This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer File: dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer (raw, json) Hash identifier: 3/birxol+cyBaDQuq87kcXJUxuHYd2/uXscs6xFl8Vs= Subject key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AF5 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:29:24 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329532 IP: 102.205.240.0/22 IP: 2c0f:fc78::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15093 (0x3af5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:29:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:a9:46:0d:51:a6:e6:90:f0:81:d5:75:cc: aa:37:21:d4:ee:be:e6:13:97:b6:b6:a6:a9:ef:04: 8c:e3:f8:09:91:1b:ff:fd:36:b2:a7:dc:18:9b:af: 06:65:2d:fc:28:77:e9:e3:34:93:c8:94:e2:f0:fc: f3:75:8e:dd:52:e3:93:fa:7f:1b:b9:68:1e:9d:fe: 9f:d4:29:e1:a2:7c:40:ab:be:f0:3e:ce:30:95:27: 4f:14:46:b5:e7:6d:b9:19:80:bd:9c:8b:1c:f8:3a: 14:79:e4:e0:10:12:33:a4:9f:d4:10:11:ee:e6:7c: 22:aa:87:98:92:6e:3b:be:be:a9:0a:79:33:dc:7e: 0f:2e:ee:2e:fa:90:70:62:e8:fd:4f:f2:2f:81:9e: 36:9a:13:bc:47:64:ed:83:2b:c2:22:e5:7e:ce:a6: cb:48:80:b3:a3:25:bf:94:3f:4c:bc:5c:db:79:e8: 71:46:36:eb:71:9c:1b:bd:03:a4:b0:ce:42:59:38: 55:38:8c:19:ad:02:26:78:cb:09:e7:50:2f:d8:fc: dd:6b:42:01:77:c3:e1:cb:2b:4b:27:f9:86:ce:6e: eb:08:13:38:59:bf:19:12:b4:89:a2:53:31:aa:e0: b3:24:6e:ac:94:23:cd:73:04:20:a3:ac:9e:74:29: a9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329532 sbgp-ipAddrBlock: critical IPv4: 102.205.240.0/22 IPv6: 2c0f:fc78::/32 Signature Algorithm: sha256WithRSAEncryption 28:f4:cf:49:77:c5:c2:77:4e:f6:27:70:a2:12:b5:dc:95:85: ff:cf:21:b0:b2:9e:e0:54:69:a5:68:e5:38:87:73:04:bf:e5: 56:8f:4f:ea:76:83:c7:a1:71:ae:f5:6a:63:21:8a:49:23:70: ee:10:df:05:7f:bc:6e:1a:21:e7:98:c1:0b:39:c1:0e:af:a3: 8c:b3:84:e7:ae:5e:61:81:c5:92:f2:90:52:2e:96:7d:03:c7: 94:4c:84:60:e7:8d:ab:0b:5b:c6:ee:36:01:e2:6b:4d:69:56: f8:60:ba:f8:3d:a4:b0:11:b0:21:b5:49:4c:db:02:37:b8:da: 20:a4:e2:aa:3b:8e:81:57:91:0f:43:d4:f0:05:4e:f5:51:00: b8:31:f0:38:9e:14:6e:16:a8:6c:a7:61:43:e9:1c:1f:4e:01: b2:8c:dd:48:a0:c5:d6:e5:7a:c1:d4:69:5d:94:4c:e9:92:4d: 4d:1c:0f:d4:b3:38:51:21:13:4b:3c:39:28:7e:d2:d4:c1:74: 27:d2:65:ac:88:ad:31:62:ca:3c:3c:5b:20:23:7c:f3:46:5e: d6:d3:af:04:e8:c3:bd:cb:f4:91:30:97:15:84:4e:33:52:27: 18:82:63:3e:67:ae:78:f4:c2:ea:df:6e:b7:68:65:1b:13:49: e9:32:d6:ff -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOvUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjI5MjRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc2MTM0QUYxMTAvBgNVBAUTKDc0QjAzQjhGRDhGNTNCRUY0ODg3Qjc4 Njk4RjlFQ0FCMUIxRjY5QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo5alGDVGm5pDwgdV1zKo3IdTuvuYTl7a2pqnvBIzj+AmRG//9NrKn3BibrwZl Lfwod+njNJPIlOLw/PN1jt1S45P6fxu5aB6d/p/UKeGifECrvvA+zjCVJ08URrXn bbkZgL2cixz4OhR55OAQEjOkn9QQEe7mfCKqh5iSbju+vqkKeTPcfg8u7i76kHBi 6P1P8i+BnjaaE7xHZO2DK8Ii5X7OpstIgLOjJb+UP0y8XNt56HFGNutxnBu9A6Sw zkJZOFU4jBmtAiZ4ywnnUC/Y/N1rQgF3w+HLK0sn+YbObusIEzhZvxkStImiUzGq 4LMkbqyUI81zBCCjrJ50KanPAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUdLA7j9j1 O+9Ih7eGmPnsqxsfabAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NjEzNC8zMzYyQzFBQTU2N0Ux MUYwQjAxNEY5REVEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzYxMzQvMzM2MkMxQUE1NjdFMTFGMEIwMTRGOURFREFFNEVDOUMvZExBN2o5 ajFPLTlJaDdlR21QbnNxeHNmYWJBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBzwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzfAwDQQCAAIwBwMF ACwP/HgwDQYJKoZIhvcNAQELBQADggEBACj0z0l3xcJ3TvYncKIStdyVhf/PIbCy nuBUaaVo5TiHcwS/5VaPT+p2g8ehca71amMhikkjcO4Q3wV/vG4aIeeYwQs5wQ6v o4yzhOeuXmGBxZLykFIuln0Dx5RMhGDnjasLW8buNgHia01pVvhguvg9pLARsCG1 SUzbAje42iCk4qo7joFXkQ9D1PAFTvVRALgx8DieFG4WqGynYUPpHB9OAbKM3Uig xdblesHUaV2UTOmSTU0cD9SzOFEhE0s8OSh+0tTBdCfSZayIrTFiyjw8WyAjfPNG XtbTrwTow73L9JEwlxWETjNSJxiCYz5nrnj0wurfbrdoZRsTSeky1v8= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:50 2026 by rpki-client