This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer File: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer (raw, json) Hash identifier: zoqPod/+OyOymhbbY8s2hbZjlfOzH2MYL8hNkwU89hA= Subject key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EE6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:03:55 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328948 IP: 102.218.16.0/23 IP: 2c0f:4300::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16102 (0x3ee6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:03:55 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:ae:bb:87:f5:e5:75:db:3b:04:d4:9c:57: 66:31:ab:64:c3:74:df:f9:5c:d5:79:47:93:6b:d6: 35:f9:d1:6f:cb:a8:ea:4d:f1:bb:a8:37:a9:da:de: d5:2e:e2:19:4e:c9:eb:a1:56:d7:3d:9c:3d:61:0e: 0f:3e:2c:17:b8:03:8d:a8:47:e8:77:91:e5:5f:9e: f3:a3:01:12:79:25:85:cb:07:ef:67:e2:62:b3:3e: ed:4f:1b:8b:f3:42:43:29:53:da:96:07:13:01:b5: 7d:d8:d5:4a:d6:89:1a:ae:6c:7c:53:f9:67:e8:41: a9:09:bf:fb:91:68:01:b2:1f:06:76:04:f9:1a:21: 41:f8:83:4e:a6:d0:69:31:01:0e:a1:59:90:d1:b7: 29:e3:c9:15:25:60:b1:da:c2:6d:da:66:7a:5f:a2: 3d:cd:30:a9:3c:21:13:fb:3e:6c:64:2e:b8:cf:f3: 90:5a:ca:40:24:d6:91:65:d3:af:96:d0:34:a9:5b: cf:0b:05:de:46:7b:cb:86:47:4f:5b:f4:1b:22:b7: 91:2c:b5:d2:9b:b1:de:a3:a1:39:c6:f0:82:b8:a4: 31:0e:85:75:89:e2:5d:f8:91:68:8c:c8:d7:a7:b3: 96:60:d3:14:be:8c:af:bf:01:33:a9:9d:7e:06:cd: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328948 sbgp-ipAddrBlock: critical IPv4: 102.218.16.0/23 IPv6: 2c0f:4300::/32 Signature Algorithm: sha256WithRSAEncryption 01:17:3d:6f:60:7f:a4:20:10:78:46:50:80:7e:ee:00:06:8e: 3b:00:21:d3:e6:9a:d2:0b:0e:a0:9a:3e:f7:4a:21:58:c5:02: 56:fe:8c:09:fd:ab:80:3e:1a:52:82:4b:6e:0a:b4:d7:96:0c: 41:95:f0:22:c6:b9:53:16:aa:18:de:d9:75:c2:62:e5:b3:39: 9b:ec:6d:2d:9b:a9:dd:ac:f9:13:59:c0:fe:73:b5:ee:ee:2a: 80:2f:c0:26:9e:26:77:57:75:e4:4a:09:e4:85:94:01:af:a3: 86:11:c7:b8:a9:46:ca:9a:10:70:a2:93:ff:84:75:6e:0a:8b: 37:6e:33:c7:f7:3c:31:8d:85:67:fa:74:93:14:58:44:6f:d8: 90:1c:35:64:0d:b8:8a:cf:c7:43:c1:e9:b8:45:75:79:8a:db: 92:71:05:0c:4f:76:1b:ff:c5:a0:b0:10:2b:74:0f:65:b2:a2: 21:15:d4:cd:7d:6f:9e:bb:21:58:de:b9:9b:14:5a:8c:c9:b2: 9c:d1:b1:9c:57:2d:e6:d6:47:21:b1:b3:99:e1:ec:16:bd:1a: 27:cf:9d:7c:6d:d0:03:6b:dc:d9:e6:1e:d5:60:79:01:58:fc: f6:d3:9c:05:d1:f0:26:6e:df:72:7a:43:b5:72:e1:62:25:c7: 8c:5d:d2:85 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPuYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTAzNTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkYxMzQ0QUYxMTAvBgNVBAUTKDYzRTBBOTBDMkIyQTRCNDJBNDRBRDQ0 Qzg1NzBFNEJGRkJGNzVDRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC15a67h/Xldds7BNScV2Yxq2TDdN/5XNV5R5Nr1jX50W/LqOpN8buoN6na3tUu 4hlOyeuhVtc9nD1hDg8+LBe4A42oR+h3keVfnvOjARJ5JYXLB+9n4mKzPu1PG4vz QkMpU9qWBxMBtX3Y1UrWiRqubHxT+WfoQakJv/uRaAGyHwZ2BPkaIUH4g06m0Gkx AQ6hWZDRtynjyRUlYLHawm3aZnpfoj3NMKk8IRP7PmxkLrjP85BaykAk1pFl06+W 0DSpW88LBd5Ge8uGR09b9Bsit5EstdKbsd6joTnG8IK4pDEOhXWJ4l34kWiMyNen s5Zg0xS+jK+/ATOpnX4GzfSzAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUY+CpDCsq S0KkStRMhXDkv/v3XPQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMTM0NC82QzI3OEExOEY2MTcx MUVDODE3MEFBQUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjEzNDQvNkMyNzhBMThGNjE3MTFFQzgxNzBBQUFCRjEyMjI0NjgvWS1DcERD c3FTMEtrU3RSTWhYRGt2X3YzWFBRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBPQwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFm2hAwDQQCAAIwBwMF ACwPQwAwDQYJKoZIhvcNAQELBQADggEBAAEXPW9gf6QgEHhGUIB+7gAGjjsAIdPm mtILDqCaPvdKIVjFAlb+jAn9q4A+GlKCS24KtNeWDEGV8CLGuVMWqhje2XXCYuWz OZvsbS2bqd2s+RNZwP5zte7uKoAvwCaeJndXdeRKCeSFlAGvo4YRx7ipRsqaEHCi k/+EdW4KizduM8f3PDGNhWf6dJMUWERv2JAcNWQNuIrPx0PB6bhFdXmK25JxBQxP dhv/xaCwECt0D2WyoiEV1M19b567IVjeuZsUWozJspzRsZxXLebWRyGxs5nh7Ba9 GifPnXxt0ANr3NnmHtVgeQFY/PbTnAXR8CZu33J6Q7Vy4WIlx4xd0oU= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:12 2026 by rpki-client