This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer File: UsjVbfSu4mPoplESmKYZzpjIrA4.cer (raw, json) Hash identifier: 6yXiyaNo4nG/wQhD8H4SGR6hh0PZOLAuqzrLwtyEKNo= Subject key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39F6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:52:53 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328884 IP: 102.217.152.0/22 IP: 102.219.40.0/22 IP: 2c0f:5100::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14838 (0x39f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:52:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:00:3f:8e:54:47:24:4c:0f:76:3d:3d:8a:4e: b0:72:78:ae:64:69:4e:dd:38:cd:f1:55:60:93:7e: f9:a4:01:37:72:9e:92:8e:d0:d1:81:99:a0:99:c1: f4:5b:9c:23:11:0f:02:06:1f:9a:0f:1b:b2:48:7c: 7f:31:be:d5:11:60:69:3e:43:36:cf:4f:74:4b:c0: 67:23:03:da:f8:24:bc:19:b4:ef:e3:f0:80:79:3d: 91:90:cd:d9:a4:43:a2:b4:ed:00:61:4d:19:6a:ec: 77:58:55:a9:4d:6b:7a:b0:b2:e2:0a:e8:13:3b:fd: e6:b2:00:72:12:3f:a4:9a:eb:35:66:12:47:83:cb: d3:c0:4c:d4:ec:21:44:e5:a5:e4:d9:84:e1:43:dd: f8:fb:ec:e7:a2:92:81:77:3a:08:48:1b:5b:5a:6a: 19:12:4a:ec:55:7e:3d:f7:cb:c6:1c:ee:89:24:8c: 6e:00:63:c9:c7:39:ed:33:a9:89:23:f1:d2:c6:e4: d3:97:5a:20:a8:01:94:06:0c:26:5c:a7:37:1f:31: 29:04:89:77:d4:01:83:61:f7:cc:d8:18:d3:4d:a7: 5c:8a:c1:7f:fb:66:b4:2a:95:40:c6:19:d6:a6:52: 08:a1:c6:08:f3:88:1a:c7:66:63:57:c7:c4:0c:54: 12:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328884 sbgp-ipAddrBlock: critical IPv4: 102.217.152.0/22 102.219.40.0/22 IPv6: 2c0f:5100::/32 Signature Algorithm: sha256WithRSAEncryption b5:f2:f2:8b:31:0f:80:a5:b5:c8:ad:ec:b5:5e:82:6d:b1:8e: 16:82:50:6e:b3:28:02:f7:00:3a:32:2d:e4:61:12:13:5c:da: 69:ad:a7:9b:23:64:5d:42:2b:8c:a9:98:ff:39:53:e8:94:0d: 04:f5:97:58:22:2d:7b:9b:cc:90:b2:c2:93:85:0d:24:c0:9c: a3:cd:4f:01:97:61:09:02:84:02:76:1f:92:20:70:32:a0:a0: a7:ea:7d:57:07:d5:4d:82:e2:a8:a2:37:77:63:2e:52:fa:06: 25:1b:d1:46:be:a1:54:b3:99:60:10:99:2a:97:3a:87:e5:19: 7b:63:c7:b0:8f:2a:86:35:cb:be:34:4f:70:20:34:14:2d:1b: ef:ba:33:db:27:97:3b:f4:77:15:77:93:74:f1:79:d8:dc:ad: fd:75:cc:d4:8b:d6:e2:cc:18:1f:c3:27:67:3e:04:c6:39:5d: 6e:b6:40:11:d2:f0:06:03:14:34:27:25:b3:a9:45:77:58:43: 15:91:d6:cc:92:1e:0f:79:ff:b8:00:b8:94:1c:c9:7d:dc:d3: da:9c:17:fa:76:e4:5a:f6:5e:ab:f6:2e:d4:2b:b1:59:eb:5a: fe:74:5d:a0:04:41:59:fb:12:33:7a:e2:b8:ba:f9:0d:eb:7c: 40:89:36:45 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOfYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTUyNTNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjVCRjlFQUYxMTAvBgNVBAUTKDUyQzhENTZERjRBRUUyNjNFOEE2NTEx Mjk4QTYxOUNFOThDOEFDMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuAD+OVEckTA92PT2KTrByeK5kaU7dOM3xVWCTfvmkATdynpKO0NGBmaCZwfRb nCMRDwIGH5oPG7JIfH8xvtURYGk+QzbPT3RLwGcjA9r4JLwZtO/j8IB5PZGQzdmk Q6K07QBhTRlq7HdYValNa3qwsuIK6BM7/eayAHISP6Sa6zVmEkeDy9PATNTsIUTl peTZhOFD3fj77OeikoF3OghIG1taahkSSuxVfj33y8Yc7okkjG4AY8nHOe0zqYkj 8dLG5NOXWiCoAZQGDCZcpzcfMSkEiXfUAYNh98zYGNNNp1yKwX/7ZrQqlUDGGdam UgihxgjziBrHZmNXx8QMVBLZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUUsjVbfSu 4mPoplESmKYZzpjIrA4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1QkY5RS9FMThGQjNERUNBMjQx MUVEQTI0QzU5OEJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NUJGOUUvRTE4RkIzREVDQTI0MTFFREEyNEM1OThCRjEyMjI0NjgvVXNqVmJm U3U0bVBvcGxFU21LWVp6cGpJckE0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBLQwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm2ZgDBAJm2ygwDQQC AAIwBwMFACwPUQAwDQYJKoZIhvcNAQELBQADggEBALXy8osxD4Cltcit7LVegm2x jhaCUG6zKAL3ADoyLeRhEhNc2mmtp5sjZF1CK4ypmP85U+iUDQT1l1giLXubzJCy wpOFDSTAnKPNTwGXYQkChAJ2H5IgcDKgoKfqfVcH1U2C4qiiN3djLlL6BiUb0Ua+ oVSzmWAQmSqXOoflGXtjx7CPKoY1y740T3AgNBQtG++6M9snlzv0dxV3k3Txedjc rf11zNSL1uLMGB/DJ2c+BMY5XW62QBHS8AYDFDQnJbOpRXdYQxWR1sySHg95/7gA uJQcyX3c09qcF/p25Fr2Xqv2LtQrsVnrWv50XaAEQVn7EjN64ri6+Q3rfECJNkU= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:29 2026 by rpki-client