This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer File: Y8NA4QrXVoDHqjzdANvkjX1BneY.cer (raw, json) Hash identifier: /6Mj/Uvz1CkjIP75qdpFmSnt5PzZ7X6K13fjpd2iOKQ= Subject key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DDB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:20:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37356 -- 37357 IP: 102.177.0.0/18 IP: 196.6.242.0/24 IP: 196.11.63.0/24 IP: 196.61.16.0/20 IP: 197.155.96.0/19 IP: 197.221.160.0/19 IP: 2c0f:f390::/32 IP: 2c0f:fa58::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15835 (0x3ddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:20:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:6e:ca:45:0c:65:41:bc:c8:42:ba:cb:e6: 1f:c1:8a:da:a3:df:e4:df:26:1c:18:3b:ef:ca:50: ae:00:ba:77:3d:8b:9d:45:f2:de:3c:b5:fc:c2:eb: 93:a9:24:73:cf:7c:47:5c:41:bd:16:5d:6f:2f:57: 15:75:72:94:65:c9:32:f3:c0:0e:03:fb:30:f4:82: 13:31:ee:fe:b7:6e:45:a3:56:d2:1b:51:b8:82:8d: e3:33:5c:2a:a4:ee:59:fe:a5:f4:e9:85:69:03:a8: 52:41:94:e4:65:fc:a9:d3:07:28:e7:b0:dc:e1:1f: a9:24:8f:4f:03:4a:83:1b:72:f0:d7:f7:09:3e:76: 9e:bd:d2:23:d4:f1:6a:f7:8c:89:e4:6d:2f:09:96: c5:cf:7b:4d:8b:bd:ae:0f:e6:c2:14:bd:5c:02:09: 01:c6:64:62:5f:5e:8b:27:ff:ae:1a:fb:69:1f:96: 4d:a1:55:24:c8:f2:58:da:48:29:a9:d5:86:67:88: e9:14:46:32:b1:89:6d:8b:75:e3:96:81:c9:60:5c: 2b:a7:86:24:4e:19:f0:de:ab:1e:88:35:e3:cf:88: 17:c4:44:20:f3:24:ef:9d:b3:d9:71:5f:9b:01:db: 28:a1:bd:a1:26:5d:c8:b3:90:8e:5e:8f:03:b6:fc: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37356-37357 sbgp-ipAddrBlock: critical IPv4: 102.177.0.0/18 196.6.242.0/24 196.11.63.0/24 196.61.16.0/20 197.155.96.0/19 197.221.160.0/19 IPv6: 2c0f:f390::/32 2c0f:fa58::/32 Signature Algorithm: sha256WithRSAEncryption a6:6a:5d:52:9a:0e:af:d7:ef:7d:ed:02:ac:e5:c7:a0:96:12: c9:cd:9d:45:2a:88:a8:3e:84:69:7f:f9:6a:e2:52:77:3d:4c: f6:78:f9:3d:b9:b9:8d:06:81:e2:7e:65:e7:df:1e:30:c6:9f: 2c:9c:1b:41:b4:92:51:09:ed:4c:28:63:61:68:0d:31:8b:8f: ca:3e:27:4a:31:42:a3:35:e3:0c:9e:2b:61:3d:c1:b6:fe:9d: 6d:24:1c:9c:0e:76:55:bf:ca:05:f8:6f:8c:75:16:c7:7d:6c: fd:ff:13:cc:a7:75:74:b1:04:cb:71:c1:9f:8f:c5:94:4a:d4: 86:96:71:c8:41:b9:a4:13:a8:88:17:4b:fd:ca:76:06:b2:1a: 76:70:ba:e0:c9:a8:3b:1a:10:63:0d:ac:3c:c2:b3:03:b3:8f: fa:76:db:87:c0:8f:06:f6:34:c9:6d:ec:d8:12:6b:e9:06:9c: c4:4c:20:27:e1:3d:54:88:29:6c:ae:2e:6e:5e:fc:cd:e3:2e: d9:50:20:5e:db:1d:c4:67:15:78:be:e0:08:f1:ab:e1:a0:e2: 50:e9:54:21:4d:8e:7c:9c:7e:e6:25:80:12:92:7c:2c:3a:9b: 5f:7d:81:aa:4b:51:2b:96:25:62:27:99:dc:64:97:69:54:3b: 3e:85:8f:d9 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgICPdswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDIwMjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkNBMUM0QUYxMTAvBgNVBAUTKDYzQzM0MEUxMEFENzU2ODBDN0FBM0NE RDAwREJFNDhEN0Q0MTlERTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1tG7KRQxlQbzIQrrL5h/Bitqj3+TfJhwYO+/KUK4Aunc9i51F8t48tfzC65Op JHPPfEdcQb0WXW8vVxV1cpRlyTLzwA4D+zD0ghMx7v63bkWjVtIbUbiCjeMzXCqk 7ln+pfTphWkDqFJBlORl/KnTByjnsNzhH6kkj08DSoMbcvDX9wk+dp690iPU8Wr3 jInkbS8JlsXPe02Lva4P5sIUvVwCCQHGZGJfXosn/64a+2kflk2hVSTI8ljaSCmp 1YZniOkURjKxiW2LdeOWgclgXCunhiROGfDeqx6INePPiBfERCDzJO+ds9lxX5sB 2yihvaEmXcizkI5ejwO2/PHtAgMBAAGjggNGMIIDQjAdBgNVHQ4EFgQUY8NA4QrX VoDHqjzdANvkjX1BneYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQTFDNC8xNzI2N0E5QUY0MkIx MUVCOTE4ODFFMzREOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Q0ExQzQvMTcyNjdBOUFGNDJCMTFFQjkxODgxRTM0RDhBMDE0Q0UvWThOQTRR clhWb0RIcWp6ZEFOdmtqWDFCbmVZLm1mdDAhBggrBgEFBQcBCAEB/wQSMBCgDjAM MAoCAwCR7AIDAJHtMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQGZrEAAwQA xAbyAwQAxAs/AwQExD0QAwQFxZtgAwQFxd2gMBQEAgACMA4DBQAsD/OQAwUALA/6 WDANBgkqhkiG9w0BAQsFAAOCAQEApmpdUpoOr9fvfe0CrOXHoJYSyc2dRSqIqD6E aX/5auJSdz1M9nj5Pbm5jQaB4n5l598eMMafLJwbQbSSUQntTChjYWgNMYuPyj4n SjFCozXjDJ4rYT3Btv6dbSQcnA52Vb/KBfhvjHUWx31s/f8TzKd1dLEEy3HBn4/F lErUhpZxyEG5pBOoiBdL/cp2BrIadnC64MmoOxoQYw2sPMKzA7OP+nbbh8CPBvY0 yW3s2BJr6QacxEwgJ+E9VIgpbK4ubl78zeMu2VAgXtsdxGcVeL7gCPGr4aDiUOlU IU2OfJx+5iWAEpJ8LDqbX32BqktRK5YlYieZ3GSXaVQ7PoWP2Q== -----END CERTIFICATE-----Generated at Sun Jan 25 04:27:51 2026 by rpki-client