This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer File: fzc4orKLb6wO4WjazaECCZH2Xv8.cer (raw, json) Hash identifier: zKH08+i+g8VyyRy0Uen6stvq3NwCABwHCfuUwLWzSao= Subject key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DE1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:21:28 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328987 IP: 102.206.112.0/22 IP: 102.217.64.0/22 IP: 2c0f:2f00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15841 (0x3de1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:21:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:fc:15:26:d4:3f:56:d8:e6:0c:90:7f:bc: bf:24:42:a9:29:c3:4c:16:12:0a:ad:ed:25:c0:91: 18:2f:8f:0e:06:51:b2:6a:09:ef:8d:37:43:06:34: 1b:c2:e2:6b:66:73:45:ee:5c:1c:aa:4b:88:84:2a: db:b0:dc:1d:e6:80:dd:f1:16:d4:8c:2c:48:cb:a1: 8f:66:c2:15:ca:bf:4c:70:e1:a2:7e:04:23:60:4f: 24:3c:27:eb:08:e4:bd:ab:f4:83:66:75:c9:2f:f9: 31:e7:15:e6:d8:5d:a5:04:ea:07:0a:fc:92:11:02: 6d:82:dd:11:a0:4a:a6:d3:3d:17:09:f6:e8:a5:41: 7b:13:c2:10:8a:58:b2:d7:99:23:aa:e4:80:87:59: ce:55:e2:5b:6b:65:e1:4a:0f:ee:59:6d:5b:09:55: 46:55:e0:46:5d:34:10:b8:8e:85:cd:61:08:bc:82: 30:29:59:bc:2f:4a:ad:ff:53:1b:95:98:11:16:0f: fe:a2:fd:16:19:4d:13:a6:8f:f1:f9:c5:4d:c0:d9: bd:4e:b1:ae:ea:af:b0:b8:77:7a:bb:cc:4b:0b:72: 89:42:d5:75:4d:5c:12:8c:d2:7c:a5:9d:9f:5b:cf: 62:98:6f:0d:3a:73:38:55:2b:4e:60:03:20:af:c2: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328987 sbgp-ipAddrBlock: critical IPv4: 102.206.112.0/22 102.217.64.0/22 IPv6: 2c0f:2f00::/32 Signature Algorithm: sha256WithRSAEncryption 72:77:b3:7d:8a:34:3f:28:f5:98:ff:9b:eb:b6:68:62:ed:b9: 17:98:1e:44:a4:94:eb:6f:cf:09:cf:34:d3:7f:aa:9b:51:8d: 29:37:06:d3:51:1d:5e:04:70:35:0e:87:5a:0e:e8:8f:32:0e: ba:94:47:d5:e8:a9:c1:f5:b1:cd:d8:d6:9c:2c:4e:af:a6:b7: 28:9d:51:6f:73:15:55:35:8b:05:c3:8c:24:80:a7:fc:90:2c: 49:41:3b:38:b4:1b:ea:c8:6d:92:6c:22:73:de:77:22:9b:41: c5:fa:98:09:ff:c0:c4:2a:77:02:30:9a:43:d9:71:09:b0:e1: b5:47:fa:f5:67:45:d0:51:bf:2d:1c:dc:ac:83:36:46:b3:9b: 5e:55:eb:42:30:e1:e9:3f:df:81:29:37:57:1f:fc:4b:3d:45: 60:80:92:3d:33:e9:61:98:c5:f0:d7:46:fb:2c:8e:bf:e2:ed: 51:53:1a:7e:e1:1f:b1:6b:39:10:3d:18:08:87:c4:6a:c8:08: 6a:0e:f7:07:8e:6f:15:7d:8b:6c:f9:bd:e4:9a:ac:13:90:e5: 58:99:35:7b:fe:d3:de:73:a0:67:7d:a4:42:14:24:bf:93:e3: 99:16:89:85:12:7e:3b:ec:18:20:96:b2:3c:dd:6f:48:8d:19: 87:75:56:e1 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICPeEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDIxMjhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkNBRDAzQUYxMTAvBgNVBAUTKDdGMzczOEEyQjI4QjZGQUMwRUUxNjhE QUNEQTEwMjA5OTFGNjVFRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgYPwVJtQ/VtjmDJB/vL8kQqkpw0wWEgqt7SXAkRgvjw4GUbJqCe+NN0MGNBvC 4mtmc0XuXByqS4iEKtuw3B3mgN3xFtSMLEjLoY9mwhXKv0xw4aJ+BCNgTyQ8J+sI 5L2r9INmdckv+THnFebYXaUE6gcK/JIRAm2C3RGgSqbTPRcJ9uilQXsTwhCKWLLX mSOq5ICHWc5V4ltrZeFKD+5ZbVsJVUZV4EZdNBC4joXNYQi8gjApWbwvSq3/UxuV mBEWD/6i/RYZTROmj/H5xU3A2b1Osa7qr7C4d3q7zEsLcolC1XVNXBKM0nylnZ9b z2KYbw06czhVK05gAyCvwr5fAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUfzc4orKL b6wO4WjazaECCZH2Xv8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQUQwMy85MENGOUNDQTFGNDIx MUVFQjE4MTg0NjE0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Q0FEMDMvOTBDRjlDQ0ExRjQyMTFFRUIxODE4NDYxNEFEOUU2RkMvZnpjNG9y S0xiNndPNFdqYXphRUNDWkgyWHY4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBRswNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmznADBAJm2UAwDQQC AAIwBwMFACwPLwAwDQYJKoZIhvcNAQELBQADggEBAHJ3s32KND8o9Zj/m+u2aGLt uReYHkSklOtvzwnPNNN/qptRjSk3BtNRHV4EcDUOh1oO6I8yDrqUR9XoqcH1sc3Y 1pwsTq+mtyidUW9zFVU1iwXDjCSAp/yQLElBOzi0G+rIbZJsInPedyKbQcX6mAn/ wMQqdwIwmkPZcQmw4bVH+vVnRdBRvy0c3KyDNkazm15V60Iw4ek/34EpN1cf/Es9 RWCAkj0z6WGYxfDXRvssjr/i7VFTGn7hH7FrORA9GAiHxGrICGoO9weObxV9i2z5 veSarBOQ5ViZNXv+095zoGd9pEIUJL+T45kWiYUSfjvsGCCWsjzdb0iNGYd1VuE= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:53 2026 by rpki-client