This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer File: Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer (raw, json) Hash identifier: 3Z10WuLckYRUZ9kG1IEx6V9sHW+wXfI/LrnEZlmWIEk= Subject key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CEB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:42:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328730 IP: 102.221.196.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15595 (0x3ceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:42:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:25:88:3d:36:98:75:a1:79:cc:3c:90:b5: dc:e2:e9:4f:2e:7a:8f:3a:f8:97:2f:a9:3f:28:41: bf:2c:7a:0f:10:29:fc:47:29:d5:fd:a3:e0:0e:f1: bd:a1:21:88:fd:6b:86:b1:c8:e9:50:59:6c:09:1e: ee:4e:65:f0:60:c1:5a:15:0f:79:65:83:a5:d8:e8: 04:22:65:b6:dd:5f:ef:34:57:e5:dc:c1:f5:14:d8: a4:3c:ed:ea:31:45:9b:2f:38:0b:68:be:e8:50:a1: 9c:f8:a0:00:ac:b5:b4:bd:8b:f7:96:f0:88:a2:61: 8f:89:17:12:09:da:a8:41:99:ab:05:4f:8c:1d:2a: 5c:64:aa:4f:d2:0d:7e:6b:94:4c:fd:f9:90:90:94: 14:6e:7f:1a:06:5f:6c:2e:08:4d:b8:de:58:0a:35: 17:82:57:c2:b1:a5:b3:e4:77:2b:b0:62:78:10:5b: f3:ef:cd:6d:c2:62:80:13:42:b6:6a:86:c9:7b:9c: 16:b0:f9:61:0c:ed:81:19:cd:0d:63:fb:cd:c7:ec: 92:a1:2c:b9:88:5f:20:34:87:00:d9:9c:09:bc:e6: 8d:0b:59:56:0c:b9:61:8a:77:bf:1f:d4:17:a2:4c: c3:16:0b:02:27:52:99:f5:0b:3e:a7:50:ae:37:ba: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328730 sbgp-ipAddrBlock: critical IPv4: 102.221.196.0/22 Signature Algorithm: sha256WithRSAEncryption 67:8d:3f:92:63:01:fd:5c:1b:ae:4d:a3:2b:9e:a2:c4:f2:cb: a9:c7:c1:f1:fa:6f:38:ea:26:f3:17:fe:f8:52:f4:87:e3:04: b8:3b:87:aa:9a:32:ef:94:34:fe:a9:cb:d9:5f:2d:f8:ff:1e: 48:b3:f8:8e:44:0b:18:95:63:ff:5f:f6:ef:40:be:5e:b5:37: e9:d9:bb:39:06:b8:32:88:32:65:e5:03:6f:da:00:86:25:38: d2:fc:50:81:14:41:fb:0f:04:d5:4c:91:15:ab:ad:11:8c:a0: 9f:ec:63:e5:b2:6c:55:8b:55:27:f8:80:bc:82:28:4a:df:25: 0d:72:74:c0:92:c0:c4:07:ae:82:4e:2b:88:13:9c:17:d3:49: e6:61:98:bc:86:74:7a:6b:ad:0b:27:77:d2:a7:36:5c:e7:fa: 9c:75:35:e4:25:50:e2:8f:fb:25:5c:da:f4:db:a2:df:fb:90: c3:1d:66:3b:0a:5e:9c:a8:09:db:08:46:d8:4c:03:a6:b8:46: 3d:c1:4d:80:3d:f2:3f:cf:be:87:60:e5:fe:7a:fb:6d:b4:08: 5f:2a:bf:1e:e3:f1:fd:91:44:9f:5f:8f:12:d5:c2:ce:d7:95: 03:50:15:b5:72:cb:ca:e4:c1:92:89:ad:2a:76:99:3a:83:df: 70:2d:02:92 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICPOswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzQyMTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkFBNzg4QUYxMTAvBgNVBAUTKDY3QzgyRUIzQTJCMURBQjczOTkxRkEy M0ExMjhBMjUxNzUyRjMzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5jSWIPTaYdaF5zDyQtdzi6U8ueo86+JcvqT8oQb8seg8QKfxHKdX9o+AO8b2h IYj9a4axyOlQWWwJHu5OZfBgwVoVD3llg6XY6AQiZbbdX+80V+XcwfUU2KQ87eox RZsvOAtovuhQoZz4oACstbS9i/eW8IiiYY+JFxIJ2qhBmasFT4wdKlxkqk/SDX5r lEz9+ZCQlBRufxoGX2wuCE243lgKNReCV8KxpbPkdyuwYngQW/PvzW3CYoATQrZq hsl7nBaw+WEM7YEZzQ1j+83H7JKhLLmIXyA0hwDZnAm85o0LWVYMuWGKd78f1Bei TMMWCwInUpn1Cz6nUK43upSPAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUZ8gus6Kx 2rc5kfojoSiiUXUvM1IwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBQTc4OC9BQ0RBMDYzNjMwMUQx MUVEOTJDOTc1OTVGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QUE3ODgvQUNEQTA2MzYzMDFEMTFFRDkyQzk3NTk1RjEyMjI0NjgvWjhndXM2 S3gycmM1a2Zvam9TaWlVWFV2TTFJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBBowHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3cQwDQYJKoZIhvcN AQELBQADggEBAGeNP5JjAf1cG65NoyueosTyy6nHwfH6bzjqJvMX/vhS9IfjBLg7 h6qaMu+UNP6py9lfLfj/Hkiz+I5ECxiVY/9f9u9Avl61N+nZuzkGuDKIMmXlA2/a AIYlONL8UIEUQfsPBNVMkRWrrRGMoJ/sY+WybFWLVSf4gLyCKErfJQ1ydMCSwMQH roJOK4gTnBfTSeZhmLyGdHprrQsnd9KnNlzn+px1NeQlUOKP+yVc2vTbot/7kMMd ZjsKXpyoCdsIRthMA6a4Rj3BTYA98j/Pvodg5f56+220CF8qvx7j8f2RRJ9fjxLV ws7XlQNQFbVyy8rkwZKJrSp2mTqD33AtApI= -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:44 2026 by rpki-client