This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ffau-nWRitW0DplWXglmq0Pb4Yg.cer File: ffau-nWRitW0DplWXglmq0Pb4Yg.cer (raw, json) Hash identifier: Hje3myZjthSdKv4dhEqj9ecWw3NxxCQgLLPeQ7sTemQ= Subject key identifier: 7D:F6:AE:FA:75:91:8A:D5:B4:0E:99:56:5E:09:66:AB:43:DB:E1:88 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F09 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:09:59 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.222.88.0/22 IP: 2c0f:e8e8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16137 (0x3f09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:09:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F64ABAF, serialNumber=7DF6AEFA75918AD5B40E99565E0966AB43DBE188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:3f:4f:10:11:d4:c0:e8:66:92:43:3c:fc: 60:7a:aa:88:66:a0:05:4a:79:9b:cf:ce:7f:b4:4f: fd:0b:a1:8b:55:0c:a1:79:b0:3b:38:9e:99:da:cb: 02:48:74:ec:d8:ec:46:1f:1a:2f:16:50:4e:5d:56: f7:36:b7:84:43:6d:91:d3:a8:a0:ca:89:85:a2:23: dc:ce:77:1d:e8:6f:29:d5:12:74:62:04:96:ba:87: 0c:e3:7e:41:64:ef:22:e4:25:dc:58:6f:72:3e:71: 95:fc:11:80:7e:56:8b:db:a1:12:e4:5f:cc:d2:9f: ce:2e:b6:89:76:5c:b4:2d:27:73:21:8c:d6:9f:7b: ab:1b:85:95:45:f5:01:a4:75:9d:a5:cf:79:16:be: 01:ed:4b:46:4f:01:43:ea:9c:40:a9:06:2e:90:d9: bb:9d:54:9f:71:96:d5:4e:54:3e:98:76:e3:c1:6f: dc:dc:ff:69:aa:e1:f4:cf:09:01:93:96:1f:bf:3d: 14:56:38:b9:87:7e:23:ae:71:26:2e:ed:22:56:09: a1:9b:23:61:5b:e3:3f:02:98:00:4f:41:d3:7a:4a: 17:4b:84:b7:c0:ae:f9:ba:f9:a1:65:6f:2b:f8:25: a1:4b:ad:e8:d9:bc:af:e0:af:5a:df:9d:07:d4:10: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F6:AE:FA:75:91:8A:D5:B4:0E:99:56:5E:09:66:AB:43:DB:E1:88 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.mft sbgp-ipAddrBlock: critical IPv4: 102.222.88.0/22 IPv6: 2c0f:e8e8::/32 Signature Algorithm: sha256WithRSAEncryption 89:41:bd:c3:b8:cc:65:a0:1e:7b:8b:df:8f:a0:ee:39:17:db: 62:ca:8b:ce:2a:0d:c7:60:62:3f:15:55:b9:eb:db:c4:7c:4c: 1b:39:6c:4f:6e:7a:4a:ce:19:82:57:bd:f1:69:dc:fe:7f:e9: 52:a3:d9:a6:7a:eb:01:cc:23:bc:23:f9:16:ef:17:1b:c1:5c: 88:64:50:be:8b:7e:5e:5d:15:bd:92:23:49:3d:cf:b0:06:8d: 3d:1e:19:92:14:b4:e6:d2:5b:48:74:da:41:52:e4:36:4f:8f: 84:22:5e:b8:cb:61:ff:b8:5a:b2:ba:37:27:05:59:89:05:64: 3b:c7:e2:1f:d5:3a:74:84:3b:21:1a:e6:0b:be:d9:10:06:cd: ee:7b:a4:81:49:90:f8:b7:e5:c9:8c:3c:79:7a:4e:fc:b8:2a: 6e:34:99:0f:2f:a7:77:94:e7:25:d1:1b:d7:74:7f:28:16:86: 88:f6:3e:1b:76:6d:db:c6:0f:80:64:b7:9a:17:36:dd:82:df: 76:c2:3a:3b:ce:a7:3f:e6:cd:a9:a0:08:e6:01:b8:58:71:e4: 97:5c:b7:51:de:a1:44:5b:19:b6:01:2c:79:26:22:96:cb:73: e8:41:c4:9f:de:2e:aa:3b:67:b2:af:cb:94:6e:ba:f6:3c:ee: af:c6:f6:dd -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICPwkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTA5NTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY2NEFCQUYxMTAvBgNVBAUTKDdERjZBRUZBNzU5MThBRDVCNDBFOTk1 NjVFMDk2NkFCNDNEQkUxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCKT9PEBHUwOhmkkM8/GB6qohmoAVKeZvPzn+0T/0LoYtVDKF5sDs4npnaywJI dOzY7EYfGi8WUE5dVvc2t4RDbZHTqKDKiYWiI9zOdx3obynVEnRiBJa6hwzjfkFk 7yLkJdxYb3I+cZX8EYB+VovboRLkX8zSn84utol2XLQtJ3MhjNafe6sbhZVF9QGk dZ2lz3kWvgHtS0ZPAUPqnECpBi6Q2budVJ9xltVOVD6YduPBb9zc/2mq4fTPCQGT lh+/PRRWOLmHfiOucSYu7SJWCaGbI2Fb4z8CmABPQdN6ShdLhLfArvm6+aFlbyv4 JaFLrejZvK/gr1rfnQfUELHlAgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUffau+nWR itW0DplWXglmq0Pb4YgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNjRBQi9EQ0NBODE5NkMyMTgx MUVCQjFFMzVFNzJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjY0QUIvRENDQTgxOTZDMjE4MTFFQkIxRTM1RTcyRjhBRUEyMjgvZmZhdS1u V1JpdFcwRHBsV1hnbG1xMFBiNFlnLm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbeWDANBAIAAjAHAwUALA/o6DANBgkqhkiG9w0BAQsFAAOCAQEAiUG9 w7jMZaAee4vfj6DuORfbYsqLzioNx2BiPxVVuevbxHxMGzlsT256Ss4Zgle98Wnc /n/pUqPZpnrrAcwjvCP5Fu8XG8FciGRQvot+Xl0VvZIjST3PsAaNPR4ZkhS05tJb SHTaQVLkNk+PhCJeuMth/7hasro3JwVZiQVkO8fiH9U6dIQ7IRrmC77ZEAbN7nuk gUmQ+LflyYw8eXpO/LgqbjSZDy+nd5TnJdEb13R/KBaGiPY+G3Zt28YPgGS3mhc2 3YLfdsI6O86nP+bNqaAI5gG4WHHkl1y3Ud6hRFsZtgEseSYilstz6EHEn94uqjtn sq/LlG669jzur8b23Q== -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:33 2026 by rpki-client