieUjeFD5h2y+IW1cVMGfgvgvqH1piHfm6IJ8WdXpY AJIs2nf4JjVabZ1Z3FrW8T2Wr4B57Z0RPTzcMGzF7Q63sxeFI3Jzv8BMgf/+icR9 eEn1s0Ga/24VPBRN/gOTnLsBNZryR7ba32GqwK3yxwlRS6abVqX4yakbiZs3hDUr 4QIROpSE27Rp40YA5coon/KkHfirGagd2L8q1WAxHOYhRKwznpUKomwUeBLYRbU+ n8I4QUD3ZHOMJZz3rAva+cT7AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUUpunS83y aGnfBI9JzaZV3lnZgeEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1OTZERS85NjVEQTRGQUIzM0Ex MUYwOTdCNjRBQ0REQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTk2REUvOTY1REE0RkFCMzNBMTFGMDk3QjY0QUNEREFFNEVDOUMvVXB1blM4 M3lhR25mQkk5SnphWlYzbG5aZ2VFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB5UwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzJgwDQQCAAIwBwMF ACwPNcAwDQYJKoZIhvcNAQELBQADggEBAFaBMJdqHRW9Ngurnek2jHc2IDeAQ2S9 QEgqaMckK3boSei0MCPD6mdcauzxc0MBjzLS4DvqK6Tk1Ilg3rG/YxybabhpWtWc ZHZh/arZ7gxESGkeWgmkgieuBpE453kvB5Dedn7/ApW5MQf10O33EwzV0p4tQPTN qjikPjv2BL8ptq5Si8v8on4SGahzWVBiiKX6X1tcUjUJVCOGiq22rvA63DjwS1oU mEy3O3KOfiNzhBSpTfUTTiEjvCUCzAxgYeWAlxXV2Xrnw1bayhRLt7VKZzF68yVC dDmXpy3f9tOdvKDiMIOMRfWOzA6aUSMb4g9d/bxOU+3N6LZjqEqUT30= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:28 2026 by rpki-client