This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer File: bssXAorVt9tcd32x3OCXh-SVstE.cer (raw, json) Hash identifier: 6GASC8GrguVtxR3FhJaLo0mNvpaSDMP/WeWUKgMWwWw= Subject key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3874 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:52:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328517 IP: 102.69.208.0/22 IP: 102.212.224.0/22 IP: 2c0f:7f80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14452 (0x3874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:52:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3630D7EAF, serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:6f:2c:19:58:1e:e0:11:53:aa:ce:70:8e: 1c:6a:3a:aa:36:3f:fb:50:c0:a5:c2:df:a4:ad:46: a6:e1:c5:ff:33:3e:02:5f:7d:b9:66:af:48:9e:ed: 90:08:95:8c:9c:b7:ea:9d:7f:16:cb:43:f0:11:4a: d8:fc:99:9f:5d:ed:fe:f0:f7:bf:38:bb:35:bb:b6: 11:c2:e4:12:b7:fd:4d:69:6a:f0:2c:4b:bf:14:8e: d4:4a:10:18:f6:5c:7b:73:b6:40:b9:3f:e6:04:7c: 57:9d:2c:a5:ee:0b:50:48:12:e7:4f:16:82:d2:6a: 71:c3:30:fc:1f:45:eb:ea:9c:30:62:b1:5e:a0:3f: 16:21:88:02:ad:2e:2d:f3:4f:8f:aa:fa:44:2b:53: e4:40:7e:9d:6b:fb:e8:d1:80:10:2b:89:2f:e2:a8: 62:71:1d:7e:fd:d5:fb:b0:40:3f:f8:23:dc:64:35: 2c:23:5e:6b:6d:29:00:80:3e:a1:ae:96:70:d7:00: 95:ef:0d:1c:27:af:15:a3:26:46:f9:7d:26:51:fc: 48:c8:e0:6a:3f:00:e2:fe:77:21:a7:05:69:5c:81: d3:39:cc:ba:f4:dd:72:81:c9:19:92:18:fd:31:aa: dd:35:55:68:c1:e9:a7:2d:eb:97:17:a2:b2:27:1c: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328517 sbgp-ipAddrBlock: critical IPv4: 102.69.208.0/22 102.212.224.0/22 IPv6: 2c0f:7f80::/32 Signature Algorithm: sha256WithRSAEncryption 6f:84:e9:ce:b9:b4:92:99:e3:62:97:29:77:e7:28:12:93:29: cd:d4:59:cc:52:f8:0c:ef:9c:83:96:ad:51:96:34:2d:1f:3c: 1d:80:84:e4:8f:43:90:4e:b2:0f:68:c9:df:5f:c8:fd:14:4e: cf:40:fc:2e:60:be:ee:48:40:35:3d:b5:8f:69:a6:90:cd:4b: f8:76:43:fe:b0:1a:87:71:92:23:05:f7:c0:53:3d:49:ff:aa: 12:43:a0:df:85:bc:ad:08:56:a8:78:32:4c:1e:53:f8:06:ea: c0:23:d7:cb:4f:41:b0:84:7d:c1:76:bb:fd:2b:3a:d3:2b:47: 6a:7a:b6:88:aa:67:ad:be:a6:9a:96:6f:f5:59:96:db:f5:16: f2:52:48:4c:4f:d9:20:e6:c7:65:da:6e:db:0a:bf:82:8d:4b: 8f:b8:3d:44:75:f9:32:f0:09:ad:31:f3:98:1c:99:e5:05:3c: 3f:eb:fd:47:76:10:7d:20:69:b5:6e:ff:6a:e5:db:b7:48:0f: fb:56:c0:dc:60:c6:0a:05:2f:36:c4:e5:79:11:3e:31:29:3e: 44:a5:f3:e7:d7:06:d3:e2:46:37:a2:de:cd:1e:f1:f7:98:41: 7e:d7:26:df:45:88:ac:14:6c:68:ce:bc:e1:2c:01:ed:8e:fa: e7:19:3b:6b -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOHQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDUyMTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjMwRDdFQUYxMTAvBgNVBAUTKDZFQ0IxNzAyOEFENUI3REI1Qzc3N0RC MURDRTA5Nzg3RTQ5NUIyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGhm8sGVge4BFTqs5wjhxqOqo2P/tQwKXC36StRqbhxf8zPgJffblmr0ie7ZAI lYyct+qdfxbLQ/ARStj8mZ9d7f7w9784uzW7thHC5BK3/U1pavAsS78UjtRKEBj2 XHtztkC5P+YEfFedLKXuC1BIEudPFoLSanHDMPwfRevqnDBisV6gPxYhiAKtLi3z T4+q+kQrU+RAfp1r++jRgBAriS/iqGJxHX791fuwQD/4I9xkNSwjXmttKQCAPqGu lnDXAJXvDRwnrxWjJkb5fSZR/EjI4Go/AOL+dyGnBWlcgdM5zLr03XKByRmSGP0x qt01VWjB6act65cXorInHLV1AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUbssXAorV t9tcd32x3OCXh+SVstEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMEQ3RS9FMDZEQTUxMDc5NzMx MUVBODJFOTc2ODFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzBEN0UvRTA2REE1MTA3OTczMTFFQTgyRTk3NjgxRjhBRUEyMjgvYnNzWEFv clZ0OXRjZDMyeDNPQ1hoLVNWc3RFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA0UwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmRdADBAJm1OAwDQQC AAIwBwMFACwPf4AwDQYJKoZIhvcNAQELBQADggEBAG+E6c65tJKZ42KXKXfnKBKT Kc3UWcxS+AzvnIOWrVGWNC0fPB2AhOSPQ5BOsg9oyd9fyP0UTs9A/C5gvu5IQDU9 tY9pppDNS/h2Q/6wGodxkiMF98BTPUn/qhJDoN+FvK0IVqh4MkweU/gG6sAj18tP QbCEfcF2u/0rOtMrR2p6toiqZ62+ppqWb/VZltv1FvJSSExP2SDmx2XabtsKv4KN S4+4PUR1+TLwCa0x85gcmeUFPD/r/Ud2EH0gabVu/2rl27dID/tWwNxgxgoFLzbE 5XkRPjEpPkSl8+fXBtPiRjei3s0e8feYQX7XJt9FiKwUbGjOvOEsAe2O+ucZO2s= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:50 2026 by rpki-client