This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer File: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer (raw, json) Hash identifier: QDzw+jjF/09k7mV93FlMEabxKasomyNEJmvbMwwiejc= Subject key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EDE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:02:29 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 30983 IP: 102.207.32.0/22 IP: 102.216.118.0/24 IP: 196.200.128.0/18 IP: 2001:4310::/32 IP: 2001:43f8:1670::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16094 (0x3ede) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:02:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6f:4b:2b:4e:6e:e8:1d:3f:db:ef:25:96:9b: 73:44:90:95:ae:03:bf:d3:71:d2:03:24:af:77:67: 60:0a:04:70:cc:09:1d:69:87:ad:b1:c7:d1:17:83: e3:14:c5:f2:17:c1:e6:19:ae:00:0b:77:92:2c:bd: 4e:6f:5c:de:55:84:39:5d:90:24:8c:92:db:ca:8b: 24:08:7c:dd:db:0e:5e:8b:46:5e:d9:9b:52:fa:27: 60:2e:aa:3f:97:72:0b:b8:a2:59:16:c2:96:36:f6: 9e:ad:77:05:5e:96:56:e3:14:7f:13:c0:4b:c6:22: d4:38:6a:9c:eb:84:e1:fa:c6:06:cd:a6:9e:d6:4a: 8f:f2:88:2e:c5:e1:9e:a2:9c:c3:0e:76:e2:08:67: c8:92:53:44:46:2a:96:e9:55:48:37:3a:5c:77:29: 8a:06:61:bf:c6:8d:1d:12:75:9d:7b:12:12:05:3a: 54:65:6d:9e:79:13:b0:b9:d5:6c:9c:fb:2d:df:aa: 24:68:93:c9:f9:ff:97:6e:fd:b7:94:7b:b1:d7:19: 70:ef:08:40:30:55:38:2f:95:b2:29:b2:03:05:17: ca:a6:ac:6c:1f:d5:ea:5d:e8:79:71:80:a7:ad:2d: a7:0e:1a:d1:d2:f3:8f:c1:20:3a:94:cd:81:db:cf: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 30983 sbgp-ipAddrBlock: critical IPv4: 102.207.32.0/22 102.216.118.0/24 196.200.128.0/18 IPv6: 2001:4310::/32 2001:43f8:1670::/48 Signature Algorithm: sha256WithRSAEncryption 15:28:fc:ed:fe:b5:70:3c:9c:72:59:39:a3:df:c7:c0:c5:41: 78:7f:f5:99:1a:99:09:ce:fe:5b:e8:23:83:a3:db:7c:a1:35: 21:b4:e0:8f:a2:e4:db:c3:59:5f:7c:96:48:40:e6:2d:6c:18: 57:c3:b1:bf:9e:ca:97:08:a0:c9:b4:db:93:76:ab:63:40:68: e9:40:77:53:0c:30:be:37:f2:5d:df:de:a0:cd:c4:35:af:e6: c4:7d:df:c1:8a:0d:77:75:de:58:87:a0:50:04:eb:34:cf:66: 24:4a:27:f1:9d:77:d0:3f:a8:52:df:90:54:f3:35:dd:bc:c4: 69:98:b0:ba:70:15:f3:7e:51:7d:00:7e:2b:23:e9:58:a9:2e: 2a:bb:8a:c9:4a:10:73:b5:e0:99:df:d0:1f:fe:86:8c:5c:f5: 62:62:83:13:e5:54:21:28:d7:5d:e7:c0:4a:c9:71:73:64:9c: f7:b0:30:68:48:95:94:5e:1b:04:23:f6:0a:cd:22:6f:7b:4c: 36:b4:2f:d1:06:d1:cb:5e:6b:45:a0:e9:f2:8a:4c:4c:a0:f1: c6:05:4f:9b:4c:71:05:dc:5f:b0:24:c6:2b:ad:ee:d5:a7:44: c1:02:2b:3b:07:b9:88:48:fe:80:98:42:b9:df:71:ac:1f:5d: c8:16:eb:77 -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgICPt4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTAyMjlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkYwMTMzQUYxMTAvBgNVBAUTKDY2MzBDNzg0MDg0NkYyRjY5MDk3NTRG MTM0MTQ2NkNEQUZFQTJGRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVb0srTm7oHT/b7yWWm3NEkJWuA7/TcdIDJK93Z2AKBHDMCR1ph62xx9EXg+MU xfIXweYZrgALd5IsvU5vXN5VhDldkCSMktvKiyQIfN3bDl6LRl7Zm1L6J2Auqj+X cgu4olkWwpY29p6tdwVellbjFH8TwEvGItQ4apzrhOH6xgbNpp7WSo/yiC7F4Z6i nMMOduIIZ8iSU0RGKpbpVUg3Olx3KYoGYb/GjR0SdZ17EhIFOlRlbZ55E7C51Wyc +y3fqiRok8n5/5du/beUe7HXGXDvCEAwVTgvlbIpsgMFF8qmrGwf1epd6HlxgKet LacOGtHS84/BIDqUzYHbz7y5AgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQUZjDHhAhG 8vaQl1TxNBRmza/qL9QwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMDEzMy81MDQxQTcwOEU1ODYx MUVDQUZDMjJBODdGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjAxMzMvNTA0MUE3MDhFNTg2MTFFQ0FGQzIyQTg3RjEyMjI0NjgvWmpESGhB aEc4dmFRbDFUeE5CUm16YV9xTDlRLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJ5BzBDBggrBgEFBQcBBwEB/wQ0MDIwGAQCAAEwEgMEAmbPIAMEAGbYdgMEBsTI gDAWBAIAAjAQAwUAIAFDEAMHACABQ/gWcDANBgkqhkiG9w0BAQsFAAOCAQEAFSj8 7f61cDycclk5o9/HwMVBeH/1mRqZCc7+W+gjg6PbfKE1IbTgj6Lk28NZX3yWSEDm LWwYV8Oxv57KlwigybTbk3arY0Bo6UB3UwwwvjfyXd/eoM3ENa/mxH3fwYoNd3Xe WIegUATrNM9mJEon8Z130D+oUt+QVPM13bzEaZiwunAV835RfQB+KyPpWKkuKruK yUoQc7Xgmd/QH/6GjFz1YmKDE+VUISjXXefASslxc2Sc97AwaEiVlF4bBCP2Cs0i b3tMNrQv0QbRy15rRaDp8opMTKDxxgVPm0xxBdxfsCTGK63u1adEwQIrOwe5iEj+ gJhCud9xrB9dyBbrdw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:44 2026 by rpki-client