This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer File: _ESm2CkBQzmKHfvvhvwdrjRBoro.cer (raw, json) Hash identifier: 12Kzu3pFVd0d6fHP3bHxW4YvTK0n2SqTPnzyzLBJ34k= Subject key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 389D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:58:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329391 IP: 102.210.8.0/22 IP: 2c0f:2b40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14493 (0x389d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:58:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3636ECFAF, serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:68:9f:5a:42:d7:ad:4f:36:3b:a7:23:92: c5:af:48:52:27:2b:98:ac:c0:dd:e5:a5:fc:fe:f5: 3e:7f:58:22:e7:9a:e5:a0:ea:77:7a:fc:ff:e8:14: be:1a:bb:23:24:28:06:c9:a3:e3:63:87:13:54:10: a7:b5:c1:25:59:7a:94:35:58:09:12:c4:2d:76:fd: 5e:f4:aa:09:29:e8:5a:5e:bf:6b:41:3a:c3:93:8a: 5a:c7:47:0a:59:60:70:92:2b:e7:17:4d:2d:b3:cc: c3:64:82:5f:74:65:b3:13:89:7b:eb:87:2b:35:dc: 78:a9:8e:69:9b:f8:b0:b7:c1:6e:18:c6:5a:8d:97: 21:f4:a0:35:50:86:95:32:37:1c:42:cc:7e:33:8d: 73:fe:d1:90:3d:4b:7d:7e:23:61:3d:4f:a1:54:d2: ca:fc:04:61:ad:cf:b0:07:9a:a1:89:eb:11:7d:46: 76:28:24:14:5f:e9:32:cc:0a:79:68:62:41:25:a1: 6e:a4:59:43:35:0c:7c:5c:03:7a:9e:6f:26:22:a6: ca:da:b7:12:07:35:64:04:8e:53:95:a3:4e:85:e4: ea:da:53:0c:cf:83:8c:07:ef:fb:1f:d3:d3:3e:59: 3c:75:00:79:62:d2:a2:41:c8:e7:8e:b0:9f:de:8c: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329391 sbgp-ipAddrBlock: critical IPv4: 102.210.8.0/22 IPv6: 2c0f:2b40::/32 Signature Algorithm: sha256WithRSAEncryption bb:91:7f:c7:9c:0f:4d:3a:23:50:a9:37:fe:3c:63:b2:13:c2: 51:32:5a:c8:01:8f:fa:c3:58:7f:4d:fc:ec:12:c8:e4:0b:a7: d7:2c:a7:45:bd:9e:96:e9:50:6b:ed:7f:30:47:bd:23:49:09: 6b:fc:04:b3:48:2e:b6:88:63:2f:9c:8e:20:75:22:ef:45:d0: 80:5b:4a:34:8c:d5:76:2c:dc:35:22:97:8b:86:ba:4f:f0:56: 59:dc:4d:a2:4a:dc:8d:b9:1b:61:8a:39:32:63:cb:aa:20:3e: f3:bf:bf:23:b6:4e:e4:49:4e:25:29:fd:6d:f0:07:11:46:ef: 78:82:ce:4b:ee:28:18:0b:56:e7:b6:fb:59:7b:7b:0e:27:1a: 39:e5:cd:8f:10:18:20:1c:a3:a3:ca:ce:ef:80:e5:c2:4d:fd: 1a:b4:a8:3e:a6:19:0d:76:e4:5f:6c:40:55:2c:a2:69:71:d9: 83:37:b6:df:12:e6:be:9f:67:c3:f9:f1:66:e7:d2:11:37:e8: 3b:d4:31:c8:dc:84:a3:c9:b3:60:ba:84:0a:a6:6f:5b:63:3d: 7a:83:2b:c6:22:59:c6:6a:3c:f3:ed:26:d7:38:00:3f:63:1d: c6:81:73:34:70:dc:4b:9a:15:c2:7b:2b:9b:73:6b:9a:a0:d9: 00:0a:af:c0 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOJ0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDU4NDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjM2RUNGQUYxMTAvBgNVBAUTKEZDNDRBNkQ4MjkwMTQzMzk4QTFERkJF Rjg2RkMxREFFMzQ0MUEyQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbZ2ifWkLXrU82O6cjksWvSFInK5iswN3lpfz+9T5/WCLnmuWg6nd6/P/oFL4a uyMkKAbJo+NjhxNUEKe1wSVZepQ1WAkSxC12/V70qgkp6Fpev2tBOsOTilrHRwpZ YHCSK+cXTS2zzMNkgl90ZbMTiXvrhys13Hipjmmb+LC3wW4YxlqNlyH0oDVQhpUy NxxCzH4zjXP+0ZA9S31+I2E9T6FU0sr8BGGtz7AHmqGJ6xF9RnYoJBRf6TLMCnlo YkEloW6kWUM1DHxcA3qebyYipsratxIHNWQEjlOVo06F5OraUwzPg4wH7/sf09M+ WTx1AHli0qJByOeOsJ/ejCBNAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU/ESm2CkB QzmKHfvvhvwdrjRBorowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzNkVDRi8wMzg0RDAzRUM2NUQx MUVFOTEwOEUwODM3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzZFQ0YvMDM4NEQwM0VDNjVEMTFFRTkxMDhFMDgzNzc1NDEyRTYvX0VTbTJD a0JRem1LSGZ2dmh2d2RyalJCb3JvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBq8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0ggwDQQCAAIwBwMF ACwPK0AwDQYJKoZIhvcNAQELBQADggEBALuRf8ecD006I1CpN/48Y7ITwlEyWsgB j/rDWH9N/OwSyOQLp9csp0W9npbpUGvtfzBHvSNJCWv8BLNILraIYy+cjiB1Iu9F 0IBbSjSM1XYs3DUil4uGuk/wVlncTaJK3I25G2GKOTJjy6ogPvO/vyO2TuRJTiUp /W3wBxFG73iCzkvuKBgLVue2+1l7ew4nGjnlzY8QGCAco6PKzu+A5cJN/Rq0qD6m GQ125F9sQFUsomlx2YM3tt8S5r6fZ8P58Wbn0hE36DvUMcjchKPJs2C6hAqmb1tj PXqDK8YiWcZqPPPtJtc4AD9jHcaBczRw3EuaFcJ7K5tza5qg2QAKr8A= -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:17 2026 by rpki-client