This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer File: b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer (raw, json) Hash identifier: WX1HQX4ZHlLqdNvFrwXSYqS/5PKT1+PsOTl7ce6NDSI= Subject key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EB2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:54:52 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328510 IP: 102.38.64.0/18 IP: 102.217.176.0/22 IP: 2c0f:ede8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16050 (0x3eb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:54:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:cf:5c:34:b8:8d:5f:4a:df:d9:8f:76:09: 82:e4:ab:f1:59:f8:43:87:ff:f0:23:fb:02:af:73: ab:4a:df:05:d8:99:02:42:3f:11:73:e9:d5:1e:27: ad:0b:eb:4b:8d:b0:a5:fb:1f:92:dc:f4:bc:68:d5: 45:8f:e9:6b:3b:d4:cd:81:c7:52:b3:f2:8f:61:9c: 68:5c:63:c9:7e:4d:7a:c3:80:be:61:d1:8d:09:12: a6:6a:d6:39:2c:09:5a:48:76:b0:c3:87:7f:d3:27: 56:5e:01:11:68:41:57:53:13:ae:a3:ba:a4:51:1a: 24:9d:1a:83:ef:43:b5:31:74:35:fe:85:95:41:63: 36:71:e6:ea:d3:40:3e:46:0d:6d:c9:45:7d:94:a1: b5:03:dc:6d:a9:9f:28:42:29:55:8d:68:e8:84:00: 59:96:71:ec:16:fa:48:63:4a:4a:0a:68:86:22:d7: 5a:77:7f:c8:09:51:df:6f:8c:55:bd:65:00:59:7c: f8:22:20:80:8f:dd:a1:a1:c7:63:3e:d4:6d:37:7b: 9a:43:83:f1:d8:78:1d:88:3c:0d:b2:71:0c:d9:82: fb:f1:da:fc:69:52:d9:ab:ec:86:7e:eb:d5:f0:b5: 84:63:95:b1:60:23:36:03:81:21:c5:a0:b7:1e:25: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328510 sbgp-ipAddrBlock: critical IPv4: 102.38.64.0/18 102.217.176.0/22 IPv6: 2c0f:ede8::/32 Signature Algorithm: sha256WithRSAEncryption 52:c5:6a:87:40:18:62:fb:d0:95:29:25:47:96:d5:89:05:0c: 6f:97:64:f2:53:24:ea:1b:86:a9:96:9f:a6:87:d0:b7:69:db: 7b:e0:0e:6f:53:bc:a1:5a:ee:5d:ce:44:8a:fc:ee:30:3c:05: 58:4c:45:00:7e:b2:d5:0e:ed:d2:b8:a5:1b:4b:a7:97:94:f3: ee:9d:f2:ff:6a:a0:1a:35:d4:81:1d:a7:9e:3e:93:9d:f6:01: 6a:d5:16:11:9d:c3:9a:71:0f:ce:6e:17:e6:6e:bc:54:b4:c0: 0a:bf:91:68:15:b4:9d:a9:b5:97:dc:33:e0:99:e6:ca:d6:49: 9e:e6:ad:62:14:d5:65:37:f0:5e:0c:8c:cb:ae:d4:d4:83:4a: 6c:97:49:31:7f:cd:e8:b3:c6:9f:fd:e2:75:90:3a:09:86:03: 41:22:d8:f7:79:d4:b9:78:62:2e:2b:dd:c8:88:05:8b:7a:aa: 84:2f:d7:22:75:f2:04:48:dd:2f:c2:a0:ac:5c:4f:5f:1c:06: c3:76:d7:12:85:25:c7:cf:45:6b:78:bc:88:e9:52:0d:d9:a7: 85:75:92:92:3a:a7:5a:91:d6:06:cd:ef:8a:fd:53:6b:ff:75: 1c:a6:d4:21:7d:75:30:b7:b1:df:77:0b:e9:84:3f:1a:0a:c2: e8:18:54:b5 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICPrIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDU0NTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU5NEQ3QUYxMTAvBgNVBAUTKDZGODBDMEExOTA3NjgwRDk3OTAwREY0 NTFDRDU1NEQ3RkFEQkNDNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Ac9cNLiNX0rf2Y92CYLkq/FZ+EOH//Aj+wKvc6tK3wXYmQJCPxFz6dUeJ60L 60uNsKX7H5Lc9Lxo1UWP6Ws71M2Bx1Kz8o9hnGhcY8l+TXrDgL5h0Y0JEqZq1jks CVpIdrDDh3/TJ1ZeARFoQVdTE66juqRRGiSdGoPvQ7UxdDX+hZVBYzZx5urTQD5G DW3JRX2UobUD3G2pnyhCKVWNaOiEAFmWcewW+khjSkoKaIYi11p3f8gJUd9vjFW9 ZQBZfPgiIICP3aGhx2M+1G03e5pDg/HYeB2IPA2ycQzZgvvx2vxpUtmr7IZ+69Xw tYRjlbFgIzYDgSHFoLceJYihAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUb4DAoZB2 gNl5AN9FHNVU1/rbzGYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFOTRENy80MkQ0MjcwOEQyODUx MUVDOTJFRDk3QUZGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTk0RDcvNDJENDI3MDhEMjg1MTFFQzkyRUQ5N0FGRjEyMjI0NjgvYjREQW9a QjJnTmw1QU45RkhOVlUxX3JiekdZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAz4wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAZmJkADBAJm2bAwDQQC AAIwBwMFACwP7egwDQYJKoZIhvcNAQELBQADggEBAFLFaodAGGL70JUpJUeW1YkF DG+XZPJTJOobhqmWn6aH0Ldp23vgDm9TvKFa7l3ORIr87jA8BVhMRQB+stUO7dK4 pRtLp5eU8+6d8v9qoBo11IEdp54+k532AWrVFhGdw5pxD85uF+ZuvFS0wAq/kWgV tJ2ptZfcM+CZ5srWSZ7mrWIU1WU38F4MjMuu1NSDSmyXSTF/zeizxp/94nWQOgmG A0Ei2Pd51Ll4Yi4r3ciIBYt6qoQv1yJ18gRI3S/CoKxcT18cBsN21xKFJcfPRWt4 vIjpUg3Zp4V1kpI6p1qR1gbN74r9U2v/dRym1CF9dTC3sd93C+mEPxoKwugYVLU= -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:03 2026 by rpki-client