This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer File: cHofKGrimG32SRDDA05RiafCFt0.cer (raw, json) Hash identifier: x3aoVOGQ7VIt2/z9WQVVCbVQdW6VPNUWxTklkIUmB28= Subject key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 391F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:19:01 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37731 AS: 328137 IP: 102.204.236.0/22 IP: 102.215.236.0/22 IP: 2c0f:f030::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14623 (0x391f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:19:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:ee:27:a2:db:f8:4e:88:62:dd:cc:0f:fc: f8:d0:75:f3:f1:c0:13:29:79:cb:95:44:e0:0b:c4: f7:c9:2a:20:2b:bd:00:ac:c5:0b:97:4f:69:b0:30: 51:d8:7d:9e:ff:0d:d6:61:dd:ab:be:b0:03:57:f5: 31:3d:94:80:67:d4:d0:2c:f7:4e:32:b2:6a:3a:a5: eb:8d:bd:38:70:8a:00:24:e3:c7:04:21:c2:e0:6a: 43:03:9b:e9:1e:ac:68:6f:ac:18:af:e6:1b:ae:03: eb:82:83:08:7b:4f:8e:7b:3f:6e:b3:a6:c4:6b:c2: b8:de:3b:b8:d9:3d:ac:e0:a5:73:b7:b9:2e:66:c8: e5:62:6d:23:90:87:63:77:9b:1c:1c:2f:db:8f:e5: b4:45:11:7c:11:85:23:ca:e8:ba:e4:20:b0:e2:a4: 62:75:db:f6:63:57:a0:2c:3a:ed:81:c4:45:ce:be: 77:00:e2:17:8f:95:c5:96:c3:cc:96:e7:31:0a:5f: 05:e1:1d:61:a1:ff:d9:4b:75:c2:ff:e9:d1:ce:57: 97:ad:f6:b8:ea:5d:8a:e5:c4:01:40:3d:d3:b7:31: 4e:4e:e2:22:48:4f:8a:b8:3f:26:88:0d:3e:2f:0b: c5:e4:40:9d:45:29:5f:c9:ea:1d:51:9b:b6:b6:17: 5b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37731 328137 sbgp-ipAddrBlock: critical IPv4: 102.204.236.0/22 102.215.236.0/22 IPv6: 2c0f:f030::/32 Signature Algorithm: sha256WithRSAEncryption 5d:dc:db:cd:50:89:64:6d:59:c7:dc:6b:2c:86:c2:87:44:24: d9:77:52:d4:48:6a:65:5a:eb:ea:7e:c7:25:6b:53:ad:80:a5: 98:7f:03:6c:db:ce:3e:cc:2c:90:b9:40:87:ed:85:c2:db:9f: 49:fd:c2:4f:4e:26:15:8a:71:e1:86:a0:7b:76:d3:be:a2:17: 23:e5:92:b5:7c:c3:11:3a:51:49:96:41:35:a4:82:3b:e5:5c: a4:00:74:2b:e0:63:4f:b6:2b:8d:3a:f7:87:80:05:6b:85:72: f8:5f:03:40:1e:60:21:0e:59:c9:b9:38:28:e3:02:65:23:21: d6:b9:a0:88:57:ea:d8:ed:2d:12:d6:67:52:35:4f:5a:9f:d4: 40:6e:21:e0:31:c7:00:d2:b4:a9:07:27:64:74:ce:25:d8:e2: f7:83:56:44:b9:ba:dc:3c:95:ec:e6:08:a1:39:1e:e4:0c:c3: 64:c1:61:36:8b:9b:78:7a:d4:7a:a2:34:5d:ce:e5:20:5f:5f: 2b:31:6f:2d:88:55:d5:a7:f1:ab:bb:e8:61:2e:e4:63:42:35: 13:72:78:93:e1:b1:e6:95:26:52:b7:51:d1:2a:dc:1d:f3:5f: 37:87:b8:f6:2d:fb:e6:d4:68:77:d9:b6:04:8e:ad:c4:9c:2d: c4:05:63:74 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICOR8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTE5MDFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ0REFFQUYxMTAvBgNVBAUTKDcwN0ExRjI4NkFFMjk4NkRGNjQ5MTBD MzAzNEU1MTg5QTdDMjE2REQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrYO4notv4Tohi3cwP/PjQdfPxwBMpecuVROALxPfJKiArvQCsxQuXT2mwMFHY fZ7/DdZh3au+sANX9TE9lIBn1NAs904ysmo6peuNvThwigAk48cEIcLgakMDm+ke rGhvrBiv5huuA+uCgwh7T457P26zpsRrwrjeO7jZPazgpXO3uS5myOVibSOQh2N3 mxwcL9uP5bRFEXwRhSPK6LrkILDipGJ12/ZjV6AsOu2BxEXOvncA4hePlcWWw8yW 5zEKXwXhHWGh/9lLdcL/6dHOV5et9rjqXYrlxAFAPdO3MU5O4iJIT4q4PyaIDT4v C8XkQJ1FKV/J6h1Rm7a2F1sdAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUcHofKGri mG32SRDDA05RiafCFt0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NERBRS9GNzFFNzY1NDk3MDQx MUVCQjkzNjM3MzBGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhBRUEyMjgvY0hvZktH cmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAk2MCAwUByTA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAmbM7AMEAmbX 7DANBAIAAjAHAwUALA/wMDANBgkqhkiG9w0BAQsFAAOCAQEAXdzbzVCJZG1Zx9xr LIbCh0Qk2XdS1EhqZVrr6n7HJWtTrYClmH8DbNvOPswskLlAh+2FwtufSf3CT04m FYpx4Yage3bTvqIXI+WStXzDETpRSZZBNaSCO+VcpAB0K+BjT7YrjTr3h4AFa4Vy +F8DQB5gIQ5Zybk4KOMCZSMh1rmgiFfq2O0tEtZnUjVPWp/UQG4h4DHHANK0qQcn ZHTOJdji94NWRLm63DyV7OYIoTke5AzDZMFhNoubeHrUeqI0Xc7lIF9fKzFvLYhV 1afxq7voYS7kY0I1E3J4k+Gx5pUmUrdR0SrcHfNfN4e49i375tRod9m2BI6txJwt xAVjdA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:59:01 2026 by rpki-client