This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer File: Y-C7azQzzV1xpCsBab2wHiDkVX8.cer (raw, json) Hash identifier: ifEEjO8ckfrAxx/cIoMLo3PMU5h3CAYdQ75uu+vb1rk= Subject key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 384F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:45:32 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328528 IP: 102.36.160.0/22 IP: 102.218.100.0/22 IP: 102.220.212.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14415 (0x384f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:45:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:da:1d:c8:2a:6a:bc:01:b4:33:17:b4:1a: 76:c0:3d:d9:40:e2:29:00:f5:86:8f:f6:2b:ae:fd: 37:b6:d9:76:28:25:09:22:95:9a:b8:35:eb:cc:9c: da:12:fc:f8:af:c9:58:00:29:9b:ad:f4:5e:56:ab: 7f:50:cc:de:13:f5:4c:49:36:3f:f5:45:fc:6b:4e: 5a:ac:3b:a7:0a:5e:63:78:d2:8e:a7:97:cb:61:99: 8c:77:a4:e8:34:63:d0:68:e2:ee:b9:ab:01:8d:ad: c5:70:69:bc:40:64:69:8b:04:8c:8f:44:13:a0:fd: f3:e7:d5:fe:81:e0:03:5d:e3:61:5a:06:0a:87:f4: 79:c2:b2:43:10:8e:62:bf:89:2f:b4:25:f8:c5:4e: 49:dd:4b:03:68:83:1c:5a:fc:a7:db:e5:49:9f:5d: 1e:7c:7a:d4:90:c4:28:95:a7:82:6b:fc:03:50:2d: 14:d5:38:a0:9c:2e:a1:db:29:99:a9:fe:d7:4d:7a: 54:f2:af:b1:86:22:1e:48:07:1b:69:90:96:65:73: 9a:15:6f:be:93:12:9a:cb:b2:74:91:3c:5b:e9:b9: be:66:f2:2b:b4:1a:2f:1c:07:10:97:c3:a1:6c:77: 88:b1:b5:84:5d:51:4c:26:d7:04:3e:ec:7b:7d:ea: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328528 sbgp-ipAddrBlock: critical IPv4: 102.36.160.0/22 102.218.100.0/22 102.220.212.0/22 Signature Algorithm: sha256WithRSAEncryption b3:66:d3:62:98:16:4c:5d:51:56:0c:aa:ba:86:1d:9e:69:3a: 76:73:84:fa:fd:83:a2:63:8c:1b:37:8b:20:98:c8:27:9d:b5: ce:91:a2:38:18:04:2c:db:a8:94:3b:7d:e6:b7:30:b7:50:2a: b6:10:30:67:a1:3a:79:02:7d:52:38:ed:1a:e5:6e:bd:a0:9b: 28:7d:e2:ca:53:ba:04:b0:6c:32:73:db:74:3a:6e:55:cd:60: 28:88:06:69:17:19:d5:2b:a5:b4:7a:b3:18:86:43:b9:3b:69: 67:02:96:2c:e2:bf:18:1b:3c:26:21:b2:42:cf:62:3f:7d:2c: 76:6c:5e:97:da:90:3e:b0:4a:f6:70:4c:6a:ac:ec:e4:87:c4: 6b:5a:2c:37:27:8d:b2:cc:44:31:90:b5:fa:dc:40:de:56:78: 93:d9:1d:ad:fd:37:21:18:8a:4c:70:68:aa:e1:c4:f7:70:28: 31:24:2e:09:08:d9:63:99:c7:31:a0:4a:80:21:83:e5:cc:1d: 5c:bb:f9:e7:b3:7e:d6:f5:54:ab:bd:45:6f:02:f3:e3:fe:7c: d5:d2:6e:f3:08:47:dc:eb:8a:71:e8:a3:29:b4:cd:43:f5:b0: 5d:0c:af:a3:7f:c8:bf:26:1f:b5:65:ea:26:3e:af:9b:11:08: b3:ad:a1:57 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgICOE8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDQ1MzJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjJDMThDQUYxMTAvBgNVBAUTKDYzRTBCQjZCMzQzM0NENUQ3MUE0MkIw MTY5QkRCMDFFMjBFNDU1N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMU9odyCpqvAG0Mxe0GnbAPdlA4ikA9YaP9iuu/Te22XYoJQkilZq4NevMnNoS /PivyVgAKZut9F5Wq39QzN4T9UxJNj/1RfxrTlqsO6cKXmN40o6nl8thmYx3pOg0 Y9Bo4u65qwGNrcVwabxAZGmLBIyPRBOg/fPn1f6B4ANd42FaBgqH9HnCskMQjmK/ iS+0JfjFTkndSwNogxxa/Kfb5UmfXR58etSQxCiVp4Jr/ANQLRTVOKCcLqHbKZmp /tdNelTyr7GGIh5IBxtpkJZlc5oVb76TEprLsnSRPFvpub5m8iu0Gi8cBxCXw6Fs d4ixtYRdUUwm1wQ+7Ht96tJxAgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQUY+C7azQz zV1xpCsBab2wHiDkVX8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyQzE4Qy80NTg4MzI5MEFCRDEx MUVCQjFBNjcxNUVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MkMxOEMvNDU4ODMyOTBBQkQxMTFFQkIxQTY3MTVFRjhBRUEyMjgvWS1DN2F6 UXp6VjF4cENzQmFiMndIaURrVlg4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA1AwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAJmJKADBAJm2mQDBAJm 3NQwDQYJKoZIhvcNAQELBQADggEBALNm02KYFkxdUVYMqrqGHZ5pOnZzhPr9g6Jj jBs3iyCYyCedtc6RojgYBCzbqJQ7fea3MLdQKrYQMGehOnkCfVI47Rrlbr2gmyh9 4spTugSwbDJz23Q6blXNYCiIBmkXGdUrpbR6sxiGQ7k7aWcClizivxgbPCYhskLP Yj99LHZsXpfakD6wSvZwTGqs7OSHxGtaLDcnjbLMRDGQtfrcQN5WeJPZHa39NyEY ikxwaKrhxPdwKDEkLgkI2WOZxzGgSoAhg+XMHVy7+eezftb1VKu9RW8C8+P+fNXS bvMIR9zrinHooym0zUP1sF0Mr6N/yL8mH7Vl6iY+r5sRCLOtoVc= -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:57 2026 by rpki-client