This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer File: aaGydU0sb2tHJmd6cgRQI2vS7NE.cer (raw, json) Hash identifier: BeLWVa/Oaywd2u5g3jQEffaSt2YJDcxbZoe+Mz4l7IU= Subject key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3903 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:14:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328666 IP: 102.223.6.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14595 (0x3903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:14:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:0d:50:8b:af:1b:e4:13:38:6a:00:e8:f3: 9c:0c:ca:f6:7a:cd:5d:2f:72:cf:8a:55:aa:37:82: 70:fc:ab:e4:9e:be:d4:f8:cd:fa:5f:86:db:13:32: c9:5d:06:ff:3a:24:d9:d0:06:92:c6:d4:0e:f1:b9: ba:29:b5:d6:6e:2b:ad:7c:62:4d:0f:54:e1:eb:e7: ad:bd:af:97:ea:30:88:66:48:6b:b2:a1:bc:6c:b0: 22:2b:35:71:b8:26:23:a6:7c:66:d3:15:41:ae:f7: 77:78:ac:63:1e:8b:fd:93:9a:27:27:a0:a6:25:2d: 1d:59:ca:3e:3d:03:43:b1:14:12:f4:96:46:bb:3e: 33:8f:48:6d:03:7e:71:b5:c2:10:f5:83:fe:fc:9b: 32:18:4f:ce:4b:a3:f4:1b:1e:3b:38:a6:a7:3a:41: 16:57:88:c3:0e:43:ae:5e:de:49:ed:58:b8:35:2a: 04:03:59:94:b3:9f:0a:72:9d:a2:fd:28:d6:ab:28: 6e:e3:14:44:87:b8:f5:24:7b:92:79:69:90:98:27: 96:ce:3e:32:64:cb:3e:04:31:91:2f:38:bd:13:1a: 4d:33:d1:7d:bb:16:cf:b4:53:5d:7c:c0:5a:ca:06: 89:de:b1:ba:29:b7:7b:a2:3d:10:08:9d:93:eb:ec: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328666 sbgp-ipAddrBlock: critical IPv4: 102.223.6.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:55:f0:44:87:4f:86:fe:3b:05:99:a9:cc:e5:49:41:f5:54: c2:89:d1:4c:cb:16:15:98:70:22:3a:77:f2:c6:cb:45:38:60: 1e:85:37:e3:b0:87:26:ff:fe:4b:e8:99:be:53:c7:cf:90:7a: 01:bc:e2:7d:ad:91:ba:ca:34:ce:15:6b:9b:5d:3c:b8:f4:fb: 38:6a:43:d8:6d:d7:b6:49:62:88:39:ae:24:e5:bf:e0:f6:6f: 07:1e:3a:02:7c:5f:70:48:e1:03:a3:ea:50:99:73:3c:da:ed: 98:b9:23:ea:32:55:75:84:4f:ff:9a:09:58:0e:81:f9:64:59: f0:9d:4f:5c:c0:f3:ce:63:1c:22:3d:9e:a4:ae:37:c6:51:59: 17:fe:cb:6f:11:8c:35:eb:93:03:f8:f3:b6:fc:a5:b3:0f:b1: 47:af:fa:23:f2:ae:45:df:c2:33:87:82:c6:66:8d:ff:9f:1d: 09:02:45:04:7b:8a:4d:96:b1:5d:df:66:db:07:ae:9c:41:b9: 9b:b5:0e:98:76:a6:45:7d:90:2b:71:ca:41:cf:27:88:6b:6f: 11:44:7b:dd:69:2c:26:0c:43:70:07:4d:4a:28:76:a4:22:3d: ef:0a:92:f0:4b:97:9d:92:29:e2:f7:33:f3:1b:99:de:0d:ac: 36:35:f5:73 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICOQMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTE0MTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQxRERDQUYxMTAvBgNVBAUTKDY5QTFCMjc1NEQyQzZGNkI0NzI2Njc3 QTcyMDQ1MDIzNkJEMkVDRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX+w1Qi68b5BM4agDo85wMyvZ6zV0vcs+KVao3gnD8q+SevtT4zfpfhtsTMsld Bv86JNnQBpLG1A7xuboptdZuK618Yk0PVOHr5629r5fqMIhmSGuyobxssCIrNXG4 JiOmfGbTFUGu93d4rGMei/2TmicnoKYlLR1Zyj49A0OxFBL0lka7PjOPSG0DfnG1 whD1g/78mzIYT85Lo/QbHjs4pqc6QRZXiMMOQ65e3kntWLg1KgQDWZSznwpynaL9 KNarKG7jFESHuPUke5J5aZCYJ5bOPjJkyz4EMZEvOL0TGk0z0X27Fs+0U118wFrK Bonesbopt3uiPRAInZPr7APHAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUaaGydU0s b2tHJmd6cgRQI2vS7NEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MUREQy85MUJFOTkyNjU4Q0Qx MUYwODZCRjdDRUFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDFEREMvOTFCRTk5MjY1OENEMTFGMDg2QkY3Q0VBREFFNEVDOUMvYWFHeWRV MHNiMnRISm1kNmNnUlFJMnZTN05FLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA9owHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3wYwDQYJKoZIhvcN AQELBQADggEBACtV8ESHT4b+OwWZqczlSUH1VMKJ0UzLFhWYcCI6d/LGy0U4YB6F N+Owhyb//kvomb5Tx8+QegG84n2tkbrKNM4Va5tdPLj0+zhqQ9ht17ZJYog5riTl v+D2bwceOgJ8X3BI4QOj6lCZczza7Zi5I+oyVXWET/+aCVgOgflkWfCdT1zA885j HCI9nqSuN8ZRWRf+y28RjDXrkwP487b8pbMPsUev+iPyrkXfwjOHgsZmjf+fHQkC RQR7ik2WsV3fZtsHrpxBuZu1Dph2pkV9kCtxykHPJ4hrbxFEe91pLCYMQ3AHTUoo dqQiPe8KkvBLl52SKeL3M/Mbmd4NrDY19XM= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:03 2026 by rpki-client