This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer File: _p4BMgoOlVJFOamGqPA_ketPwy0.cer (raw, json) Hash identifier: IIVFOLEMspBkr91fOdqYHC58xZiYx7qNXYbaSTxPr3s= Subject key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BCD Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:00:03 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328443 IP: 102.68.152.0/22 IP: 2c0f:eca8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15309 (0x3bcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:00:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:a3:4a:bc:13:19:64:77:87:55:ef:17:4d: 43:f2:ed:d2:28:3a:20:ef:85:53:76:4f:df:1f:0d: ad:c6:65:de:14:63:ca:76:af:9b:4f:28:35:b4:53: f6:e8:72:82:e1:f1:95:2d:56:6e:b1:06:26:10:1c: 10:b9:46:12:7c:c5:95:30:47:41:84:1f:07:7a:d6: eb:5c:f8:10:62:58:e4:26:84:13:5a:8e:7c:a6:db: 4d:bd:b8:07:41:c2:b2:bb:f2:76:d4:b0:c1:e3:a7: 70:77:f3:a3:dc:71:73:67:39:cd:9b:a3:4d:a5:75: 03:e5:61:43:e8:01:85:12:60:9b:aa:3d:a7:1d:16: 22:12:7a:24:e4:cd:d6:56:94:b1:bd:11:e8:dd:50: 5d:5d:74:80:80:a4:81:c8:88:63:20:83:d7:95:43: 6a:6a:b0:49:c6:9f:e6:6c:61:4a:5f:63:74:ff:81: 2f:7d:bb:6c:bb:02:c1:9b:6b:cd:ba:64:55:d1:f3: ad:36:42:6e:81:6a:cb:b0:a4:4d:aa:d7:cf:71:30: 47:b8:fb:a5:e3:fb:1c:d1:9f:78:7d:91:9f:f4:60: b0:ba:9b:48:93:c7:67:5f:a3:86:93:6d:ee:1c:31: 3d:96:55:1e:c5:00:42:75:22:bb:5d:7b:88:bf:66: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328443 sbgp-ipAddrBlock: critical IPv4: 102.68.152.0/22 IPv6: 2c0f:eca8::/32 Signature Algorithm: sha256WithRSAEncryption 36:14:03:0c:01:6b:34:fc:a5:da:c7:14:40:c2:24:bb:ff:55: 72:c9:f6:27:59:97:0f:b4:82:47:df:3b:53:5d:2c:41:df:55: a3:cb:9a:59:bf:df:ee:8a:17:e4:4f:65:60:ec:ff:d4:41:51: b3:87:78:65:df:f5:b7:aa:43:a6:ad:6b:09:d4:5a:9c:b5:d8: 90:0c:f2:91:dc:fd:6f:e9:08:a2:de:b4:30:2d:09:5d:2d:65: d3:b3:37:e2:6e:1b:6c:04:90:39:a9:d4:26:9d:81:64:c1:bb: d5:96:bc:09:5e:21:77:f3:e5:de:fe:36:48:f8:5b:c5:44:25: 53:41:77:74:a4:4e:d6:c2:54:bf:d7:e9:ca:4f:2a:de:7c:b1: 4d:82:0e:65:a0:7e:f9:e5:ae:dd:de:38:e2:aa:9c:c7:02:e9: a4:60:b2:c4:cf:c6:0d:e8:15:0b:6c:aa:ad:ef:8f:ab:50:cd: e7:b2:f8:86:17:75:a5:36:6d:c2:e7:fa:d3:40:3e:8f:65:11: 3b:18:2b:10:9c:52:07:84:ba:6d:d3:1b:e1:f2:b2:8c:58:bc: 35:2e:d7:ef:9f:ee:af:f7:88:06:e2:85:37:ed:63:54:5c:74: 93:3b:c6:84:e7:a6:51:0f:aa:0c:5a:05:4e:af:32:fb:e0:0d: 34:60:d1:ea -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO80wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzAwMDNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjhENjU4QUYxMTAvBgNVBAUTKEZFOUUwMTMyMEEwRTk1NTI0NTM5QTk4 NkE4RjAzRjkxRUI0RkMzMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx/6NKvBMZZHeHVe8XTUPy7dIoOiDvhVN2T98fDa3GZd4UY8p2r5tPKDW0U/bo coLh8ZUtVm6xBiYQHBC5RhJ8xZUwR0GEHwd61utc+BBiWOQmhBNajnym2029uAdB wrK78nbUsMHjp3B386PccXNnOc2bo02ldQPlYUPoAYUSYJuqPacdFiISeiTkzdZW lLG9EejdUF1ddICApIHIiGMgg9eVQ2pqsEnGn+ZsYUpfY3T/gS99u2y7AsGba826 ZFXR8602Qm6BasuwpE2q189xMEe4+6Xj+xzRn3h9kZ/0YLC6m0iTx2dfo4aTbe4c MT2WVR7FAEJ1Irtde4i/Zr2vAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU/p4BMgoO lVJFOamGqPA/ketPwy0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4RDY1OC85NDM2RURBRUNBNDcx MUVFOENBNjk3ODA3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OEQ2NTgvOTQzNkVEQUVDQTQ3MTFFRThDQTY5NzgwNzc1NDEyRTYvX3A0Qk1n b09sVkpGT2FtR3FQQV9rZXRQd3kwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAvswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmRJgwDQQCAAIwBwMF ACwP7KgwDQYJKoZIhvcNAQELBQADggEBADYUAwwBazT8pdrHFEDCJLv/VXLJ9idZ lw+0gkffO1NdLEHfVaPLmlm/3+6KF+RPZWDs/9RBUbOHeGXf9beqQ6atawnUWpy1 2JAM8pHc/W/pCKLetDAtCV0tZdOzN+JuG2wEkDmp1CadgWTBu9WWvAleIXfz5d7+ Nkj4W8VEJVNBd3SkTtbCVL/X6cpPKt58sU2CDmWgfvnlrt3eOOKqnMcC6aRgssTP xg3oFQtsqq3vj6tQzeey+IYXdaU2bcLn+tNAPo9lETsYKxCcUgeEum3TG+HysoxY vDUu1++f7q/3iAbihTftY1RcdJM7xoTnplEPqgxaBU6vMvvgDTRg0eo= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:26 2026 by rpki-client