This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer File: VG_z86lS6oeZmUVVaekH4Pt8gZs.cer (raw, json) Hash identifier: c80ap/ds27rnM9O5N71ojvFKIStCQGdvXTWhAEX8GoQ= Subject key identifier: 54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3766 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:03:28 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328661 IP: 102.215.72.0/22 IP: 102.218.184.0/22 IP: 102.218.228.0/22 IP: 102.222.236.0/23 IP: 2c0f:e898::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14182 (0x3766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:03:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3611ED8AF, serialNumber=546FF3F3A952EA879999455569E907E0FB7C819B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:34:cf:0d:88:c2:81:fb:5b:79:3e:ef:5e: e6:a2:e0:8e:9b:ca:1d:10:0c:5d:6f:0b:ea:4f:15: cd:1a:e9:b1:e7:59:ea:b0:c6:85:ee:61:6e:f3:ff: aa:1e:3d:6e:fc:26:01:5d:4f:b6:11:8c:cd:8c:bd: 67:b6:3e:22:11:53:69:39:18:a8:36:02:27:a2:b5: 8c:d5:e6:77:ae:1d:e8:09:a7:a2:cd:25:0d:c0:5e: 6c:36:63:09:00:92:41:93:48:c3:d2:d4:0f:91:68: ea:6b:ec:3d:4d:89:8a:31:41:71:ab:0e:82:9c:5e: af:1b:2f:7e:c6:73:77:c8:72:e5:07:9e:8a:e0:ae: 6d:e0:f4:e8:3f:68:28:28:3c:42:75:cf:57:1f:99: ec:b4:b0:28:3d:0e:55:22:c9:65:f0:05:24:9f:49: 6f:16:f3:00:ef:ff:79:95:01:af:a2:31:f0:33:33: 1f:a1:86:a3:ff:df:c0:72:59:64:a0:ef:6e:fe:d2: 18:f9:5f:87:a6:63:6e:e1:45:f4:33:3e:fa:f5:04: 76:16:8f:6c:47:0e:cd:b6:d1:d3:a1:b0:a7:f5:eb: ad:d1:f3:cc:76:f2:c6:68:4a:48:ea:a6:65:0a:e5: 23:24:92:a1:e6:16:2e:5b:8e:ff:a8:24:ca:64:74: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328661 sbgp-ipAddrBlock: critical IPv4: 102.215.72.0/22 102.218.184.0/22 102.218.228.0/22 102.222.236.0/23 IPv6: 2c0f:e898::/32 Signature Algorithm: sha256WithRSAEncryption b4:66:43:43:6d:1b:03:2d:03:db:b9:3c:22:86:3a:d9:d2:f2: 9c:6b:98:04:6b:d2:97:bc:87:43:6e:7b:5d:e7:24:f6:9d:49: e3:15:45:55:03:48:6c:de:4f:5f:c1:c2:4b:2d:a8:70:73:64: e1:a3:2e:43:36:e6:2c:d8:b2:e0:62:55:49:40:ac:9e:3a:fb: 37:49:25:97:68:44:de:22:1b:b3:e7:68:8c:2d:16:60:64:e5: 85:14:20:17:5c:b0:f3:d0:a2:62:d4:e2:cc:ab:db:db:6a:61: e5:48:39:0b:3c:2d:a5:1b:16:5a:5c:ed:4e:1b:b4:82:03:7f: 95:fe:27:d1:57:7e:de:67:b8:b6:b6:d2:5e:8d:a0:38:fd:94: 5a:b2:e1:74:83:36:bd:48:58:29:d9:9f:d3:8d:da:29:a6:b0: b7:16:bc:f1:7c:ec:3e:cd:2e:90:9d:37:74:17:e1:d5:2b:7e: 89:ab:70:c5:f3:31:e7:c1:e1:96:3e:6b:b7:ac:a6:b7:e8:fa: de:05:c7:ad:94:58:f7:6f:b1:37:0d:f6:b5:08:7e:09:71:d6: 07:5d:52:2a:ee:f6:d0:fa:ac:91:42:9c:5d:35:be:9d:36:6c: 2b:d8:41:8e:0c:df:0e:8c:f9:2b:58:1f:7d:97:2c:c7:ec:91: b1:2e:0a:fc -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICN2YwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDAzMjhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjExRUQ4QUYxMTAvBgNVBAUTKDU0NkZGM0YzQTk1MkVBODc5OTk5NDU1 NTY5RTkwN0UwRkI3QzgxOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkZDTPDYjCgftbeT7vXuai4I6byh0QDF1vC+pPFc0a6bHnWeqwxoXuYW7z/6oe PW78JgFdT7YRjM2MvWe2PiIRU2k5GKg2AieitYzV5neuHegJp6LNJQ3AXmw2YwkA kkGTSMPS1A+RaOpr7D1NiYoxQXGrDoKcXq8bL37Gc3fIcuUHnorgrm3g9Og/aCgo PEJ1z1cfmey0sCg9DlUiyWXwBSSfSW8W8wDv/3mVAa+iMfAzMx+hhqP/38ByWWSg 727+0hj5X4emY27hRfQzPvr1BHYWj2xHDs220dOhsKf1663R88x28sZoSkjqpmUK 5SMkkqHmFi5bjv+oJMpkdNuNAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUVG/z86lS 6oeZmUVVaekH4Pt8gZswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxMUVEOC8wRDhDREJDNjcxRDkx MUVGQUM4QkIwNDQ3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTFFRDgvMEQ4Q0RCQzY3MUQ5MTFFRkFDOEJCMDQ0NzYyRTk1MUEvVkdfejg2 bFM2b2VabVVWVmFla0g0UHQ4Z1pzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA9UwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJm10gDBAJm2rgDBAJm 2uQDBAFm3uwwDQQCAAIwBwMFACwP6JgwDQYJKoZIhvcNAQELBQADggEBALRmQ0Nt GwMtA9u5PCKGOtnS8pxrmARr0pe8h0Nue13nJPadSeMVRVUDSGzeT1/BwkstqHBz ZOGjLkM25izYsuBiVUlArJ46+zdJJZdoRN4iG7PnaIwtFmBk5YUUIBdcsPPQomLU 4syr29tqYeVIOQs8LaUbFlpc7U4btIIDf5X+J9FXft5nuLa20l6NoDj9lFqy4XSD Nr1IWCnZn9ON2immsLcWvPF87D7NLpCdN3QX4dUrfomrcMXzMefB4ZY+a7esprfo +t4Fx62UWPdvsTcN9rUIfglx1gddUiru9tD6rJFCnF01vp02bCvYQY4M3w6M+StY H32XLMfskbEuCvw= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:57 2026 by rpki-client