This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer File: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer (raw, json) Hash identifier: nUeO/58WMJZd7D3yL3qWRIy9ZueJAOza+aKjMLvwcOg= Subject key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 395D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:28:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329380 IP: 102.210.68.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14685 (0x395d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:28:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364A0C9AF, serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:f5:e9:ba:5c:eb:f9:bf:0e:1e:15:27:11: ba:c8:e7:23:0a:b5:4c:fd:8c:93:c8:7a:25:94:25: 56:12:a8:55:dd:70:8e:cc:a7:4d:34:e7:47:7b:a0: e3:5f:dc:92:68:09:35:e7:dc:b2:c6:3f:3c:53:d0: b5:a6:7d:41:e6:0e:d3:9d:6e:e5:30:3b:7d:cf:a3: f9:4b:27:7a:74:a9:f9:02:61:8d:e1:12:dd:1c:5e: d1:a5:3c:18:cc:99:e3:c1:5e:47:5f:49:17:5d:c1: 8f:c5:7f:d3:c6:0e:3f:a4:26:75:9f:2c:55:78:aa: fc:e2:d3:ca:34:7f:00:ce:50:78:fd:26:91:da:c2: 41:30:7d:81:c0:b4:9e:4c:83:61:6d:27:39:83:66: c6:c1:8b:fa:86:26:cd:aa:b0:76:a8:e6:f3:fb:f1: a1:04:07:e2:c1:e4:c0:f0:bb:34:ef:42:95:6b:50: 20:aa:5a:6f:89:49:d2:bc:7c:6e:08:f5:9d:f2:03: e9:9f:be:06:0a:40:e3:bd:80:be:c7:51:7f:b7:69: e8:66:6b:f2:c0:b1:f4:00:43:2f:ca:7f:b0:a5:ce: 75:88:50:ae:87:34:24:52:4d:11:ee:5d:f9:e7:ef: 5f:04:7b:46:e6:35:f0:46:54:0c:aa:4b:29:c0:e2: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329380 sbgp-ipAddrBlock: critical IPv4: 102.210.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:1d:a3:ea:8a:29:0a:2b:12:fb:94:34:4f:1c:82:51:d4:05: 1e:48:13:71:21:27:88:7b:5f:94:d8:bb:75:da:88:3f:87:a2: 50:1d:b4:cf:e7:91:ca:e0:e4:07:c0:b6:49:64:a7:98:2f:3b: bc:cb:08:b8:1b:ed:05:09:bd:e9:ae:6b:58:95:18:66:2c:87: 43:f1:9f:31:7f:e1:d5:6a:93:0c:08:3a:ce:f8:9a:d9:1a:49: a9:48:51:d0:b4:47:36:de:a4:4f:33:96:a9:76:23:d6:5c:59: d4:fc:df:e4:d4:a3:27:07:44:e7:f6:55:f3:1c:6b:c7:71:b7: cc:6e:11:17:67:79:c8:64:42:60:dc:2b:33:1e:57:5a:3f:bf: 7c:03:9a:e8:07:fa:e6:d3:47:2a:f2:e2:9a:67:ce:1e:95:00: cf:76:03:93:dd:40:3a:86:21:39:0f:64:63:01:84:0d:af:27: 2a:f9:82:d3:68:49:bc:56:12:b3:47:23:1b:83:50:95:49:36: fa:a5:1c:19:02:dc:73:d9:93:af:24:fd:4c:ea:1a:e4:ad:1c: 07:58:13:aa:47:3a:18:b5:2b:a1:bc:96:1a:f5:ff:01:12:46: 6b:e6:b5:a2:75:05:d6:50:8b:94:6d:ff:bf:b0:98:39:be:64: b0:ee:a9:3a -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICOV0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTI4MjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjRBMEM5QUYxMTAvBgNVBAUTKDY2NDFGNkI2NjA1NDRFRDE1MDFCQ0Mw OTVBQTA3RjlDQjBGQjVDNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa6PXpulzr+b8OHhUnEbrI5yMKtUz9jJPIeiWUJVYSqFXdcI7Mp00050d7oONf 3JJoCTXn3LLGPzxT0LWmfUHmDtOdbuUwO33Po/lLJ3p0qfkCYY3hEt0cXtGlPBjM mePBXkdfSRddwY/Ff9PGDj+kJnWfLFV4qvzi08o0fwDOUHj9JpHawkEwfYHAtJ5M g2FtJzmDZsbBi/qGJs2qsHao5vP78aEEB+LB5MDwuzTvQpVrUCCqWm+JSdK8fG4I 9Z3yA+mfvgYKQOO9gL7HUX+3aehma/LAsfQAQy/Kf7ClznWIUK6HNCRSTRHuXfnn 718Ee0bmNfBGVAyqSynA4s9ZAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUZkH2tmBU TtFQG8wJWqB/nLD7XE0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0QTBDOS9CODk3MTQ0QUE2NkEx MUVFOEE4MkNFOEM3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NEEwQzkvQjg5NzE0NEFBNjZBMTFFRThBODJDRThDNzc1NDEyRTYvWmtIMnRt QlVUdEZRRzh3SldxQl9uTEQ3WEUwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBqQwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0kQwDQYJKoZIhvcN AQELBQADggEBAGsdo+qKKQorEvuUNE8cglHUBR5IE3EhJ4h7X5TYu3XaiD+HolAd tM/nkcrg5AfAtklkp5gvO7zLCLgb7QUJvemua1iVGGYsh0PxnzF/4dVqkwwIOs74 mtkaSalIUdC0RzbepE8zlql2I9ZcWdT83+TUoycHROf2VfMca8dxt8xuERdnechk QmDcKzMeV1o/v3wDmugH+ubTRyry4ppnzh6VAM92A5PdQDqGITkPZGMBhA2vJyr5 gtNoSbxWErNHIxuDUJVJNvqlHBkC3HPZk68k/UzqGuStHAdYE6pHOhi1K6G8lhr1 /wESRmvmtaJ1BdZQi5Rt/7+wmDm+ZLDuqTo= -----END CERTIFICATE-----Generated at Sun Jan 25 13:44:31 2026 by rpki-client