This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer File: dUkJrgeKY-ifABHj0kq7f951hnc.cer (raw, json) Hash identifier: IDlHDAeU7kL95un+pbaoig2HO2oZMcQyEEwI6Aa4s1c= Subject key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F3E Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:18:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.205.96.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16190 (0x3f3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:18:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:c2:04:f6:af:8e:46:69:01:70:a7:bb:f3: 71:a2:bc:44:14:f1:00:fc:49:4b:07:fe:c0:d0:34: 78:fc:4e:3e:07:66:77:fa:56:4e:99:99:13:47:f6: 6e:69:ee:2f:91:40:c0:f8:33:96:86:a4:f6:8c:e0: 82:a7:02:3b:94:db:5d:4e:34:e2:36:bb:36:a3:de: d5:ec:30:c6:17:02:b5:5b:15:c3:99:12:9a:68:8d: f0:9b:73:02:31:33:c7:47:01:46:f7:bd:21:2f:73: 7b:ea:35:65:9c:ab:ce:14:4e:43:33:81:77:ef:70: 0a:a7:1e:69:b7:0f:e8:94:57:52:c9:7e:fc:06:7d: fe:90:ad:59:fa:e3:f8:46:6c:b6:7a:8d:e0:0a:23: 8c:27:46:36:de:67:df:d0:96:eb:33:cd:d6:07:69: be:b7:b7:a4:e8:1c:20:2c:40:5f:3c:f7:a4:15:3d: 76:20:bb:11:ab:73:8c:b8:a1:f7:70:a5:7d:af:53: 0d:3e:c2:05:02:46:e8:8b:42:28:1c:66:d6:9f:75: 7f:dd:20:af:c0:c5:6b:2f:d9:a6:57:19:8c:dd:7a: bd:f8:72:cb:66:a6:57:2e:f4:4a:8c:75:9b:30:f0: 84:de:36:79:ee:17:71:7c:1c:71:66:54:22:33:ec: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft sbgp-ipAddrBlock: critical IPv4: 102.205.96.0/22 Signature Algorithm: sha256WithRSAEncryption b1:1d:77:1f:5b:77:46:65:7a:8d:0f:b1:30:8e:e5:00:6e:08: fa:49:45:34:72:bb:38:aa:96:30:b9:86:67:b1:96:8d:eb:44: cf:fc:a9:6d:7d:91:38:fb:18:da:20:74:5f:9c:b2:db:a7:4c: f6:4e:c1:70:fc:33:c5:15:44:5b:eb:17:c8:50:6a:16:fd:fa: 1e:c8:e9:0f:73:e2:48:5e:64:4c:d7:61:5c:9c:80:bd:5c:d0: d1:98:47:85:ee:d8:0f:a2:7b:ff:2c:4a:d5:1d:96:f6:f0:9a: 7f:54:25:a9:47:54:b5:3b:c0:bd:75:6d:35:4e:f8:de:4b:49: 9c:cd:61:57:97:27:5c:47:9c:ca:f4:36:f2:a7:ab:9b:c7:52: 20:d5:79:21:6f:30:42:c0:dc:f5:43:e7:5b:47:24:59:70:64: 08:9d:50:66:b2:6f:eb:35:f5:b2:bd:f0:fc:16:9d:d5:39:5a: 79:61:71:d7:73:18:90:5f:63:66:6f:c2:1f:b6:b5:2e:1e:b1: 6e:10:e9:d0:f6:59:6d:23:c6:3f:81:57:fe:c7:5c:85:e1:51: ce:10:ec:b6:f5:f6:60:f3:09:b4:98:82:83:07:7f:f4:5e:a8: 7d:25:f7:dc:c1:88:30:80:fd:f3:4a:55:df:27:fe:96:ce:70: 41:4b:64:9f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgICPz4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTE4NDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZDNEFBQUYxMTAvBgNVBAUTKDc1NDkwOUFFMDc4QTYzRTg5RjAwMTFF M0QyNEFCQjdGREU3NTg2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv/8IE9q+ORmkBcKe783GivEQU8QD8SUsH/sDQNHj8Tj4HZnf6Vk6ZmRNH9m5p 7i+RQMD4M5aGpPaM4IKnAjuU211ONOI2uzaj3tXsMMYXArVbFcOZEppojfCbcwIx M8dHAUb3vSEvc3vqNWWcq84UTkMzgXfvcAqnHmm3D+iUV1LJfvwGff6QrVn64/hG bLZ6jeAKI4wnRjbeZ9/QluszzdYHab63t6ToHCAsQF8896QVPXYguxGrc4y4ofdw pX2vUw0+wgUCRuiLQigcZtafdX/dIK/AxWsv2aZXGYzder34cstmplcu9EqMdZsw 8ITeNnnuF3F8HHFmVCIz7HtbAgMBAAGjggLvMIIC6zAdBgNVHQ4EFgQUdUkJrgeK Y+ifABHj0kq7f951hncwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQzRBQS80M0E5NjlENDZERkMx MUYwOEEzOURDQzFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkM0QUEvNDNBOTY5RDQ2REZDMTFGMDhBMzlEQ0MxREFFNEVDOUMvZFVrSnJn ZUtZLWlmQUJIajBrcTdmOTUxaG5jLm1mdDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmbNYDANBgkqhkiG9w0BAQsFAAOCAQEAsR13H1t3RmV6jQ+xMI7lAG4I +klFNHK7OKqWMLmGZ7GWjetEz/ypbX2ROPsY2iB0X5yy26dM9k7BcPwzxRVEW+sX yFBqFv36HsjpD3PiSF5kTNdhXJyAvVzQ0ZhHhe7YD6J7/yxK1R2W9vCaf1QlqUdU tTvAvXVtNU743ktJnM1hV5cnXEecyvQ28qerm8dSINV5IW8wQsDc9UPnW0ckWXBk CJ1QZrJv6zX1sr3w/Bad1TlaeWFx13MYkF9jZm/CH7a1Lh6xbhDp0PZZbSPGP4FX /sdcheFRzhDstvX2YPMJtJiCgwd/9F6ofSX33MGIMID980pV3yf+ls5wQUtknw== -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:41 2026 by rpki-client