This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer File: eRR9PW5TftaH0IV7r4SSgRj9pOU.cer (raw, json) Hash identifier: huYllT1+SuvrNW2aFq1LtHQNWTjxooKoo6qtFjkbQ8A= Subject key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BA5 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:54:14 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329395 IP: 102.209.244.0/22 IP: 2c0f:6b40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15269 (0x3ba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:54:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:30:a6:7b:e7:21:f7:98:9e:d4:9f:4b:f1: f1:46:8c:40:bc:00:35:f5:f9:cf:63:51:f3:65:aa: ea:c2:fd:2b:71:80:58:f2:98:89:76:74:27:34:71: c8:32:a0:7d:f6:26:99:c0:a4:4b:49:29:f0:92:0b: b8:e9:31:52:dc:e9:9e:7f:a8:34:6a:93:10:2c:56: 55:5b:ea:1e:09:4d:26:b7:0a:78:2f:38:76:39:3d: 50:8e:8e:57:b6:0a:1d:67:5b:b2:d3:1a:1c:85:b7: 61:bf:a8:b5:73:87:f5:9c:28:cc:00:77:24:6b:3b: df:ca:3e:99:ec:25:ff:37:e4:b0:75:d6:1f:c3:b9: cf:95:90:d7:46:fe:22:27:9d:fe:cf:c4:11:fa:36: 04:2c:7a:41:a0:7f:97:7a:9a:b6:03:03:f7:48:a2: 8b:ec:23:bb:d8:25:6d:a3:03:83:97:2c:35:b4:8a: a0:82:88:77:95:2c:b8:74:10:b9:d9:b0:91:3b:a1: 7d:af:4e:13:6e:5f:20:b4:18:bb:c4:b3:c2:96:3a: 56:f0:96:70:35:4f:49:6d:65:2f:2b:3f:02:b1:b2: c6:dc:66:45:48:80:4a:13:dd:86:65:9c:5b:1e:0d: 8f:2a:39:8b:e1:13:fb:2d:2a:d6:94:8f:16:07:27: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329395 sbgp-ipAddrBlock: critical IPv4: 102.209.244.0/22 IPv6: 2c0f:6b40::/32 Signature Algorithm: sha256WithRSAEncryption b8:04:f1:b8:5a:70:6a:8a:90:7e:0b:51:c2:f1:7a:6d:4a:35: 54:00:0f:a3:8a:aa:a5:ae:e8:75:82:af:a8:2a:bc:5d:44:76: a0:3e:2d:25:0d:61:97:d2:a1:50:d9:a5:bb:4b:e6:82:23:8a: b9:cb:8c:55:6b:5f:99:74:c0:4f:22:ba:c1:c0:d2:39:ac:3d: 95:59:54:2a:78:81:05:90:f9:92:86:99:3d:63:0b:b0:0b:42: 72:3d:8d:b6:ab:3e:7e:a7:d1:50:e0:75:db:5e:d4:89:ae:09: 48:b7:4a:de:93:1f:f5:1d:a5:72:20:ad:8c:64:11:96:9f:08: c3:3b:69:dc:7f:97:90:1e:0f:88:e7:a6:3a:f8:6a:df:db:e6: 15:4c:4c:dc:84:0b:da:0a:50:0c:60:2d:71:80:ba:51:0c:55: b3:3e:2f:10:18:20:45:b5:a3:6f:4c:28:64:d8:dd:33:ab:2f: 18:c2:c1:3b:a8:5f:9f:66:99:2d:72:f3:ab:6b:bf:8f:78:9f: ca:9f:b5:e3:31:da:62:69:f6:30:04:63:12:32:ee:d5:67:c2: 43:bc:38:8f:49:24:d5:fe:7d:c9:26:48:7b:00:58:68:5d:75: 6c:ff:d8:2c:bd:45:c1:9f:43:27:9a:a6:cd:69:a1:24:06:98: ae:73:6d:37 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO6UwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU0MTRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg4MTYzQUYxMTAvBgNVBAUTKDc5MTQ3RDNENkU1MzdFRDY4N0QwODU3 QkFGODQ5MjgxMThGREE0RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWnDCme+ch95ie1J9L8fFGjEC8ADX1+c9jUfNlqurC/StxgFjymIl2dCc0ccgy oH32JpnApEtJKfCSC7jpMVLc6Z5/qDRqkxAsVlVb6h4JTSa3CngvOHY5PVCOjle2 Ch1nW7LTGhyFt2G/qLVzh/WcKMwAdyRrO9/KPpnsJf835LB11h/Duc+VkNdG/iIn nf7PxBH6NgQsekGgf5d6mrYDA/dIoovsI7vYJW2jA4OXLDW0iqCCiHeVLLh0ELnZ sJE7oX2vThNuXyC0GLvEs8KWOlbwlnA1T0ltZS8rPwKxssbcZkVIgEoT3YZlnFse DY8qOYvhE/stKtaUjxYHJ0txAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUeRR9PW5T ftaH0IV7r4SSgRj9pOUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4ODE2My8zOTgyQTc0RUNCQzkx MUVFQTdGNUY1NzY3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODgxNjMvMzk4MkE3NEVDQkM5MTFFRUE3RjVGNTc2Nzc1NDEyRTYvZVJSOVBX NVRmdGFIMElWN3I0U1NnUmo5cE9VLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBrMwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0fQwDQQCAAIwBwMF ACwPa0AwDQYJKoZIhvcNAQELBQADggEBALgE8bhacGqKkH4LUcLxem1KNVQAD6OK qqWu6HWCr6gqvF1EdqA+LSUNYZfSoVDZpbtL5oIjirnLjFVrX5l0wE8iusHA0jms PZVZVCp4gQWQ+ZKGmT1jC7ALQnI9jbarPn6n0VDgddte1ImuCUi3St6TH/UdpXIg rYxkEZafCMM7adx/l5AeD4jnpjr4at/b5hVMTNyEC9oKUAxgLXGAulEMVbM+LxAY IEW1o29MKGTY3TOrLxjCwTuoX59mmS1y86trv494n8qfteMx2mJp9jAEYxIy7tVn wkO8OI9JJNX+fckmSHsAWGhddWz/2Cy9RcGfQyeaps1poSQGmK5zbTc= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:07 2026 by rpki-client